Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: JQfAIiw/UlS9wY7OZBSL5ZXaH9DF+g5VPiDAlgGQpJY=
Subject key identifier: 71:AB:8A:86:7F:DF:6E:D9:18:AD:E0:B2:6F:D9:69:D3:D2:9F:46:07
Certificate issuer: /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial: 5E9C94FEB1625AACE762A16AA4E8E854639A1C51
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
Signing time: Wed 13 Mar 2024 22:42:47 +0000
ROA not before: Wed 13 Mar 2024 22:37:47 +0000
ROA not after: Wed 12 Mar 2025 22:42:47 +0000
asID: 11921
IP address blocks: 201.49.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9c:94:fe:b1:62:5a:ac:e7:62:a1:6a:a4:e8:e8:54:63:9a:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
Validity
Not Before: Mar 13 22:37:47 2024 GMT
Not After : Mar 12 22:42:47 2025 GMT
Subject: CN=71AB8A867FDF6ED918ADE0B26FD969D3D29F4607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:fb:ac:1a:f8:dd:31:d2:c2:10:59:49:18:
96:90:76:e7:04:93:01:96:78:dd:12:d7:98:52:b7:
cb:7a:cd:36:ec:65:1a:bd:3e:54:16:af:28:14:1b:
5b:2c:d1:3d:a6:a0:eb:33:40:e9:ae:0e:54:d6:13:
64:d2:ca:c5:c2:78:e1:6c:62:b2:fb:ab:b8:e2:5c:
72:27:cd:c4:16:70:12:3d:1f:71:97:ba:47:64:89:
19:19:fa:ad:0f:09:ed:9a:e2:05:1e:71:e3:e1:eb:
06:9e:1c:e3:bf:51:14:c8:c7:1d:db:65:69:cf:14:
f2:78:d2:a8:a3:17:fc:88:f3:b3:4e:22:12:e5:56:
ac:5e:6a:fb:f0:43:75:19:84:1d:1b:e5:92:1a:23:
9f:25:fd:e9:43:d6:7a:2d:1a:02:a0:85:2c:d7:fe:
9c:30:04:36:03:78:d9:62:31:1e:b3:b7:d2:f2:ff:
66:78:84:0f:9c:e4:a4:2a:e5:fe:09:df:67:ae:6f:
98:b7:9f:8e:62:30:f5:27:94:4e:68:4e:81:e3:e8:
80:70:cb:91:cd:40:a1:6d:8b:c1:82:4f:12:dd:29:
5c:4c:bd:d8:a5:26:1f:df:67:02:df:38:9c:3e:ec:
8f:54:02:75:35:88:b0:2b:60:61:bf:a7:43:6b:24:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:8A:86:7F:DF:6E:D9:18:AD:E0:B2:6F:D9:69:D3:D2:9F:46:07
X509v3 Authority Key Identifier:
keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.10.0/24
Signature Algorithm: sha256WithRSAEncryption
10:71:50:96:e5:da:fa:4c:a9:fe:ba:c7:42:de:32:76:d9:15:
2b:4b:04:52:cc:0c:9d:eb:c4:22:8b:c5:86:39:03:ac:75:36:
0c:e9:69:f5:69:a7:97:7a:75:44:cd:00:b9:be:8d:40:1b:c9:
4d:83:1c:c7:25:2b:e4:8a:1a:38:4e:ba:6a:50:93:80:57:16:
44:09:de:3b:ac:bd:03:11:67:94:b3:f9:19:ec:ec:c2:8c:58:
9b:6d:85:6b:34:00:2d:28:66:45:af:84:7b:38:a0:4a:88:3d:
a6:96:c6:6a:6b:9d:95:48:b8:f1:0e:19:db:a3:3c:8d:77:e5:
73:79:10:d0:3a:4f:1a:66:21:56:23:f9:84:7d:cf:93:c2:ba:
a6:21:ea:95:2a:13:59:be:51:8d:0b:ba:61:b0:c2:18:b5:2b:
0a:18:4d:df:33:20:55:fe:a0:16:b1:40:3d:2e:59:16:d9:3c:
cb:8d:dd:cb:d5:ae:0a:f5:1f:82:b6:b2:5a:c3:00:71:5c:3e:
28:ec:70:2e:12:47:dc:6f:8f:d1:ab:28:b3:21:67:eb:ae:03:
e9:43:04:ca:9d:56:b8:2f:cb:ad:b1:4b:a3:4c:64:5b:23:ef:
98:b4:7d:68:36:c7:15:47:b1:a0:fb:4e:e1:5b:0a:51:f0:03:
aa:6f:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org