Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36302e302f32332d3233203d3e203131393231.roa
File: 3230312e34392e36302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier: yHbdjsOPO4zVcTo5Xi1SzxbN6XFrfY1ZQsNXtuhDhsU=
Subject key identifier: C2:CA:4E:D4:53:12:B1:2F:19:CE:DD:5D:F2:0E:1A:A9:1E:AF:AE:B6
Certificate issuer: /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial: 3EB8E7AFCD54C77E13237642FEC1BAA436DEAE0A
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36302e302f32332d3233203d3e203131393231.roa
Signing time: Thu 28 Mar 2024 18:41:59 +0000
ROA not before: Thu 28 Mar 2024 18:36:59 +0000
ROA not after: Thu 27 Mar 2025 18:41:59 +0000
asID: 11921
IP address blocks: 201.49.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:e7:af:cd:54:c7:7e:13:23:76:42:fe:c1:ba:a4:36:de:ae:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
Validity
Not Before: Mar 28 18:36:59 2024 GMT
Not After : Mar 27 18:41:59 2025 GMT
Subject: CN=C2CA4ED45312B12F19CEDD5DF20E1AA91EAFAEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:72:28:8d:7b:7c:86:80:5c:ae:38:8d:aa:
39:65:0d:01:d9:1b:ea:9d:b7:11:22:4e:6f:25:8f:
12:b6:6e:ff:f0:aa:a8:e2:dc:14:8c:56:5e:05:94:
87:2f:37:a9:ef:70:c5:53:27:fd:53:89:c3:b6:ed:
8d:7a:c1:32:37:82:f7:bf:be:1e:ff:f7:82:b2:a3:
57:6d:e2:05:12:74:f9:e4:8b:dd:4b:7e:67:2a:ad:
43:78:87:03:ed:56:f6:9e:5e:21:01:83:90:54:dc:
4a:1e:18:5f:68:3e:26:4c:cc:59:13:9d:12:6c:76:
52:8f:85:0c:5d:b8:80:69:44:e3:10:48:0b:50:3a:
3d:39:e9:4b:8b:88:df:0c:bb:c7:5e:4f:f7:46:68:
dc:42:a0:fc:c1:51:e4:33:33:55:39:74:4e:42:20:
62:4c:69:6a:0c:9d:f5:59:06:79:63:42:43:b6:e3:
69:54:b5:60:9d:25:fc:3e:0b:ed:38:4b:c9:8b:33:
bb:8b:d6:e8:23:66:aa:9f:38:6e:9e:ca:d7:50:43:
89:88:66:c4:9c:d7:d5:fe:f4:03:59:7c:0f:9e:7a:
92:dd:dc:1f:ea:1a:af:98:ba:61:27:e0:cd:1f:5d:
c2:8a:79:38:ce:11:43:85:81:53:39:88:4a:32:74:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:4E:D4:53:12:B1:2F:19:CE:DD:5D:F2:0E:1A:A9:1E:AF:AE:B6
X509v3 Authority Key Identifier:
keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36302e302f32332d3233203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.60.0/23
Signature Algorithm: sha256WithRSAEncryption
09:94:7b:e7:dd:48:c5:a5:c4:9a:69:de:34:aa:9b:4a:06:d3:
b7:83:78:c9:ca:93:be:ad:87:c1:63:0d:ff:56:06:27:ba:1e:
85:33:bf:50:13:54:bf:fc:36:66:74:6a:67:e7:4a:90:ec:38:
2c:e8:fa:f2:2a:33:52:82:0e:bc:9d:d8:af:f8:5d:25:28:33:
67:84:1a:77:24:97:0a:0a:15:31:11:7f:bd:30:b9:91:57:28:
bc:b6:5d:a2:8a:45:79:d7:f7:3a:00:8d:57:bb:79:61:80:85:
2b:52:ed:56:67:28:15:20:bb:f8:d3:ab:78:34:ed:ac:e3:c3:
1d:df:f4:29:0c:0d:f9:9e:8e:09:58:64:85:79:68:c5:1c:86:
d1:e6:b5:a5:43:49:58:5b:30:58:1f:38:7c:55:1a:0b:1f:f9:
21:7b:c9:36:d7:a0:6c:7d:eb:43:23:fa:fc:44:a4:62:94:84:
95:48:80:eb:52:47:9f:9c:55:db:f1:2c:c6:f9:67:f6:70:a1:
b1:0c:4a:c7:9e:b7:19:16:8c:0d:8e:5b:b1:d5:aa:61:56:a2:
b9:9e:25:05:65:36:65:c3:7c:27:41:5d:b2:54:79:7d:5c:8b:
51:62:10:bf:65:48:0e:68:8c:5b:60:63:bb:a5:e3:f3:75:ff:
02:77:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org