Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130392e302f32342d3234203d3e203131393231.roa
File: 3230302e3139342e3130392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: k7AGJxm+2DKcyu3HTjdtdVETFJhPWjZl+FIKr0OYD/E=
Subject key identifier: 29:7D:F4:BC:02:A0:05:F8:14:70:88:3B:89:73:A8:60:3E:C5:D5:27
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 328234E5C86C337597143F50214FB8832817F947
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130392e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:33:59 +0000
ROA not before: Wed 31 Jul 2024 13:28:59 +0000
ROA not after: Wed 30 Jul 2025 13:33:59 +0000
asID: 11921
IP address blocks: 200.194.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:82:34:e5:c8:6c:33:75:97:14:3f:50:21:4f:b8:83:28:17:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:28:59 2024 GMT
Not After : Jul 30 13:33:59 2025 GMT
Subject: CN=297DF4BC02A005F81470883B8973A8603EC5D527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:a8:90:96:04:f7:ed:82:03:d9:93:19:71:
81:93:8b:06:50:e2:48:61:ef:ea:9b:14:3a:a7:08:
19:3d:a5:ed:87:44:8f:2f:ab:af:25:fa:cb:2f:49:
99:3f:2a:64:fa:7d:96:b0:35:7a:69:71:ef:9c:02:
20:8f:40:69:b7:15:4c:5a:f5:37:3e:c3:b1:90:28:
7a:4a:8f:1b:8c:e5:92:ca:78:30:80:7e:9e:ad:33:
45:fe:77:0e:4c:c7:2f:bb:a0:32:5e:90:19:69:29:
dd:1f:35:77:4b:44:7b:9a:59:5c:48:b0:71:36:79:
c2:d0:3e:ef:ed:38:62:e8:a0:c5:ab:68:34:f4:ba:
c1:dc:79:c8:ac:9d:9d:b4:46:ca:d7:91:fe:ba:0d:
a1:61:a8:01:1a:d6:6d:7d:05:01:82:39:e0:98:23:
23:5f:00:05:c3:95:bc:b4:96:93:47:45:28:0d:43:
c1:20:75:7e:d5:31:bd:cb:76:1c:eb:e7:82:e5:47:
bd:bb:32:62:81:db:01:4f:2b:a1:46:a0:eb:55:22:
ab:30:7a:99:47:b0:5e:9f:b0:bb:d0:7c:d7:61:6f:
37:0a:f1:20:ac:1d:7d:7a:08:82:15:d6:b3:ec:a3:
5d:18:ad:8d:64:8c:39:b5:1a:ed:8c:94:82:50:e4:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:F4:BC:02:A0:05:F8:14:70:88:3B:89:73:A8:60:3E:C5:D5:27
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130392e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.194.109.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d3:53:db:0c:0e:b2:ee:2a:34:3c:f5:0f:a5:a8:d4:dc:da:
33:be:d3:63:97:05:fb:09:65:45:f7:d9:52:36:65:a0:b8:d9:
76:1f:35:66:7a:2d:69:c9:68:fe:68:46:94:95:79:8b:b0:d1:
2f:f7:5b:52:82:82:64:52:6f:d5:a3:27:22:90:a3:f7:9d:cb:
15:5c:8c:b2:71:62:71:aa:c1:a4:8f:ca:d3:f5:b2:b6:5e:73:
78:a6:06:80:fe:22:56:6d:aa:09:76:d2:eb:0e:21:d1:1e:f9:
20:05:73:ff:d1:2b:17:6d:71:fb:eb:55:5b:21:58:5b:41:3c:
78:01:44:52:95:33:a4:3c:99:78:68:72:13:7b:d9:02:35:e8:
19:72:73:26:4c:be:b5:60:9b:a8:88:fd:80:64:a8:3a:75:85:
b3:0a:26:37:37:f4:ab:fa:f2:8b:31:c4:e1:b3:d6:47:d8:e0:
0e:53:6a:27:00:0a:65:a2:c0:94:86:f4:03:d7:c9:6d:e1:a3:
94:7c:7a:ea:a3:21:ed:0c:a5:91:12:71:a2:ea:2f:f7:1c:96:
06:33:54:dd:e1:b8:3e:1b:04:90:1f:e5:85:27:3a:3a:48:bb:
1f:58:39:54:bb:a7:4e:dd:35:cb:19:f2:c2:be:52:02:5b:b7:
14:e1:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:35:16 2025 by rpki-client