Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: JVfJ+c6N/efXOqjAottTRXsq0YoQ5Mg7PRzsZBIXUpg=
Subject key identifier: 5A:BB:C6:A7:2A:50:6F:F2:81:F2:45:13:7A:8E:AA:72:E1:C1:3D:F1
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 4BD579F5D2C574EDE43C734C80DF2A6F348E806E
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:52 +0000
ROA not before: Wed 31 Jul 2024 13:37:52 +0000
ROA not after: Wed 30 Jul 2025 13:42:52 +0000
asID: 11921
IP address blocks: 201.49.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d5:79:f5:d2:c5:74:ed:e4:3c:73:4c:80:df:2a:6f:34:8e:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:52 2024 GMT
Not After : Jul 30 13:42:52 2025 GMT
Subject: CN=5ABBC6A72A506FF281F245137A8EAA72E1C13DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:38:1f:46:38:d8:4d:5a:3e:11:f0:0c:31:
ec:dd:16:e7:5a:f7:fe:e8:04:fe:f8:8c:d8:d6:f1:
d1:2e:af:43:33:bf:12:6c:ce:7a:20:3e:2e:33:ad:
9d:b3:aa:ed:6f:55:ce:f3:a7:9d:61:2e:b3:37:f3:
51:a5:bd:5c:f8:fc:3e:e7:ff:e2:e6:99:ac:19:a7:
3c:de:2d:9e:f8:39:2b:bd:9a:c3:76:42:5c:33:f8:
70:a2:b5:7e:a0:73:9b:4b:dc:06:b3:d1:08:02:9f:
7b:8c:17:06:7e:0a:80:93:95:e1:27:b6:73:e4:95:
d6:2f:d0:95:29:0c:47:3e:5b:32:15:12:32:0d:79:
e6:18:18:7f:26:f6:77:ca:0d:27:e3:32:0a:48:db:
fb:45:75:ef:82:a2:af:c2:c2:2e:5a:b0:71:89:f9:
e4:e0:74:3a:0f:3c:35:e6:e8:9e:6e:54:ce:a1:85:
f3:f1:e2:24:0f:77:78:cd:f0:94:15:61:e8:f0:20:
b3:bf:66:01:91:f6:83:b4:97:3a:37:21:22:62:54:
89:11:8a:e2:54:42:7c:2c:a6:a3:64:ba:65:55:64:
e7:74:72:bf:8d:99:80:b4:94:76:8b:f1:31:6c:92:
93:e0:d3:1b:87:19:ae:09:e0:1b:c5:ca:e8:5b:41:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:C6:A7:2A:50:6F:F2:81:F2:45:13:7A:8E:AA:72:E1:C1:3D:F1
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.10.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ca:1f:20:ca:66:9b:d0:19:33:f6:8b:df:7a:9b:eb:ab:04:
6b:a5:cc:7d:88:0f:e6:59:6b:8b:d7:f5:4d:92:e3:ec:a2:66:
97:5c:2f:b9:98:ca:d1:68:a3:f2:68:42:0d:37:82:6f:76:a2:
7d:51:cd:86:9a:2d:ee:af:21:36:4d:76:f5:c5:1f:38:1a:63:
0f:52:4a:52:3b:52:80:0a:45:8b:ea:0a:83:5b:e2:c1:49:e9:
f7:17:07:2c:40:01:16:26:b6:6e:62:3e:42:62:15:0d:73:35:
16:fe:11:80:2c:5b:32:34:78:97:93:51:dd:85:cc:43:af:fd:
29:d5:96:27:5d:98:5b:af:f6:f4:b6:d5:54:d9:3a:d7:fb:df:
bb:37:9b:07:91:a2:f3:b3:32:dc:fd:29:7c:7c:65:d4:e8:3b:
ee:d5:69:24:28:f3:55:ef:e6:9c:41:6a:b2:1c:f0:88:1f:d6:
b7:16:3e:38:92:40:6d:d7:15:73:bb:6f:e6:e7:65:1d:78:b0:
4c:03:42:ea:fb:90:f5:2c:66:32:e8:af:59:7a:d6:8a:62:73:
ae:79:a2:1b:2c:74:83:9e:fe:10:8a:1f:ff:7d:a4:d3:08:c3:
e8:fd:32:25:eb:5d:4f:6f:64:24:77:43:a8:10:1d:80:10:a3:
b9:49:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:19:42 2025 by rpki-client