Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32362e302f32332d3234203d3e20323639363536.roa
File: 3230302e34392e32362e302f32332d3234203d3e20323639363536.roa (raw, json)
Hash identifier: H+t3b8Ic1i1pgb5GyZzQK7SfqZGOWyE0/NJIg7+rLww=
Subject key identifier: 9A:D0:8A:C9:48:46:77:46:94:77:37:1F:C6:6F:4C:98:D6:46:3F:AE
Certificate issuer: /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial: 2BD21CF873A94CA6195BBB798E1169969F15CCC2
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32362e302f32332d3234203d3e20323639363536.roa
Signing time: Fri 20 Dec 2024 12:50:38 +0000
ROA not before: Fri 20 Dec 2024 12:45:38 +0000
ROA not after: Fri 19 Dec 2025 12:50:38 +0000
asID: 269656
IP address blocks: 200.49.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d2:1c:f8:73:a9:4c:a6:19:5b:bb:79:8e:11:69:96:9f:15:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
Validity
Not Before: Dec 20 12:45:38 2024 GMT
Not After : Dec 19 12:50:38 2025 GMT
Subject: CN=9AD08AC9484677469477371FC66F4C98D6463FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:01:eb:20:30:1f:37:a5:98:b7:0c:10:3a:
ca:07:d5:c8:9f:49:d8:ed:9f:62:a9:20:03:4f:c9:
51:c7:28:d9:63:e3:55:c1:4c:b5:0a:1b:1d:dd:44:
af:41:18:8e:7d:42:c6:8f:a0:7c:b1:b5:04:4e:71:
31:e8:a8:ca:61:34:fd:99:44:a3:4b:03:c5:dd:63:
ab:57:62:ef:4f:99:cb:df:08:42:43:30:b3:56:ca:
45:17:7d:eb:14:db:11:2f:fb:b9:8b:f5:c1:a2:be:
64:56:4c:5a:ff:1b:02:98:72:61:2e:25:b6:65:6d:
fa:a4:b8:72:23:b2:20:de:2d:7b:54:0c:8b:79:8a:
21:4c:0b:4b:be:cc:8d:7b:a3:e6:69:ab:b4:92:c0:
c5:bb:4f:57:7c:8a:4e:1d:ea:cb:8a:16:98:68:71:
45:60:7a:7c:96:45:4c:e1:6f:00:3c:14:2d:b2:c3:
28:96:35:7f:ca:55:5e:7a:40:5d:97:77:91:c6:94:
1a:33:e4:fa:29:7a:8f:b0:81:82:43:44:80:87:97:
5c:f0:dd:76:97:be:d3:13:36:67:ff:45:42:70:60:
3d:91:fb:d7:97:6a:0e:ec:d9:ee:b3:20:b6:6d:a6:
76:8d:b2:85:3b:9a:13:fc:bc:7a:80:70:1c:2d:20:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:8A:C9:48:46:77:46:94:77:37:1F:C6:6F:4C:98:D6:46:3F:AE
X509v3 Authority Key Identifier:
keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32362e302f32332d3234203d3e20323639363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.26.0/23
Signature Algorithm: sha256WithRSAEncryption
73:03:ba:f5:45:06:1d:60:78:b0:a6:20:94:89:80:a9:87:69:
64:1c:c3:80:0e:94:2e:a8:e1:8a:bb:66:ae:20:8c:6b:af:f6:
88:40:e0:de:69:07:cb:b6:cb:48:61:66:dd:96:a2:ea:e4:72:
f6:8a:1c:7e:86:6d:0d:0e:62:97:c4:fe:7d:84:b1:74:28:f8:
48:2a:02:5e:9a:af:c4:a3:96:02:95:df:0a:04:6e:b7:0d:97:
8d:06:61:95:df:54:8b:6c:dc:a8:fc:05:c3:c9:3a:5b:de:65:
f1:04:e9:1d:c8:55:c2:00:7e:72:45:f7:01:7d:b7:cb:f5:18:
b2:df:7a:0d:2e:66:e5:e8:05:00:a5:eb:a6:b9:7e:9c:6f:ce:
f0:f0:7d:b0:e6:c3:1a:6a:8e:49:b1:e5:e2:64:fc:57:a8:2b:
c9:b2:aa:57:cd:17:ab:ec:7d:6b:2b:aa:0c:fd:df:27:e1:ab:
18:01:22:45:dc:05:a2:21:a0:1f:53:f4:3c:93:f9:56:8a:19:
43:9a:94:97:b8:e5:02:52:c1:33:1a:b7:5a:e4:3c:2f:b5:80:
95:3d:b5:58:c6:f3:3a:ca:d5:e2:00:3f:05:17:3f:56:59:c5:
89:e3:f3:ea:44:7a:75:ac:35:3c:fe:59:7d:42:13:2b:fe:2c:
21:a5:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:26:59 2025 by rpki-client