Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
File: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier: NxgcLMcrRDJl/nFR0tjOPxYLKwah4hF0YFxMM/ofjY0=
Subject key identifier: C6:73:E2:01:16:0E:0A:22:3D:56:06:CF:50:9D:81:D7:E3:C9:D7:16
Certificate issuer: /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial: 3F6F15375D97D9D47552D5F7D48067C970544E4B
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
Signing time: Mon 22 Jan 2024 13:46:23 +0000
ROA not before: Mon 22 Jan 2024 13:41:23 +0000
ROA not after: Mon 20 Jan 2025 13:46:23 +0000
asID: 263143
IP address blocks: 191.242.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6f:15:37:5d:97:d9:d4:75:52:d5:f7:d4:80:67:c9:70:54:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Validity
Not Before: Jan 22 13:41:23 2024 GMT
Not After : Jan 20 13:46:23 2025 GMT
Subject: CN=C673E201160E0A223D5606CF509D81D7E3C9D716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:03:2b:23:7e:a8:90:00:07:14:e9:61:13:
59:50:7c:d1:b2:7c:02:07:0d:11:c7:06:4b:2e:a3:
b3:43:3d:03:67:45:37:86:7a:4b:a0:57:f2:74:2a:
04:7a:6f:9f:73:06:94:43:44:ae:33:aa:c9:54:d1:
6c:8c:5f:92:f3:46:ea:c0:fa:be:d4:93:8f:fc:b5:
1c:60:f7:3b:8d:0b:61:6b:b6:ce:4a:bb:33:11:84:
9c:b9:90:57:7f:e9:60:bb:28:84:1a:67:54:0c:c4:
a9:aa:39:ad:6a:db:86:be:01:27:1b:8e:89:36:80:
5f:04:c6:c9:bc:ca:97:06:fb:b8:fe:b4:21:bb:5f:
f3:47:e4:0e:96:8f:1f:02:72:56:d8:c9:03:f3:02:
48:66:77:9f:97:7f:79:ac:93:b1:a0:61:40:6f:06:
67:94:e8:ec:89:f2:5a:3b:33:a3:0b:59:b9:3d:27:
49:bc:a9:a0:9f:08:4d:d3:77:a7:a3:d4:a4:77:62:
45:27:a6:9f:05:ab:2d:a0:67:5e:eb:0e:21:1a:21:
a8:bd:e5:9a:93:fa:b5:d3:6d:a1:46:3f:b8:f6:9d:
c7:78:68:37:5f:37:0a:57:21:fc:0e:50:47:09:68:
06:fe:d2:ad:1a:f4:3b:8a:3f:d9:dd:0b:da:a9:80:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:E2:01:16:0E:0A:22:3D:56:06:CF:50:9D:81:D7:E3:C9:D7:16
X509v3 Authority Key Identifier:
keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.198.0/24
Signature Algorithm: sha256WithRSAEncryption
80:44:37:b9:3a:d9:2e:55:a8:f7:b8:ca:d7:57:b8:c7:c2:67:
16:bc:4f:97:b6:89:20:aa:95:e6:1a:ed:70:d4:fb:29:d1:40:
ea:73:86:e0:d4:3f:ac:32:81:e9:96:21:90:e0:2a:e6:41:7f:
b7:f2:ea:8a:ca:83:fa:b3:d7:d5:56:d5:3b:48:45:38:c0:07:
70:4c:e9:59:35:c8:12:ad:03:48:cc:ff:10:c7:a2:ad:ae:65:
06:88:9d:2a:42:08:32:4c:68:ae:74:0e:78:b4:0a:04:1b:37:
b5:ef:1d:60:f6:34:2e:62:f8:d9:5b:c7:69:e8:32:ba:f7:c2:
98:5d:df:ec:c0:9b:c4:1f:8c:4a:f6:c2:4e:d6:64:73:26:7f:
44:ad:0e:c1:ab:56:33:b7:31:3e:44:19:34:77:6b:8d:da:d9:
3a:7e:de:22:47:65:e4:f0:e6:f0:89:26:7e:18:bf:bd:db:0d:
0f:ec:1c:18:93:48:95:19:b3:bf:52:2c:5b:b1:9e:ab:8e:de:
34:bc:b3:8d:a6:4a:ff:a4:0d:3d:3d:48:9f:f0:78:79:a3:d2:
2d:93:8b:c7:8b:e1:a0:39:e0:56:e3:1d:92:9f:5f:68:41:49:
b7:5b:79:fd:c5:f0:df:d4:00:7a:00:32:3e:ec:68:8b:ec:29:
86:36:af:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUP28VN12X2dR1UtX31IBnyXBUTkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcw
OUUzQUQ2RjAeFw0yNDAxMjIxMzQxMjNaFw0yNTAxMjAxMzQ2MjNaMDMxMTAvBgNV
BAMTKEM2NzNFMjAxMTYwRTBBMjIzRDU2MDZDRjUwOUQ4MUQ3RTNDOUQ3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gQMrI36okAAHFOlhE1lQfNGy
fAIHDRHHBksuo7NDPQNnRTeGekugV/J0KgR6b59zBpRDRK4zqslU0WyMX5LzRurA
+r7Uk4/8tRxg9zuNC2Frts5KuzMRhJy5kFd/6WC7KIQaZ1QMxKmqOa1q24a+AScb
jok2gF8Exsm8ypcG+7j+tCG7X/NH5A6Wjx8CclbYyQPzAkhmd5+Xf3msk7GgYUBv
BmeU6OyJ8lo7M6MLWbk9J0m8qaCfCE3Td6ej1KR3YkUnpp8Fqy2gZ17rDiEaIai9
5ZqT+rXTbaFGP7j2ncd4aDdfNwpXIfwOUEcJaAb+0q0a9DuKP9ndC9qpgJxjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxnPiARYOCiI9VgbPUJ2B1+PJ1xYwHwYDVR0j
BBgwFoAUwsdAFKGwE91L1/VJ2x77VwnjrW8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzAvQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcwOUUzQUQ2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DMkM3NDAxNEExQjAxM0RENEJE
N0Y1NDlEQjFFRkI1NzA5RTNBRDZGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3LzAvMzEz
OTMxMmUzMjM0MzIyZTMxMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzMxMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAL/yxjANBgkqhkiG9w0BAQsFAAOCAQEAgEQ3uTrZ
LlWo97jK11e4x8JnFrxPl7aJIKqV5hrtcNT7KdFA6nOG4NQ/rDKB6ZYhkOAq5kF/
t/LqisqD+rPX1VbVO0hFOMAHcEzpWTXIEq0DSMz/EMeira5lBoidKkIIMkxornQO
eLQKBBs3te8dYPY0LmL42VvHaegyuvfCmF3f7MCbxB+MSvbCTtZkcyZ/RK0OwatW
M7cxPkQZNHdrjdrZOn7eIkdl5PDm8Ikmfhi/vdsND+wcGJNIlRmzv1IsW7Geq47e
NLyzjaZK/6QNPT1In/B4eaPSLZOLx4vhoDngVuMdkp9faEFJt1t5/cXw39QAegAy
Puxoi+wphjavbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org