Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
File: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (raw, json)
Hash identifier: L/l3OtSjfFmcNXdZTx5VvgEkGU22AAKcqTmguyjHAYM=
Subject key identifier: B7:DC:D9:E1:BA:3D:E2:D1:94:39:F6:BC:CC:C4:AF:C8:C8:4C:68:06
Certificate issuer: /CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
Certificate serial: 3BD6F0C47E11F51E27B1CBAFCAC33845EA744068
Authority key identifier: 9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
Signing time: Fri 16 Feb 2024 14:57:17 +0000
ROA not before: Fri 16 Feb 2024 14:52:17 +0000
ROA not after: Fri 14 Feb 2025 14:57:17 +0000
asID: 270282
IP address blocks: 201.71.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d6:f0:c4:7e:11:f5:1e:27:b1:cb:af:ca:c3:38:45:ea:74:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
Validity
Not Before: Feb 16 14:52:17 2024 GMT
Not After : Feb 14 14:57:17 2025 GMT
Subject: CN=B7DCD9E1BA3DE2D19439F6BCCCC4AFC8C84C6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:59:39:db:98:d1:2c:7f:84:ff:ac:04:8b:
c3:a5:53:61:49:e5:b2:46:62:38:f5:e7:6b:08:a9:
a0:8a:ce:78:fe:4a:83:90:62:2d:67:28:80:1b:28:
f4:41:fa:1b:89:fb:4e:2f:c6:9f:c2:32:df:25:01:
c1:20:8f:a9:2e:23:4f:7b:0d:85:83:a5:b7:e3:ba:
a7:1e:ed:53:88:32:ae:f2:b6:cc:dc:18:cf:83:f7:
db:4f:cf:95:0b:19:48:6f:6a:42:b8:95:3a:b2:49:
88:a6:cd:82:40:00:b8:e1:9e:3e:a6:de:98:1b:fd:
8c:db:c9:dc:ed:61:e3:af:7d:5c:3f:d1:93:aa:29:
34:b1:03:d6:d8:23:43:8f:98:6b:5b:dd:7e:a7:bb:
56:d5:a8:25:e2:cb:bb:48:9e:01:d1:25:cf:2a:a6:
93:6a:d7:58:65:48:35:00:cd:27:a0:a9:5a:67:df:
5e:9e:63:25:bb:89:00:20:95:a1:a4:75:b5:b0:02:
85:d4:04:58:9c:f4:90:dc:83:8d:9d:d4:bb:e9:e9:
ec:78:72:56:74:2f:38:44:1d:ab:e6:d5:7d:df:8d:
71:b3:8f:3e:11:39:3c:92:d0:68:d9:43:50:65:6c:
95:09:b9:5b:6e:6b:a3:21:a8:ae:2b:0a:6d:4b:21:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:D9:E1:BA:3D:E2:D1:94:39:F6:BC:CC:C4:AF:C8:C8:4C:68:06
X509v3 Authority Key Identifier:
keyid:9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.7.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a7:08:04:c5:2b:28:71:8b:8c:17:b0:45:0e:b7:bd:2f:6e:
0d:5f:1e:d3:c4:4a:02:7f:68:99:b8:e4:49:03:e1:32:dd:0e:
5c:34:fe:c9:0b:4a:a8:83:53:6a:73:eb:33:54:e3:0a:80:37:
63:4d:e8:46:f8:cf:26:3c:d2:b0:98:d8:ad:91:f7:93:99:7d:
e2:c2:6c:1c:5a:a2:ed:e7:2d:61:f3:70:96:45:92:b5:6f:eb:
eb:fd:e4:59:c6:96:3d:6f:ec:12:87:9c:ac:c6:6c:d0:ac:20:
b4:3f:54:9b:d7:04:28:6a:e6:b3:a9:ac:14:1c:c7:5f:28:c0:
e0:31:c7:c9:79:43:ab:87:f9:66:3c:2d:d7:56:88:09:7f:f0:
04:18:d0:e8:56:03:df:dc:50:1e:92:2b:27:4f:b7:b3:e0:7b:
9e:34:b2:13:92:3f:2a:8d:4c:c9:38:a6:54:4f:dd:e5:1c:d9:
f1:d6:3b:13:04:c6:a6:e0:0d:43:4e:5e:9b:93:9e:c2:6a:95:
38:53:f7:11:c6:ac:da:48:34:d3:a6:1f:cf:72:95:36:46:5d:
61:0f:aa:6d:46:c6:5e:f2:56:80:7b:9a:07:40:12:91:76:e5:
de:1c:ec:26:04:c4:72:29:a0:47:70:71:c0:9d:6c:45:32:cc:
ac:1b:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:16:06 2025 by rpki-client