Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa
File: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier: iauaC8F+4M3drEBXeKVI+aGHni3ql5VgpuRCmFooZPo=
Subject key identifier: 65:4C:1D:0B:80:27:19:2F:EA:B6:74:B9:EB:E0:F0:E0:3C:28:EF:59
Certificate issuer: /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial: 6962D162B0A03AD59F9B6C4EFB23DD0343D9CC5B
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa
Signing time: Mon 22 Jan 2024 13:46:23 +0000
ROA not before: Mon 22 Jan 2024 13:41:23 +0000
ROA not after: Mon 20 Jan 2025 13:46:23 +0000
asID: 263143
IP address blocks: 191.242.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:62:d1:62:b0:a0:3a:d5:9f:9b:6c:4e:fb:23:dd:03:43:d9:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Validity
Not Before: Jan 22 13:41:23 2024 GMT
Not After : Jan 20 13:46:23 2025 GMT
Subject: CN=654C1D0B8027192FEAB674B9EBE0F0E03C28EF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:8e:ed:35:2e:99:f0:8e:58:a7:e7:0e:16:
21:62:30:68:8c:06:66:8b:7f:9b:ec:c6:04:32:c5:
f7:e7:e6:20:5b:05:2b:f9:27:28:c6:c6:ad:d0:d2:
bb:fe:d6:95:08:d2:de:33:95:f1:e6:4f:60:81:8c:
34:d6:fe:fe:21:09:8b:2b:2a:73:05:74:5c:86:11:
78:de:9e:da:55:f4:f7:3a:46:c9:5a:fc:00:58:01:
48:6a:4d:c7:61:ac:a9:36:eb:ed:8b:c8:93:79:de:
6a:93:4b:17:54:0d:aa:a2:2e:78:3c:c4:ac:a3:25:
c7:f4:a4:ba:5c:39:ec:c4:f1:50:dc:07:6d:44:2d:
bb:ce:85:60:69:38:de:bc:ff:f9:2a:2f:c7:86:a4:
06:00:6f:8f:6c:2d:4b:a1:e5:ee:43:7b:3f:34:e2:
ff:4d:6c:a1:3f:1b:36:1c:b1:17:cc:f9:a0:eb:87:
bf:c8:50:1f:38:54:9d:59:9a:4a:a5:6a:ea:49:65:
fb:41:55:a0:bf:61:aa:6c:31:c5:88:fa:96:24:1b:
f5:79:9f:e9:4a:e4:ec:fc:33:20:1e:26:7d:8e:86:
fb:11:cc:37:67:50:8b:10:6f:dc:16:d7:36:ab:01:
08:d4:f1:a1:26:d0:5d:81:a2:96:02:11:87:f7:1f:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:1D:0B:80:27:19:2F:EA:B6:74:B9:EB:E0:F0:E0:3C:28:EF:59
X509v3 Authority Key Identifier:
keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.199.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b2:fe:43:62:20:21:4c:18:25:4c:79:76:b3:fe:17:1a:cb:
53:ea:a5:5b:a4:84:dd:75:f4:90:1d:61:45:c0:f8:74:a2:cc:
56:63:40:12:bf:65:b4:a7:3f:8e:b8:1c:79:07:d1:23:79:cd:
2b:d6:3b:58:0f:13:e9:72:ee:08:04:cc:b9:c6:cc:b0:7d:47:
2d:70:78:48:f8:c1:0e:10:80:c6:1c:58:37:fc:98:dc:57:39:
04:73:af:8d:a0:31:d7:d0:ef:28:93:04:0c:d3:f3:2d:f6:9b:
69:94:a2:ed:3e:56:48:22:1b:aa:27:db:dd:e0:2a:59:a3:62:
62:8e:c6:9a:32:df:f2:c0:97:02:be:9f:45:f4:e0:08:6c:45:
00:81:10:12:e4:6f:80:7d:53:34:57:c8:68:a9:ba:2e:a1:bb:
86:a3:5e:3a:87:94:5f:2f:f8:18:be:67:40:b0:a6:25:67:2c:
31:21:ef:dc:87:7c:35:29:2f:56:b1:a4:69:4a:4a:35:11:07:
32:c7:4c:74:2a:11:da:94:2b:9b:11:51:0e:b3:a1:cf:97:28:
df:8e:74:b5:68:04:a1:7c:3a:50:9e:27:ec:bb:3c:fe:6e:81:
2a:b1:95:0a:0d:d8:c5:ca:0c:d3:95:c7:2e:2c:62:94:fa:b9:
e3:5a:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org