Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
File: 3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa (raw, json)
Hash identifier: qbOh6fEyhdGLld2m2hfihV1HqBEHUhF+eYSuQXdKmcA=
Subject key identifier: 13:76:75:95:DF:97:B6:07:FD:ED:7B:40:36:77:84:75:9D:49:61:9F
Certificate issuer: /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial: 702DC0291A7942A3C1F0392AEF2D666749F13D04
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
Signing time: Thu 04 Apr 2024 02:52:04 +0000
ROA not before: Thu 04 Apr 2024 02:47:04 +0000
ROA not after: Thu 03 Apr 2025 02:52:04 +0000
asID: 267501
IP address blocks: 201.182.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2d:c0:29:1a:79:42:a3:c1:f0:39:2a:ef:2d:66:67:49:f1:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Validity
Not Before: Apr 4 02:47:04 2024 GMT
Not After : Apr 3 02:52:04 2025 GMT
Subject: CN=13767595DF97B607FDED7B40367784759D49619F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:de:a3:6c:9e:99:6d:5a:78:f6:89:31:2e:
71:77:39:7e:41:db:aa:75:a1:da:59:ae:80:e2:5c:
e9:0f:2a:ed:d4:52:86:90:9f:6c:4f:9b:f9:1a:ad:
58:8d:3f:16:40:3b:5f:c4:aa:f9:4d:b3:38:db:38:
d7:bc:60:80:bf:65:d2:02:15:61:ce:df:93:c5:fa:
9a:79:22:96:34:0a:9c:e5:a2:af:63:5a:19:96:2d:
2e:24:69:7f:30:dc:13:d7:f1:38:95:23:3a:6a:c1:
49:27:2c:58:8f:58:57:a9:52:55:88:bb:cc:a2:6b:
6b:0e:ec:42:1d:5b:a5:30:e6:c2:53:20:e0:9d:ad:
af:cf:82:ce:b5:05:34:0a:88:e2:6a:a4:af:cb:ac:
78:a7:c0:59:1f:31:bd:44:7e:e7:59:4f:9f:a7:cb:
f1:a6:14:08:cd:8a:76:8f:33:c4:c0:f6:eb:22:ed:
94:e8:82:1a:d8:ee:62:60:56:e3:bf:99:a8:4c:6b:
fd:be:cd:07:0e:81:92:8e:46:d4:63:35:09:2d:49:
61:a7:2d:87:8a:5e:29:63:1c:d6:71:02:d2:f0:df:
40:93:33:1d:42:b1:20:5d:05:75:e6:de:94:32:e8:
91:78:83:71:0f:1d:f5:4b:5b:4d:df:fa:ab:61:4a:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:75:95:DF:97:B6:07:FD:ED:7B:40:36:77:84:75:9D:49:61:9F
X509v3 Authority Key Identifier:
keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.66.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:9e:7d:87:f3:51:e0:d5:e8:59:e6:ed:42:cf:14:04:1d:00:
c5:9c:de:d3:c0:42:32:9c:f5:e3:2d:07:cd:b6:27:d0:ca:1d:
3d:f4:44:8e:a6:68:7f:4a:7b:a3:8e:09:69:37:8e:75:b5:f3:
0a:9d:9d:76:e7:42:03:d1:6c:0f:6c:38:73:e0:9d:ae:26:7d:
92:45:50:cd:68:ed:19:9e:47:9e:de:d4:d7:63:47:2e:db:9d:
1c:e0:85:7d:d6:ec:8e:24:17:e2:39:7e:a0:ae:32:c1:1a:e9:
78:8c:c6:01:b7:b0:66:63:b4:aa:cf:91:62:e3:51:3c:e9:79:
39:3b:69:13:07:bf:dd:09:8d:21:89:6e:48:84:8f:da:01:68:
ab:84:4d:fb:28:7c:81:11:f6:5d:fb:6c:a7:d2:a9:2f:5c:a0:
87:b9:b6:df:b7:55:e7:0d:67:ab:38:22:1b:dd:76:1f:27:0c:
78:d1:d4:c2:53:3d:c9:d1:dc:b0:34:96:2f:2a:d1:4a:a4:1e:
aa:b8:36:2f:1d:e5:7f:0f:21:cc:87:62:c6:e2:79:09:cb:5d:
77:fa:d3:63:69:f3:e3:de:54:fd:bd:2a:7c:99:8b:47:bf:9e:
91:a6:b4:b8:b8:be:69:63:8c:ed:42:df:65:13:e3:c4:2c:06:
63:24:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:58 2025 by rpki-client