Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
File: 3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (raw, json)
Hash identifier: dn3WYXJyj65U1zFjuNpdTIpCem+Ty5L2NVXRyajJX1w=
Subject key identifier: 47:28:74:7E:0A:41:08:53:18:B8:CE:EB:3A:BB:BB:2B:CC:44:B5:41
Certificate issuer: /CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
Certificate serial: 5FBC8AAF971DF49CABC69C263BFA936811141BA2
Authority key identifier: 0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
Signing time: Tue 21 Jan 2025 17:19:00 +0000
ROA not before: Tue 21 Jan 2025 17:14:00 +0000
ROA not after: Tue 20 Jan 2026 17:19:00 +0000
asID: 270567
IP address blocks: 201.216.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bc:8a:af:97:1d:f4:9c:ab:c6:9c:26:3b:fa:93:68:11:14:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
Validity
Not Before: Jan 21 17:14:00 2025 GMT
Not After : Jan 20 17:19:00 2026 GMT
Subject: CN=4728747E0A41085318B8CEEB3ABBBB2BCC44B541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:91:f2:1c:f6:0c:01:b4:d0:9d:29:03:6b:
ab:c7:00:4d:4b:c4:ab:bc:b6:8b:fa:0d:35:4d:d0:
f7:e6:2f:f1:e6:f0:9e:dd:7b:7f:df:7e:ca:c7:ed:
1c:fd:cc:34:99:21:83:ff:62:23:6b:9b:a2:21:72:
3e:f0:d8:a8:ce:08:8f:c5:c3:46:70:b1:37:a0:58:
c5:49:1f:3e:36:08:ce:3a:67:1e:94:6d:f6:b0:07:
38:c8:cc:22:68:95:6c:16:f5:02:36:ac:49:bc:0f:
87:6c:9c:60:65:dc:92:c7:53:1d:83:94:1a:33:94:
01:59:a9:e0:ec:ba:63:de:d9:ca:26:c4:6f:28:3b:
f6:f8:85:9c:67:e9:ae:7a:82:56:03:75:a2:dd:af:
25:2b:53:fd:b6:c7:b9:27:14:09:3a:d7:53:b3:94:
1e:28:3b:3d:18:76:c8:16:62:03:a0:50:bf:65:13:
4b:66:a1:4f:44:88:68:77:79:0a:75:72:ef:6a:d1:
31:08:46:62:08:94:11:3c:de:ae:eb:c6:80:10:b9:
dd:1d:f9:3a:b6:d9:ed:22:0b:2d:e8:9c:03:bf:d3:
4b:97:2b:6f:c2:1a:08:cb:ce:39:f2:1d:e2:eb:9f:
47:ad:75:28:e1:5c:23:ff:87:c2:06:b1:60:45:b8:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:74:7E:0A:41:08:53:18:B8:CE:EB:3A:BB:BB:2B:CC:44:B5:41
X509v3 Authority Key Identifier:
keyid:0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.80.0/22
Signature Algorithm: sha256WithRSAEncryption
03:95:ba:6d:c6:45:f7:81:f6:3d:3c:88:68:de:0d:a5:a3:e6:
ba:13:4c:6e:3c:8a:8c:6d:d7:42:4c:bd:e3:ed:1e:73:47:c9:
0e:5e:12:d3:b8:49:62:68:34:c8:2f:49:23:aa:22:e6:2c:f2:
24:13:93:05:36:6c:56:a1:7e:9a:b9:76:2a:0b:ad:56:28:ac:
64:8b:4d:fb:73:92:fb:9b:cd:f5:49:4b:7b:14:a1:b8:84:b3:
0e:b2:0e:03:c6:57:5a:31:f5:0b:46:8b:53:69:85:a0:39:c8:
55:57:4c:dc:e3:f9:fe:18:fe:45:e2:39:75:3e:9a:70:c6:7b:
e7:cd:55:dd:2a:0c:4d:8c:09:86:3c:30:08:25:a9:17:8a:8a:
9e:69:4e:5c:3f:07:8e:49:28:7b:27:fe:2e:30:3e:e0:6a:79:
42:15:e2:a7:87:46:3c:d4:80:93:af:48:10:a2:9c:1d:c2:20:
cc:fe:ef:d4:6c:3d:93:07:c3:f7:4a:1a:e0:bb:02:42:2c:54:
21:4a:9b:ab:80:d4:af:7d:1b:73:0c:0e:cf:2f:4b:ae:5d:4c:
10:dc:1e:1b:9e:e2:09:bc:aa:11:68:17:29:cf:ba:b6:f6:99:
45:43:8b:70:a4:fb:e1:33:ef:17:d1:0c:ad:f2:b7:35:3f:b9:
49:ec:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:48:38 2025 by rpki-client