Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234372e302f32342d3234203d3e203533313935.roa
File: 3230312e38372e3234372e302f32342d3234203d3e203533313935.roa (raw, json)
Hash identifier: LGJEjmdLGOXcTHI9yyOBq/NbF4KmVPxHog0J6p8bL6c=
Subject key identifier: C4:CE:52:4B:99:A3:6D:0D:4D:AF:B3:DC:54:60:7C:9E:42:89:50:B7
Certificate issuer: /CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Certificate serial: 243B033FFD684E340C82514A1CF73C6B9D391458
Authority key identifier: D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234372e302f32342d3234203d3e203533313935.roa
Signing time: Fri 23 Aug 2024 20:00:05 +0000
ROA not before: Fri 23 Aug 2024 19:55:05 +0000
ROA not after: Fri 22 Aug 2025 20:00:05 +0000
asID: 53195
IP address blocks: 201.87.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3b:03:3f:fd:68:4e:34:0c:82:51:4a:1c:f7:3c:6b:9d:39:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Validity
Not Before: Aug 23 19:55:05 2024 GMT
Not After : Aug 22 20:00:05 2025 GMT
Subject: CN=C4CE524B99A36D0D4DAFB3DC54607C9E428950B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:3a:5c:cd:e2:15:df:d8:31:5d:fd:29:b9:
08:9e:84:e7:2e:63:b4:89:53:ce:4a:8b:32:12:39:
17:f6:61:a8:77:e5:6a:44:24:5d:97:6d:99:e5:49:
d2:3e:51:c6:7c:95:d1:f2:82:7e:06:95:07:f9:bf:
dd:d0:76:eb:ae:c9:b5:e7:4d:13:15:26:f8:fb:00:
5e:e1:03:67:38:24:7c:9a:ab:13:71:8c:3b:66:a8:
12:8d:7c:d4:74:b9:6d:b5:00:0d:c5:54:53:df:0c:
ce:72:f1:e3:3d:c0:cb:0a:86:35:70:29:79:88:5a:
47:50:43:7e:1d:e5:95:8e:86:1e:e3:15:5a:c9:55:
c8:dc:d4:e1:6e:09:a0:3c:9a:8c:ca:18:8b:59:0a:
9a:05:f9:f5:c9:7f:11:5a:21:aa:90:51:79:b9:a1:
f4:20:8f:a8:aa:16:37:5d:ba:09:14:ae:5f:0b:e4:
f7:77:7e:e5:2e:cd:71:39:31:e7:b6:d3:81:8b:19:
ef:e1:2d:19:ba:4c:6c:ba:01:c9:c1:94:4a:8c:c7:
57:30:43:b9:34:19:e0:52:5d:32:80:86:95:fd:ad:
1a:be:36:cd:c4:94:58:f1:8a:5e:51:5c:25:1c:4f:
0a:de:88:db:f0:69:fa:d5:79:01:77:2d:f8:b6:d7:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:52:4B:99:A3:6D:0D:4D:AF:B3:DC:54:60:7C:9E:42:89:50:B7
X509v3 Authority Key Identifier:
keyid:D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234372e302f32342d3234203d3e203533313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.247.0/24
Signature Algorithm: sha256WithRSAEncryption
85:73:1c:56:04:a8:68:ce:28:57:cc:43:de:b9:51:d6:3f:7d:
08:c4:5e:f9:02:93:7e:85:f7:11:8a:d4:96:ca:07:e7:34:be:
64:06:a4:af:1b:aa:e9:f3:d4:d4:f0:49:5f:cf:4f:01:22:96:
3a:fb:50:ce:de:e0:8d:50:39:52:09:f4:66:80:f7:ab:b0:e2:
a2:8b:19:71:92:e8:30:29:72:5f:4b:4b:d4:a8:c6:8b:9e:fa:
8b:40:ab:3f:40:4b:16:60:82:73:29:54:37:72:be:bf:44:3e:
01:a5:d4:83:1e:80:93:f1:88:53:f2:af:1e:2e:90:d7:eb:82:
0d:36:2a:23:d2:08:d8:c4:b2:8e:d4:43:71:00:56:a0:74:51:
ac:2f:02:63:70:05:c1:ab:b0:f0:a0:5d:3b:a3:2b:7b:15:38:
a4:bf:75:7a:35:59:2b:0b:7b:61:c3:c3:4a:8a:cd:47:ed:45:
bc:3f:3e:f7:23:f2:98:7b:83:b6:c8:a9:50:b8:c9:27:f5:06:
e4:5c:45:0f:35:79:76:61:a1:a1:f6:40:fb:70:d1:b7:45:5b:
d1:73:9b:99:d4:32:02:25:00:a6:06:4f:50:7d:f9:98:c8:75:
8e:c6:95:e8:d9:7e:76:29:86:4d:c6:c0:67:46:9f:27:2b:2c:
99:8c:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:39 2025 by rpki-client