Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3234203d3e203631383736.roa
File: 3230312e3135302e3132342e302f32322d3234203d3e203631383736.roa (raw, json)
Hash identifier: ob6X+I2TDrUgGGZb5q/oBkKzcfFn5xK6lI/vDBROmu4=
Subject key identifier: 2D:00:DF:5E:AA:45:C0:3C:CB:F3:39:34:6F:F2:14:45:8D:22:32:B2
Certificate issuer: /CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
Certificate serial: 4701EACBCEE2779159E6A60FADCE61B527094DE8
Authority key identifier: 64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3234203d3e203631383736.roa
Signing time: Fri 11 Oct 2024 19:38:00 +0000
ROA not before: Fri 11 Oct 2024 19:33:00 +0000
ROA not after: Fri 10 Oct 2025 19:38:00 +0000
asID: 61876
IP address blocks: 201.150.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:01:ea:cb:ce:e2:77:91:59:e6:a6:0f:ad:ce:61:b5:27:09:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
Validity
Not Before: Oct 11 19:33:00 2024 GMT
Not After : Oct 10 19:38:00 2025 GMT
Subject: CN=2D00DF5EAA45C03CCBF339346FF214458D2232B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:ea:1c:e8:39:e6:71:3f:03:32:1e:b0:da:
4e:e5:cb:e5:a3:95:c8:9b:3e:4d:4f:79:a1:22:ec:
71:2e:98:93:d8:b9:c3:0b:56:ce:9b:c6:7b:ad:da:
48:d0:1a:0a:1c:23:c8:cf:62:b9:48:06:31:39:3a:
cb:84:69:18:18:a7:3c:67:60:65:ff:5f:92:2d:fc:
da:4e:54:8b:e3:f7:2a:d0:54:13:6a:fb:52:2d:23:
df:f9:60:a6:97:20:ee:13:95:07:fd:b7:ce:d5:61:
16:99:fd:f5:68:49:a1:07:52:c5:36:2f:52:36:10:
7a:25:d6:de:94:9a:14:5e:5a:7a:72:4b:10:d4:87:
0b:ba:15:4e:b0:27:4f:3c:a8:68:14:40:07:f6:44:
9a:d4:4f:19:75:fc:07:95:d1:35:60:2a:38:c8:15:
ec:72:70:b0:cd:48:84:fb:bd:8a:21:8f:04:57:d3:
0a:fe:18:57:47:04:ff:cd:a4:e6:05:d9:f5:9f:12:
79:a8:25:a1:a5:cf:79:6f:8a:65:90:33:68:aa:f1:
46:b8:ca:f8:60:0b:fc:59:cf:e7:9b:c0:ac:19:47:
7a:c5:55:b2:cf:5d:49:a5:35:80:99:a8:93:0b:96:
7f:90:30:ff:d8:7a:c7:5e:ad:2f:8a:e8:17:20:a0:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:DF:5E:AA:45:C0:3C:CB:F3:39:34:6F:F2:14:45:8D:22:32:B2
X509v3 Authority Key Identifier:
keyid:64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3234203d3e203631383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.150.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:86:bf:99:f7:bc:6f:4e:28:bb:5d:b6:a2:a2:f5:da:44:b5:
b6:4d:36:65:0e:54:59:c1:fe:d0:b4:a2:4e:7d:10:d3:c5:1d:
96:48:b5:11:04:89:7b:08:a2:10:b0:e8:c0:94:72:20:af:bb:
75:da:2e:23:d8:e4:1f:47:7b:3c:1b:08:d6:99:e8:c5:b8:76:
a9:90:cf:86:22:a6:6d:c4:f5:0b:90:32:74:c5:93:7c:54:16:
cd:66:3f:ed:d1:4f:53:94:9e:9f:13:e6:3b:ba:2a:6d:71:d6:
b9:fb:94:6b:8e:03:13:78:18:fa:a5:7a:ef:b8:4e:46:57:4b:
1d:70:36:e0:ba:30:e7:21:39:2c:47:f6:5e:cf:e7:e6:f5:a3:
1a:17:e9:b5:79:8e:88:31:6f:74:c1:5f:b3:0c:e9:55:db:54:
b2:c9:e8:d4:97:94:02:d1:58:00:0e:29:f8:51:13:f4:7a:6d:
2d:c3:de:56:aa:44:61:7b:e5:34:45:1a:e4:77:10:29:84:b6:
72:f2:49:ef:08:ce:22:8b:09:31:d7:73:88:f4:6b:7a:bf:08:
0b:fe:46:2d:4f:40:3e:24:7e:d2:03:33:85:dd:db:c0:26:22:
51:01:ee:34:84:80:a8:65:74:c9:cc:d6:1c:f5:13:3e:9c:60:
ba:36:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:15 2025 by rpki-client