Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31332e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: /HFKoCPpA3Wz5u6oZGAsrxV4iQCojTwcgP6AUVKTsBs=
Subject key identifier: DB:DC:9A:C6:78:F7:89:70:8F:ED:3A:74:86:E3:E5:F9:CF:18:B8:6E
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 7B019313F164DAAA881DF1AFD5C46898212701E4
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31332e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:53 +0000
ROA not before: Wed 31 Jul 2024 13:37:53 +0000
ROA not after: Wed 30 Jul 2025 13:42:53 +0000
asID: 11921
IP address blocks: 201.49.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:01:93:13:f1:64:da:aa:88:1d:f1:af:d5:c4:68:98:21:27:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:53 2024 GMT
Not After : Jul 30 13:42:53 2025 GMT
Subject: CN=DBDC9AC678F789708FED3A7486E3E5F9CF18B86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:e8:d1:28:37:ee:8f:27:5a:e2:93:8b:d0:
b1:9b:4f:14:c4:a7:d7:cf:15:79:31:12:e5:35:01:
6a:cd:52:b1:23:a0:66:00:49:56:93:1a:73:6d:32:
90:c2:f3:21:44:87:83:ed:c9:1a:d5:b3:c2:be:33:
25:0c:12:dc:a5:97:1d:a0:b2:9d:77:5a:ee:76:76:
55:d5:a0:39:88:fa:10:33:41:e1:90:76:42:3d:4a:
e0:a0:1d:0c:3c:11:a8:62:80:ce:6f:63:d0:03:04:
a7:69:17:c7:fa:12:98:92:62:6f:c7:d1:82:ac:08:
b6:b8:1f:3f:24:56:4e:98:1d:4c:7e:30:c8:36:45:
b0:1c:98:67:f6:72:4b:f8:d4:3e:00:dd:a2:f1:b6:
36:40:0b:86:08:d5:3b:01:76:2f:2c:05:be:fb:a5:
82:1a:f5:21:80:24:77:c8:ab:1f:4b:65:d5:e2:d7:
a5:0e:b5:5b:2e:5a:7d:d5:53:3c:83:20:a2:14:f5:
c2:95:9a:48:3d:31:78:67:ff:4e:ff:41:25:84:31:
27:ed:fb:5e:f5:6f:e8:b8:f5:ab:8d:da:a5:16:e9:
fe:1e:60:5a:54:8a:68:20:9f:e5:d0:56:01:fd:eb:
15:3e:91:18:c5:70:5c:39:eb:e5:42:c9:ac:de:72:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:9A:C6:78:F7:89:70:8F:ED:3A:74:86:E3:E5:F9:CF:18:B8:6E
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31332e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:89:75:09:a6:79:10:64:b0:4d:99:45:02:4f:a2:85:1a:91:
cb:c7:bd:98:72:d1:91:ca:3a:87:f0:a9:52:06:ae:43:ca:6a:
21:11:a7:6e:87:33:20:e5:47:79:ee:73:46:70:16:44:08:e7:
ba:eb:b6:15:70:dd:01:0f:4d:fd:b0:bc:b3:9e:13:4e:fd:5b:
bc:4d:8b:4c:33:be:b2:ba:67:66:dd:5a:67:3b:23:87:d8:23:
d5:67:4d:b0:38:d5:5f:40:2d:57:f6:46:64:72:9f:b3:51:c9:
97:df:76:63:95:76:5f:f1:1c:20:34:2d:48:aa:db:64:e1:56:
c8:4b:83:b3:cb:9f:5c:10:3a:05:06:c9:35:c2:10:42:8c:3a:
ad:f6:43:24:92:60:1a:44:65:05:77:56:5b:bb:07:c5:4b:f4:
b9:07:a6:d2:a4:09:35:d4:04:2f:56:a3:e9:55:3e:a6:6e:51:
b9:60:7f:e9:e3:d4:7f:d1:f0:31:14:1c:0b:73:17:44:28:9f:
68:32:5c:1f:97:d9:2c:8c:25:b0:c7:57:88:23:48:95:bf:63:
11:de:7a:79:a6:30:00:91:27:06:c7:21:d6:9a:30:a0:ea:ad:
a8:5f:ca:88:75:57:64:0e:08:8f:45:40:69:4d:73:9c:55:2b:
9c:11:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:32 2025 by rpki-client