Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
File: 3230312e37312e36342e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier: fIMaTpHtjBrMw8lX1wq/2pIZa0ayp/9snHSCxzgWi3g=
Subject key identifier: 8F:09:CE:94:3C:DB:7A:7B:7D:BD:A5:02:B6:52:A0:4A:BE:7C:23:95
Certificate issuer: /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial: 222BE297C497B9CC866CDF476D60416797E30BD8
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
Signing time: Wed 05 Mar 2025 19:00:15 +0000
ROA not before: Wed 05 Mar 2025 18:55:15 +0000
ROA not after: Wed 04 Mar 2026 19:00:15 +0000
asID: 27652
IP address blocks: 201.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2b:e2:97:c4:97:b9:cc:86:6c:df:47:6d:60:41:67:97:e3:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Validity
Not Before: Mar 5 18:55:15 2025 GMT
Not After : Mar 4 19:00:15 2026 GMT
Subject: CN=3082010A0282010100D131F1C7670E9CB40A3E916E59CF9DCA491EBACC7DE9AFD9A02DE791D2A9EF1AC12E53F843D25E7B76972BF310FE77636C855226469A26C47DEAB9648FD5B47D67E2ED628647F50559882C2F3CC3203E245D10DB131AE4C2F3C8F917E25B8280721983CE8DD55792713B5DDD96C9ABD0884EACE58C2A6A1358D98D5B01CE3551F16A4AFAC9D1C096A7C91B51B2A0B7ED78C34F5124A850F31C99CCBFAB45263E1A1FDFD4C4B4C54986E998BEDF8D3E2BCC27F788EDA2D64DF9EE2A80A44ED539F3B12A52BC52477DD75419602D54DFA00C1AF97CF9E7D1136637BBE01ED19220F70BFFD6886A5CFEADC95EA438B2205C8C0A4D32D49A87AEA17A919B025332F10203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:f1:c7:67:0e:9c:b4:0a:3e:91:6e:59:cf:
9d:ca:49:1e:ba:cc:7d:e9:af:d9:a0:2d:e7:91:d2:
a9:ef:1a:c1:2e:53:f8:43:d2:5e:7b:76:97:2b:f3:
10:fe:77:63:6c:85:52:26:46:9a:26:c4:7d:ea:b9:
64:8f:d5:b4:7d:67:e2:ed:62:86:47:f5:05:59:88:
2c:2f:3c:c3:20:3e:24:5d:10:db:13:1a:e4:c2:f3:
c8:f9:17:e2:5b:82:80:72:19:83:ce:8d:d5:57:92:
71:3b:5d:dd:96:c9:ab:d0:88:4e:ac:e5:8c:2a:6a:
13:58:d9:8d:5b:01:ce:35:51:f1:6a:4a:fa:c9:d1:
c0:96:a7:c9:1b:51:b2:a0:b7:ed:78:c3:4f:51:24:
a8:50:f3:1c:99:cc:bf:ab:45:26:3e:1a:1f:df:d4:
c4:b4:c5:49:86:e9:98:be:df:8d:3e:2b:cc:27:f7:
88:ed:a2:d6:4d:f9:ee:2a:80:a4:4e:d5:39:f3:b1:
2a:52:bc:52:47:7d:d7:54:19:60:2d:54:df:a0:0c:
1a:f9:7c:f9:e7:d1:13:66:37:bb:e0:1e:d1:92:20:
f7:0b:ff:d6:88:6a:5c:fe:ad:c9:5e:a4:38:b2:20:
5c:8c:0a:4d:32:d4:9a:87:ae:a1:7a:91:9b:02:53:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:CE:94:3C:DB:7A:7B:7D:BD:A5:02:B6:52:A0:4A:BE:7C:23:95
X509v3 Authority Key Identifier:
keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:1f:20:5f:79:1e:f9:f1:0e:21:b5:a6:3e:b1:93:16:d1:03:
56:17:58:65:27:84:41:90:9c:64:f0:25:82:8f:dd:a2:a2:da:
fc:c0:e7:33:5f:ce:e8:8e:34:13:3c:30:3d:60:f6:5c:b5:a3:
bf:83:04:db:e2:6d:f8:9e:f9:90:50:1f:0c:17:32:a8:9d:0d:
8e:a3:0a:c4:84:72:9f:f9:bf:14:a5:37:a0:b7:76:26:50:f7:
64:1f:2d:60:d8:d4:e6:07:ab:e4:92:4b:d6:9f:b8:76:52:cc:
d1:a9:ba:cf:62:8a:29:c4:b3:df:a3:6f:99:76:9c:38:4f:b1:
29:0a:1f:f8:85:4a:48:81:38:ef:04:2f:d3:a3:f5:27:d4:49:
9e:12:47:8e:b4:1e:6e:14:be:6b:09:5e:35:d5:41:1c:9d:f1:
e7:38:d7:16:14:e5:53:9a:a9:2b:2f:2b:52:f5:0b:28:8f:0b:
66:bf:51:c5:dd:14:a5:76:55:a9:16:db:5e:00:51:f2:9c:54:
fa:b3:db:1d:a9:eb:d2:88:8b:d5:a8:4b:d5:d8:ed:5d:dd:1b:
b1:f5:31:05:9c:5a:f9:ba:82:0b:59:b9:08:55:8a:c7:f8:6b:
5b:b7:a9:08:28:c5:a3:fe:8f:00:1f:66:e5:0a:0b:24:32:3a:
7c:7e:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:37 2025 by rpki-client