Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3230312e34392e36342e302f31392d3234203d3e203238323633.roa
File: 3230312e34392e36342e302f31392d3234203d3e203238323633.roa (raw, json)
Hash identifier: gxR9FobN4Fjlk5pi5ZuSshyZVBAY9YmcBmftyDENr1s=
Subject key identifier: 01:E1:C1:A0:29:A0:CA:FC:8B:72:9F:DD:1A:F4:5D:AD:AF:4D:4D:C8
Certificate issuer: /CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Certificate serial: 5253B0547128A5EB2DF7296F73FF3BC1661F5321
Authority key identifier: 2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3230312e34392e36342e302f31392d3234203d3e203238323633.roa
Signing time: Fri 03 Nov 2023 12:49:12 +0000
ROA not before: Fri 03 Nov 2023 12:44:12 +0000
ROA not after: Fri 01 Nov 2024 12:49:12 +0000
asID: 28263
IP address blocks: 201.49.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:53:b0:54:71:28:a5:eb:2d:f7:29:6f:73:ff:3b:c1:66:1f:53:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Validity
Not Before: Nov 3 12:44:12 2023 GMT
Not After : Nov 1 12:49:12 2024 GMT
Subject: CN=01E1C1A029A0CAFC8B729FDD1AF45DADAF4D4DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:7f:08:6f:f3:59:39:6f:f2:e9:db:30:98:
d9:d6:9e:12:66:75:01:a0:25:6b:2a:ef:ea:cf:de:
52:ef:96:23:6e:27:64:1c:07:42:12:5c:5e:a2:b1:
57:59:29:e9:09:75:5d:8f:ed:a9:29:82:b3:8c:33:
7f:ce:5b:d4:ba:4a:db:8e:e6:52:49:35:bf:3f:1f:
72:80:42:d9:59:41:c8:69:c0:09:8a:4d:c4:e6:36:
3c:35:82:8d:7f:ec:53:28:e6:47:31:23:6a:5d:55:
80:9a:c5:3f:73:d0:bd:29:b8:09:6d:71:88:50:5a:
19:3a:e0:18:3c:32:4c:e1:2f:4c:db:ad:1c:8f:a5:
30:25:bf:07:25:3a:95:86:9c:77:64:a6:19:65:c1:
b0:6c:9c:0a:24:94:1d:2d:7d:b6:bc:e2:10:56:b9:
12:3a:b2:78:df:44:df:b1:af:9e:57:af:a4:00:91:
be:fb:e3:a8:e8:b7:b7:f0:7e:9e:99:88:09:64:1e:
36:35:af:7d:29:54:30:56:02:a8:dd:ff:19:9f:65:
12:e0:bc:fe:c2:61:88:76:af:98:46:fb:a6:35:bd:
3d:7e:e7:30:f9:d0:30:71:65:0d:dc:b0:77:59:4c:
ad:79:f7:d9:94:40:5b:29:21:80:a5:ee:c0:6a:91:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:C1:A0:29:A0:CA:FC:8B:72:9F:DD:1A:F4:5D:AD:AF:4D:4D:C8
X509v3 Authority Key Identifier:
keyid:2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3230312e34392e36342e302f31392d3234203d3e203238323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:87:ce:97:7b:46:e5:a2:5b:c7:a2:a8:7d:18:6d:d7:7b:33:
d4:e6:06:63:9d:dc:6b:76:4d:2b:ad:4b:bc:26:20:08:55:bb:
a4:99:84:26:69:97:23:fd:89:f6:5b:8b:e3:d4:1a:c3:f8:d9:
46:d9:ea:48:59:78:b9:d2:a2:26:db:5b:6f:2d:7a:9d:8e:72:
e7:a0:45:e1:48:2d:fc:bc:31:55:7a:a8:f4:23:32:69:1d:e2:
77:d0:46:24:17:4c:b8:ef:de:7e:4e:7b:fe:c5:9b:3b:52:e2:
72:07:95:29:6a:66:e2:27:2a:52:7f:30:a1:4b:91:86:2a:ec:
e6:ba:c7:e8:db:34:ba:a5:ce:1e:a3:a7:dc:99:27:5b:76:6a:
9a:7a:9d:99:f4:b4:6d:10:b6:b5:68:5e:bd:d0:30:3e:fa:d7:
8a:1d:40:c3:df:39:5b:d0:8f:05:c4:d5:2c:22:fd:2f:bb:84:
35:29:44:7d:02:7c:4a:cd:91:61:2d:4a:88:f9:6b:20:f1:78:
d4:6c:e6:32:34:04:55:a6:7d:f0:33:62:04:04:8d:03:11:10:
18:ea:bd:bd:e4:a2:44:28:cd:1e:f8:69:40:73:10:73:17:30:
06:3f:1f:aa:df:98:65:73:b8:6f:55:59:23:9a:4e:97:a4:00:
13:25:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:46 2025 by rpki-client