Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
File: 3230302e3230322e302e302f31392d3234203d3e203130373333.roa (raw, json)
Hash identifier: J4Suq5LPmq2iU6ElPJ/iS8kTAVAiXCwPMhfQaF70rZ8=
Subject key identifier: 7B:4E:21:56:79:B7:55:8B:21:A7:96:24:04:17:3C:31:35:76:DA:8E
Certificate issuer: /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial: 10EFAC463EEE5DFB16DEFDDBD06BC7FF51FF3C0C
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
Signing time: Thu 06 Mar 2025 02:00:10 +0000
ROA not before: Thu 06 Mar 2025 01:55:10 +0000
ROA not after: Thu 05 Mar 2026 02:00:10 +0000
asID: 10733
IP address blocks: 200.202.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ef:ac:46:3e:ee:5d:fb:16:de:fd:db:d0:6b:c7:ff:51:ff:3c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Validity
Not Before: Mar 6 01:55:10 2025 GMT
Not After : Mar 5 02:00:10 2026 GMT
Subject: CN=7B4E215679B7558B21A7962404173C313576DA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:32:f3:d0:1d:cc:94:bf:6a:99:56:83:9f:
ce:fb:ef:fb:38:0f:3d:87:21:2d:bf:ae:99:da:c6:
5e:59:a5:aa:ad:b7:b3:dc:b0:8a:9d:25:9d:5a:db:
5a:c4:0d:54:4a:fe:88:ba:94:d1:7b:76:5f:ce:44:
68:8d:86:98:54:6c:1a:ef:05:4f:43:3c:bc:8a:f7:
c3:fa:f9:36:e7:d0:38:23:a5:5f:17:0b:aa:35:44:
a1:bb:73:cf:e6:94:ae:80:47:78:85:9e:34:01:cb:
e0:89:98:41:50:4a:41:0e:fb:b3:c1:8f:52:ef:67:
37:5d:86:08:92:15:72:8e:30:13:1f:2e:18:69:c4:
97:8d:6e:63:37:93:51:15:b9:3b:8c:64:23:ea:5b:
4d:e9:66:b1:3c:b0:42:82:cc:b9:1b:59:6a:65:76:
50:b1:da:55:c1:40:3a:8b:c9:18:15:90:cf:10:bb:
f1:68:e7:be:ce:9c:14:35:52:3f:ab:82:c1:9e:72:
58:11:55:35:e2:55:f1:99:68:c5:a6:3b:de:de:27:
6a:6d:dc:9d:2f:95:03:5c:b7:bf:91:3f:38:c0:0e:
a8:99:a4:e5:25:3e:a5:bb:56:13:c7:ec:a7:25:66:
9a:ff:53:f9:28:e6:41:c1:a3:00:f0:dd:92:44:ac:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:21:56:79:B7:55:8B:21:A7:96:24:04:17:3C:31:35:76:DA:8E
X509v3 Authority Key Identifier:
keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:53:e3:82:99:b5:2b:b4:91:b6:7d:eb:8e:d3:ae:2c:0c:77:
56:f9:0a:b8:fd:b9:12:a1:22:1b:6a:aa:6e:2a:a9:21:2b:4a:
a7:be:86:5f:95:ca:9e:62:39:16:75:f0:8c:ce:0f:35:6f:9e:
a1:22:9f:63:2f:13:90:0a:b9:34:ee:fd:36:6c:2c:77:6c:74:
f8:49:c5:e5:ea:bc:2e:1c:e9:86:c4:0a:2f:66:0f:24:51:46:
df:8c:a9:b6:97:44:ff:4b:e1:5e:9e:02:6f:b9:3b:e2:5c:59:
1c:d9:5c:48:30:bc:51:3c:24:23:c2:ca:13:06:36:50:19:a7:
4c:bd:46:37:cf:92:82:eb:b2:23:57:38:06:1b:df:b6:49:bf:
03:2d:60:e0:24:e4:4a:2a:30:f6:cc:58:0a:2b:b7:da:bf:14:
95:78:5c:32:3e:46:5e:e5:0e:6a:a0:33:2f:a9:c1:55:2f:03:
4f:c4:9d:3e:7c:17:20:20:8d:92:e5:6e:97:3d:45:fc:f6:b2:
3d:d2:88:1a:f6:83:21:aa:e0:09:d2:3d:9d:85:97:02:d0:30:
23:0c:f5:ce:6f:58:64:eb:c5:30:94:5e:98:dc:ee:b1:a6:65:
84:4d:78:e4:c7:dd:c3:c1:7e:cd:a7:be:2d:fa:3d:73:7c:bd:
b2:f8:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:42 2025 by rpki-client