Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa
File: 3230302e32342e38302e302f32322d3232203d3e203631373930.roa (raw, json)
Hash identifier: M2lNJNOo3QmEHp0Yb2W0NhzPTUamH5IA9BhxqbF6t7Q=
Subject key identifier: 1C:8E:79:F2:E0:E6:5E:49:80:65:72:6E:83:9C:B6:B4:00:38:16:72
Certificate issuer: /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial: 51E02CB132C3EEA0617F8FD6326C55F4AFCB2C3B
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa
Signing time: Wed 18 Dec 2024 23:19:47 +0000
ROA not before: Wed 18 Dec 2024 23:14:47 +0000
ROA not after: Wed 17 Dec 2025 23:19:47 +0000
asID: 61790
IP address blocks: 200.24.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e0:2c:b1:32:c3:ee:a0:61:7f:8f:d6:32:6c:55:f4:af:cb:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Validity
Not Before: Dec 18 23:14:47 2024 GMT
Not After : Dec 17 23:19:47 2025 GMT
Subject: CN=1C8E79F2E0E65E498065726E839CB6B400381672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:69:f2:f9:e2:29:10:ca:44:ad:b7:6a:1c:
b5:4f:56:cc:3c:09:a5:3f:48:9b:e7:e2:93:c0:4f:
e9:a1:3f:de:7d:d4:5f:6f:59:20:a6:bf:70:0c:38:
12:99:80:b0:14:d6:bc:e7:61:7f:40:2f:8f:7f:ae:
1d:99:e5:31:e7:d4:57:c6:d9:df:91:c6:ec:4d:cf:
32:de:d4:95:16:9a:2f:09:62:39:b3:a8:ce:f8:0b:
e5:04:2b:e4:eb:e3:c9:a3:b8:ab:13:e7:ae:81:fb:
c8:75:04:b2:47:40:c2:34:13:38:36:c8:59:32:bc:
21:89:6b:f6:50:a6:e7:31:a8:9c:a9:ec:50:3a:36:
1a:61:28:f2:87:2b:6c:13:e8:36:04:f4:04:ae:a6:
81:be:e4:5f:eb:e0:7a:2b:ea:5c:c6:64:0f:e2:56:
43:1d:25:6c:f8:10:67:df:0c:86:8d:1c:d6:07:d0:
4d:1a:23:ea:05:12:39:50:37:e2:f0:a9:6f:60:5e:
df:80:d2:32:01:33:9f:2d:0c:c8:e5:46:a2:85:41:
b3:78:0f:0d:7e:e9:e9:56:72:c1:57:75:58:55:3e:
4b:d9:a3:91:e4:e2:85:f4:db:8f:8a:f0:6c:27:b5:
24:70:3a:b0:05:f5:5c:72:c9:43:fe:63:e3:64:65:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8E:79:F2:E0:E6:5E:49:80:65:72:6E:83:9C:B6:B4:00:38:16:72
X509v3 Authority Key Identifier:
keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
26:6a:03:61:f4:7a:f2:cd:14:99:5d:6d:90:68:96:dc:0c:f5:
03:aa:01:46:39:4e:92:8a:f6:45:0a:95:ed:e8:35:41:42:7f:
80:24:a3:6a:8c:b4:0f:86:0c:15:ac:e0:c1:73:e3:09:ad:31:
b7:10:c2:d0:ca:b8:3e:bd:50:66:83:6a:d6:db:59:f2:8c:67:
ca:a6:5c:b8:6b:c1:85:32:22:c6:97:90:17:ab:b7:cf:d5:0d:
93:50:d4:c6:2a:55:de:c1:74:73:3b:33:a9:bc:2e:57:6b:14:
af:39:72:37:c2:2f:45:04:b3:55:e2:72:95:79:e3:22:93:6c:
3b:09:23:42:9c:57:3b:9a:d3:ce:5e:c3:c0:c6:81:e0:6e:ad:
9b:62:16:06:46:36:4d:4e:25:70:79:4e:c9:08:cb:a5:2e:a9:
55:62:48:87:1d:2a:b9:a2:ed:d0:2c:a1:1f:9d:6a:85:86:e3:
23:ef:c0:9c:46:d1:7e:a8:b7:1a:5b:9d:66:88:3b:59:3e:7a:
94:af:66:99:58:fa:be:4c:52:c2:2a:69:d1:0d:93:7c:1c:69:
13:ed:c7:08:c9:d7:d0:76:24:3e:b3:dc:af:65:9e:9e:b8:39:
42:37:0d:fb:e6:f1:49:b7:4f:e6:2c:da:da:7f:0b:33:fa:a1:
e1:5e:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:38 2025 by rpki-client