Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32342d3234203d3e203131393231.roa
File: 3230302e3139342e3130382e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: Ilv3Wq4+EQV8ngmfF055e+QMoZ3RL55YoOLPSVLBUiU=
Subject key identifier: B8:A3:1B:75:2B:41:33:91:CB:1A:25:53:D5:57:B9:8F:A0:EB:02:25
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 25471EF2DBD207BF22800D788C2E37807D85F980
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:33:59 +0000
ROA not before: Wed 31 Jul 2024 13:28:59 +0000
ROA not after: Wed 30 Jul 2025 13:33:59 +0000
asID: 11921
IP address blocks: 200.194.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:47:1e:f2:db:d2:07:bf:22:80:0d:78:8c:2e:37:80:7d:85:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:28:59 2024 GMT
Not After : Jul 30 13:33:59 2025 GMT
Subject: CN=B8A31B752B413391CB1A2553D557B98FA0EB0225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:71:8c:ea:60:98:44:b1:a0:a4:35:bb:96:
eb:6d:b8:3f:66:e9:78:4d:37:df:9f:66:2d:7a:e0:
33:ee:22:d4:1b:b7:ca:35:d6:b5:c9:bf:16:13:9d:
ce:7c:18:10:29:6d:b2:df:21:8d:b4:50:ae:38:42:
d3:97:da:2b:6f:45:18:14:45:ab:79:1f:fe:9a:97:
f0:0b:2d:25:eb:97:20:e3:f7:01:da:3c:24:26:98:
3b:0e:96:a2:ed:80:23:58:b0:5d:38:f9:83:78:9a:
df:50:8a:0a:de:38:4a:6a:50:78:50:94:ef:24:be:
1e:23:38:7e:99:81:ca:6c:7e:1a:28:5f:06:e9:95:
45:7f:b1:85:07:54:df:45:2a:eb:df:67:64:84:93:
15:42:17:7e:07:12:47:c9:62:3e:b4:15:81:40:92:
9d:d6:b1:e9:ee:39:d0:9d:e7:50:a1:a2:49:e7:18:
80:13:64:35:c8:a4:2c:96:ba:44:91:1b:d4:81:a7:
2d:bc:9f:36:09:21:58:50:63:15:11:4e:cc:8a:5b:
4e:23:5f:08:da:d5:7a:60:a2:1c:1f:3c:b6:92:87:
cb:50:18:ef:e0:0b:26:10:92:3b:8f:a1:5f:28:e6:
51:5e:5b:2d:fc:55:fe:4d:12:a6:30:30:7c:98:4f:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:1B:75:2B:41:33:91:CB:1A:25:53:D5:57:B9:8F:A0:EB:02:25
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.194.108.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c4:21:7f:e1:f4:3e:f0:d6:e6:e0:1d:76:3f:14:9c:f3:2c:
04:ce:c7:b4:34:02:f9:9f:46:6d:74:22:5d:65:23:e0:c6:df:
ef:d8:dd:96:67:53:09:4b:9a:65:46:cd:5a:92:7f:cf:97:b0:
1b:0b:e8:59:0c:d1:2b:0d:10:e1:96:9c:58:79:6d:12:f7:69:
d0:cc:47:b5:4e:c3:b4:11:9a:a8:55:19:2e:b1:74:96:64:cb:
5b:4e:0e:a4:3c:4a:08:24:04:0a:d3:dd:88:af:f5:44:22:46:
42:50:bc:8b:20:3a:b8:21:07:4c:78:62:13:c4:40:d0:52:bb:
49:f0:af:0b:90:82:13:9a:0c:b8:be:74:8c:34:9c:45:09:65:
32:bb:12:96:c7:6d:91:91:74:72:8c:09:17:17:45:07:6c:6c:
e2:96:6e:ca:9c:2d:37:b7:83:52:30:cc:5d:84:c8:63:8e:eb:
96:f4:17:a1:73:64:d6:60:85:fc:25:f3:84:64:84:5c:0b:8d:
42:52:22:08:f2:20:dc:cb:86:9a:e8:c1:b9:2f:cb:28:ec:88:
1f:6f:da:a4:f1:cd:69:03:61:17:ad:7f:d7:35:79:f9:e3:0d:
4d:f4:71:36:59:8a:64:65:f9:36:d8:fb:de:86:ae:27:3e:6f:
c2:3b:7c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:34:42 2025 by rpki-client