Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132372e302f32342d3332203d3e20323730333034.roa
File: 3230312e3231362e3132372e302f32342d3332203d3e20323730333034.roa (raw, json)
Hash identifier: La4Q4nQEfN1qpIAqDqcc/1WgBRHt1ZEqRTcpR7VvRGU=
Subject key identifier: 21:E0:8D:0C:9E:BC:E4:D3:25:92:D7:3E:F0:F8:FB:14:CA:FA:A6:9E
Certificate issuer: /CN=35248CB09B693D23CFD3F80C290CB26E21F1B5BB
Certificate serial: 26AF1FCC8B49E0471BDE048B4661161ABE07B7CE
Authority key identifier: 35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132372e302f32342d3332203d3e20323730333034.roa
Signing time: Thu 21 Mar 2024 18:34:31 +0000
ROA not before: Thu 21 Mar 2024 18:29:31 +0000
ROA not after: Thu 20 Mar 2025 18:34:31 +0000
asID: 270304
IP address blocks: 201.216.127.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:af:1f:cc:8b:49:e0:47:1b:de:04:8b:46:61:16:1a:be:07:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35248CB09B693D23CFD3F80C290CB26E21F1B5BB
Validity
Not Before: Mar 21 18:29:31 2024 GMT
Not After : Mar 20 18:34:31 2025 GMT
Subject: CN=21E08D0C9EBCE4D32592D73EF0F8FB14CAFAA69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:26:5f:35:05:15:87:ae:9e:b0:05:e0:ed:
e7:12:99:8a:b5:d3:fc:bf:a4:b0:b5:08:09:f4:6a:
b9:2f:a5:5c:3b:19:f6:8e:7f:c6:90:b4:ce:fd:24:
10:c1:2f:4c:12:dd:a5:9e:f3:32:11:a9:30:0d:3f:
31:6e:6c:19:59:94:55:49:4d:f5:56:fa:95:76:e2:
05:d1:c0:af:74:e7:75:79:36:3c:72:1a:28:6c:d2:
5e:02:eb:1b:2f:5d:58:43:af:98:0d:7e:a7:16:39:
d0:1a:62:ac:5a:ed:3c:6e:2c:ac:a5:e4:ba:fd:34:
ea:6d:b9:63:00:84:5d:84:08:12:43:06:e8:a1:bd:
66:c0:1d:f8:e5:6b:9b:07:6f:ca:f4:b6:1f:93:c2:
5f:06:61:b4:6e:58:50:10:1d:f9:e6:9e:9e:fa:50:
69:b6:c5:bd:3b:78:00:88:f2:63:60:d3:aa:31:0f:
81:32:e6:db:f1:4e:1e:1e:57:2b:15:12:b2:a3:b3:
69:66:1b:dd:c5:37:39:da:27:1e:90:f4:60:bd:6c:
5e:15:d8:e2:3d:0e:57:d7:5e:ca:54:14:ca:fe:83:
ae:f3:62:45:71:ed:8b:49:a6:a4:c8:97:40:77:cc:
21:9f:fc:01:bc:2f:1d:76:e3:ea:ce:d1:e5:26:5d:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:8D:0C:9E:BC:E4:D3:25:92:D7:3E:F0:F8:FB:14:CA:FA:A6:9E
X509v3 Authority Key Identifier:
keyid:35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132372e302f32342d3332203d3e20323730333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:19:2d:16:7f:c1:a1:0c:0d:0c:14:29:5d:8b:89:af:cb:24:
c6:99:2c:33:58:a1:34:30:a8:0a:99:1d:ad:3c:f4:36:20:b0:
f2:65:da:b9:f2:17:50:3c:a0:8c:8d:fb:1d:6e:22:eb:df:d0:
0d:0a:5e:ab:87:cf:33:a9:44:e0:0b:a7:23:40:70:a9:c8:f5:
48:a4:d8:7d:14:02:e6:4d:c3:69:2e:d1:bd:b1:a2:8e:cd:f6:
94:e5:51:fc:86:ae:6c:0e:73:d3:ba:07:61:05:e5:9f:33:d6:
e3:a4:8f:24:89:84:26:05:4f:19:70:99:57:33:13:b9:ee:20:
c5:55:9d:aa:e7:af:6b:20:92:e0:ac:e1:40:eb:01:13:95:d6:
97:cc:ce:55:17:66:fa:50:11:5b:fc:99:61:fe:fe:1a:1a:b2:
78:2e:69:4a:40:58:c0:b8:66:0d:cd:88:ea:2f:fb:53:dd:8c:
a0:b5:ff:eb:cc:d5:73:8c:0e:3c:17:ac:59:03:ad:6a:13:9c:
f5:de:ad:e5:c1:1f:d9:4e:14:d8:a5:1e:03:1c:0f:3f:a0:de:
d1:b9:b1:f4:7a:30:03:d8:2f:21:c3:cb:62:2a:fe:5d:0f:24:
3d:4c:8e:ed:6e:d5:5d:f1:1e:32:8a:6e:a7:58:09:90:ae:17:
75:ff:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:02:14 2025 by rpki-client