Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa
File: 3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier: /0SkId6dQqkgHGbl2B0K0/4Bod5+3/G9wD3R4+oP750=
Subject key identifier: 90:BB:D9:8D:B7:EC:D2:DB:A3:82:7B:95:5F:AD:E1:E8:AD:62:20:9E
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 7D24EDD07A7A01FB915E9A07FA94161620CC6FCC
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:34:10 +0000
ROA not before: Wed 10 Jan 2024 17:29:10 +0000
ROA not after: Wed 08 Jan 2025 17:34:10 +0000
asID: 265303
IP address blocks: 201.87.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:24:ed:d0:7a:7a:01:fb:91:5e:9a:07:fa:94:16:16:20:cc:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:29:10 2024 GMT
Not After : Jan 8 17:34:10 2025 GMT
Subject: CN=90BBD98DB7ECD2DBA3827B955FADE1E8AD62209E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:e1:bb:40:f5:8d:dd:c3:cd:f6:13:6f:42:
3c:a4:e4:d5:04:e2:e3:33:4c:e1:e5:ec:61:54:2e:
cd:39:17:ca:4c:18:0b:23:e3:5c:82:7f:63:1f:98:
cc:a8:1f:7f:e3:e0:3f:2c:a1:a5:3c:f2:92:88:dd:
e4:14:05:58:3c:5f:c7:1a:3d:86:4a:0e:1c:06:fb:
3e:36:ec:02:82:0c:b7:41:ac:53:75:aa:8a:42:18:
aa:27:fd:58:6a:ad:25:b3:32:4c:4e:04:07:2b:5f:
19:1d:4d:7e:29:4f:ac:9e:a1:70:2c:1b:ca:58:e6:
a2:3b:f9:34:55:71:70:ac:8b:5f:3e:14:2f:fe:3b:
39:59:84:f7:f4:4a:e1:c8:f2:7b:72:5b:33:ca:e9:
c7:10:85:7b:53:c0:83:0c:fa:83:e9:99:55:bd:be:
e3:3a:31:6d:55:26:69:7c:7b:aa:2f:ad:fd:23:aa:
c0:25:ef:a7:9b:44:2e:02:de:ea:d4:d6:55:55:39:
30:d0:89:db:f9:f4:c9:e9:8b:ea:4c:11:7d:38:a4:
b8:75:94:0f:d0:d3:6c:16:a3:90:28:8a:3d:35:db:
06:a9:54:ab:07:09:ee:ac:08:1e:a6:1e:0d:28:d8:
84:e3:82:2b:23:ec:b3:cf:bc:6b:ee:77:27:25:d4:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:D9:8D:B7:EC:D2:DB:A3:82:7B:95:5F:AD:E1:E8:AD:62:20:9E
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:dd:12:a4:4d:9f:95:cf:f8:3f:d0:58:df:94:5b:60:8a:1d:
1e:93:92:fe:ba:87:a5:d3:a0:67:d6:45:43:47:f2:b0:46:c8:
27:c9:91:1d:0d:e3:a4:82:9b:f3:4d:16:b2:f0:af:11:84:2e:
a6:0b:0b:b8:13:6e:44:c2:78:e2:83:ab:e6:73:6d:7d:19:d4:
24:13:50:71:78:c6:0a:46:a9:83:11:23:f3:a2:db:1f:00:e0:
7c:b9:c3:7d:c6:8c:5b:78:cd:e5:88:d7:51:c0:33:be:a5:a7:
f7:07:e5:58:50:b6:23:c7:99:76:6f:0f:4a:df:95:2d:1a:7a:
43:da:37:69:4b:0c:ea:27:3c:83:a6:09:db:0b:d0:32:f0:e6:
18:a2:f2:27:10:e4:a4:ef:53:37:c0:88:76:41:43:17:0b:e4:
a2:f2:75:21:7a:db:95:36:3e:ad:d4:a1:d0:3b:0a:c4:4f:20:
8b:b7:34:9b:a5:68:5f:24:ae:d6:b4:22:80:c3:a4:94:6c:95:
61:c7:06:2a:b8:bc:9d:6d:66:ab:fb:09:58:3c:37:66:cb:f2:
18:9a:4a:03:80:a2:d9:68:b6:86:5c:83:33:80:8c:55:25:ab:
cf:af:c4:f6:99:59:62:24:a2:f9:7e:8d:c3:23:18:90:75:f1:
a5:41:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:13 2025 by rpki-client