Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/3139312e372e302e302f32332d3332203d3e20323733343331.roa
File: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (raw, json)
Hash identifier: yPvZoyOPRVDu0Pd2+5gvYBp4mqhsY8ilMSmTKhDFul0=
Subject key identifier: AC:29:4E:A3:E7:23:04:1D:4B:04:10:CF:1E:D2:8B:3F:5B:E0:0C:F6
Certificate issuer: /CN=8165B54E8405655BA46AF4CE440711AE717F2BE5
Certificate serial: 3F70E37EA0F65A46A836A96287F39C4892C71BC4
Authority key identifier: 81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/3139312e372e302e302f32332d3332203d3e20323733343331.roa
Signing time: Mon 15 Apr 2024 18:38:54 +0000
ROA not before: Mon 15 Apr 2024 18:33:54 +0000
ROA not after: Mon 14 Apr 2025 18:38:54 +0000
asID: 273431
IP address blocks: 191.7.0.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:70:e3:7e:a0:f6:5a:46:a8:36:a9:62:87:f3:9c:48:92:c7:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8165B54E8405655BA46AF4CE440711AE717F2BE5
Validity
Not Before: Apr 15 18:33:54 2024 GMT
Not After : Apr 14 18:38:54 2025 GMT
Subject: CN=AC294EA3E723041D4B0410CF1ED28B3F5BE00CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:b3:c5:77:01:e9:bb:ab:ed:01:a3:f8:c0:
6b:b8:e7:85:89:ac:f8:f6:26:a4:57:7b:24:3e:2a:
64:43:f6:6f:20:2a:ea:44:97:87:10:64:38:14:8a:
f4:33:a3:fc:ff:40:ac:a9:00:ba:0a:6f:47:f0:86:
28:9d:b6:9d:6f:73:45:47:55:df:f7:57:7d:76:0a:
ec:a8:57:51:bb:99:41:f6:f3:f0:43:d5:0e:b3:0b:
97:4a:1e:e7:c7:bb:59:a7:9c:cc:c1:ad:3f:51:51:
92:65:6a:b0:7c:d4:b8:ed:d1:26:5a:85:14:a3:1d:
15:9d:b2:fc:7a:1b:44:4d:fb:32:17:c3:da:a7:8c:
af:e0:5f:49:88:c2:d2:e2:5f:0d:79:37:d2:d0:12:
ea:7b:8d:c5:c4:db:5c:6f:6f:54:b1:56:fe:3b:54:
62:4a:d4:50:cc:b6:ae:33:86:4b:22:ff:7d:11:7e:
97:37:c3:72:19:70:b1:71:1c:c8:7c:82:e1:66:74:
bd:2b:27:0e:76:91:89:af:49:4b:93:0c:b5:4d:8e:
1e:e6:59:06:02:1c:f4:5f:0d:05:58:f5:48:df:b3:
b0:6f:03:04:21:2f:2a:91:63:4b:83:7c:2a:7c:ad:
a5:0a:e7:08:36:ac:08:9b:53:b9:b6:89:e9:f0:8b:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:4E:A3:E7:23:04:1D:4B:04:10:CF:1E:D2:8B:3F:5B:E0:0C:F6
X509v3 Authority Key Identifier:
keyid:81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/3139312e372e302e302f32332d3332203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.0.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:55:d3:d7:74:79:72:2a:0a:d8:d2:8c:96:d5:23:1b:d8:26:
0b:d1:f6:1c:53:69:f2:ca:df:09:7d:52:6b:fb:cd:ea:38:42:
8c:f5:09:9d:f6:7f:01:bc:e5:f2:c5:b9:4d:9a:a3:da:30:05:
60:db:55:b7:27:c4:52:44:bd:2e:0e:2b:39:94:85:e4:a2:76:
49:30:7b:7b:59:06:8f:7b:ce:c5:f1:13:43:b6:96:75:cc:b6:
f0:b4:5d:42:81:1b:7d:4a:bd:c4:4a:c2:0f:25:54:81:15:04:
96:a9:4c:0e:07:88:b3:59:d9:40:b1:97:0f:29:af:4e:c0:96:
75:dc:b3:5e:45:63:c9:6c:22:ad:b3:03:73:b2:7d:1b:16:49:
52:b3:4a:e9:66:39:64:16:9c:4a:88:36:91:85:15:8e:61:9b:
5d:e3:4c:58:ee:e9:0c:61:f1:01:74:6b:51:0a:ab:77:ed:28:
b8:60:59:c7:fe:9c:32:9a:4d:6d:c7:fc:ba:90:6d:c6:4a:77:
a0:2b:e4:dd:58:41:79:fe:5f:3f:48:ed:27:e4:4f:6b:62:82:
4c:c2:cb:e3:20:bc:80:8d:72:7d:e7:4c:0c:bd:31:18:05:b9:
f5:86:c2:e6:43:ca:be:be:24:b9:41:42:6d:a8:3b:d6:24:05:
54:c9:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:44 2025 by rpki-client