Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32302e302f32332d3233203d3e203131393231.roa
File: 3230312e34392e32302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier: Z2LIYRxFSsI2uGSVCXLJ+dZgjB3uAlUQDU31iKMOmck=
Subject key identifier: E7:1A:C7:1B:A6:D0:A4:DB:0D:1F:FC:0A:FF:62:5E:86:5A:40:EC:6D
Certificate issuer: /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial: 3FCD9884E7C404CC818FEB7E8F19B0CA8E164A77
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32302e302f32332d3233203d3e203131393231.roa
Signing time: Thu 28 Mar 2024 18:42:00 +0000
ROA not before: Thu 28 Mar 2024 18:37:00 +0000
ROA not after: Thu 27 Mar 2025 18:42:00 +0000
asID: 11921
IP address blocks: 201.49.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cd:98:84:e7:c4:04:cc:81:8f:eb:7e:8f:19:b0:ca:8e:16:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
Validity
Not Before: Mar 28 18:37:00 2024 GMT
Not After : Mar 27 18:42:00 2025 GMT
Subject: CN=E71AC71BA6D0A4DB0D1FFC0AFF625E865A40EC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:17:c3:57:51:90:37:da:c7:0c:3d:d7:84:
c7:60:a2:85:2c:28:b0:61:14:5a:3d:21:d6:bb:1d:
b5:25:c6:42:7c:47:0a:42:53:dc:85:54:f9:36:58:
a8:46:7c:b8:23:78:82:34:a1:b2:ea:fa:97:1e:91:
3d:85:01:a0:bb:a7:9a:49:b5:23:8f:a3:ac:aa:b5:
f6:e4:f8:c6:a2:e8:80:21:8f:ef:cc:1e:c0:94:81:
24:df:e3:7a:57:2f:53:37:8d:cb:f2:dc:92:a4:4d:
99:d2:82:16:e9:40:56:cc:93:f3:ee:aa:45:5b:e4:
ee:d5:44:13:fd:ef:40:ef:f1:01:f5:14:44:d1:08:
bf:ac:35:c8:9c:2a:09:ec:af:06:0b:68:67:bb:61:
d6:20:13:ce:10:08:05:ba:b2:3b:49:3c:6d:d0:f6:
ed:70:35:ca:10:bb:b6:21:d8:f1:51:d5:69:f7:f2:
01:e1:8b:1f:79:b9:d2:cb:b3:d4:dd:62:bc:25:08:
65:a1:dc:11:fc:a2:38:ea:f8:cd:5c:8f:df:fa:0a:
4b:e0:1a:f6:24:ca:ba:04:88:fd:c0:0f:66:38:5a:
95:a8:eb:0e:6e:e5:ed:65:9e:d5:3f:5d:17:42:3e:
a3:5f:f5:eb:11:ff:a2:e3:6f:3b:b9:f3:a7:36:31:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:C7:1B:A6:D0:A4:DB:0D:1F:FC:0A:FF:62:5E:86:5A:40:EC:6D
X509v3 Authority Key Identifier:
keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32302e302f32332d3233203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.20.0/23
Signature Algorithm: sha256WithRSAEncryption
98:06:01:04:59:c3:c1:89:f3:25:d7:2d:e7:3e:92:9a:dd:bf:
6e:97:04:46:a0:0a:75:4a:ff:60:36:e0:28:21:68:3b:1e:c4:
13:b2:7b:dd:bb:b7:a8:71:c9:0d:a3:39:f1:33:56:a1:91:09:
bb:2c:14:75:16:c5:11:3a:6a:1c:bd:75:80:20:a5:fb:d7:e5:
e0:14:d4:69:f5:d9:27:e9:0a:7b:16:4a:eb:6a:f5:9a:cc:ee:
a1:25:30:d9:2a:23:ff:5c:22:db:b4:0e:c7:05:a6:98:bc:51:
52:cd:57:17:d8:a4:9b:c6:ef:d6:13:7e:9b:78:20:dd:aa:56:
fd:e9:17:a4:68:74:05:45:9d:a7:c2:a3:62:46:a5:9f:d3:2f:
6b:83:15:61:1f:4d:33:73:07:2d:b3:82:1a:77:9f:8f:9f:4a:
67:19:16:ce:9c:09:a2:e7:fb:51:1e:4e:a5:25:3f:f8:aa:29:
6f:27:5e:42:07:c8:d3:57:4d:cb:7b:bc:47:43:31:3b:94:14:
8e:53:56:e7:23:d8:09:a9:98:3e:e4:c5:65:49:a9:fb:e8:bc:
9e:b9:8c:0e:f8:10:90:46:7b:7f:59:1b:6a:51:90:3b:56:08:
6a:01:67:01:bb:c6:2e:b3:1d:e9:4b:fa:4d:ed:ec:5b:27:dc:
c6:4d:3b:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP82YhOfEBMyBj+t+jxmwyo4WSncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxODM3MDBaFw0yNTAzMjcxODQyMDBaMDMxMTAvBgNV
BAMTKEU3MUFDNzFCQTZEMEE0REIwRDFGRkMwQUZGNjI1RTg2NUE0MEVDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsHxfDV1GQN9rHDD3XhMdgooUs
KLBhFFo9Ida7HbUlxkJ8RwpCU9yFVPk2WKhGfLgjeII0obLq+pcekT2FAaC7p5pJ
tSOPo6yqtfbk+Mai6IAhj+/MHsCUgSTf43pXL1M3jcvy3JKkTZnSghbpQFbMk/Pu
qkVb5O7VRBP970Dv8QH1FETRCL+sNcicKgnsrwYLaGe7YdYgE84QCAW6sjtJPG3Q
9u1wNcoQu7Yh2PFR1Wn38gHhix95udLLs9TdYrwlCGWh3BH8ojjq+M1cj9/6Ckvg
GvYkyroEiP3AD2Y4WpWo6w5u5e1lntU/XRdCPqNf9esR/6Ljbzu586c2MYl7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU5xrHG6bQpNsNH/wK/2JehlpA7G0wHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxFDANBgkqhkiG9w0BAQsFAAOCAQEAmAYBBFnDwYnz
Jdct5z6Smt2/bpcERqAKdUr/YDbgKCFoOx7EE7J73bu3qHHJDaM58TNWoZEJuywU
dRbFETpqHL11gCCl+9fl4BTUafXZJ+kKexZK62r1mszuoSUw2Soj/1wi27QOxwWm
mLxRUs1XF9ikm8bv1hN+m3gg3apW/ekXpGh0BUWdp8KjYkaln9Mva4MVYR9NM3MH
LbOCGnefj59KZxkWzpwJouf7UR5OpSU/+KopbydeQgfI01dNy3u8R0MxO5QUjlNW
5yPYCamYPuTFZUmp++i8nrmMDvgQkEZ7f1kbalGQO1YIagFnAbvGLrMd6Uv6Te3s
Wyfcxk07RA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org