Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: DhGNoK/ifOY3aKkFf9FYJH2dS97wW0F5MWdXUDGrbIU=
Subject key identifier: 68:2B:95:B7:3B:75:71:EB:1B:DA:E9:6F:07:A3:F6:CF:13:52:8F:A4
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 078C4D033002C4225D4B474E93BADA0B4C58CCC4
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:54 +0000
ROA not before: Wed 31 Jul 2024 13:37:54 +0000
ROA not after: Wed 30 Jul 2025 13:42:54 +0000
asID: 11921
IP address blocks: 201.49.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8c:4d:03:30:02:c4:22:5d:4b:47:4e:93:ba:da:0b:4c:58:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:54 2024 GMT
Not After : Jul 30 13:42:54 2025 GMT
Subject: CN=682B95B73B7571EB1BDAE96F07A3F6CF13528FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:56:29:46:b6:53:a7:7a:07:7b:dc:e4:e6:
b3:c2:8d:19:7e:fe:b5:25:4a:94:23:44:f0:61:f1:
21:d1:6c:48:06:3f:43:f0:f9:0c:ec:62:c8:d1:4e:
f2:f9:78:f8:5b:30:85:6b:70:3a:f8:5b:62:84:2e:
fe:a8:a1:b5:0a:53:f0:ad:6a:a7:0d:0b:61:ab:ad:
e5:23:aa:85:fa:5f:e3:04:0e:85:2d:73:fb:22:dc:
66:4d:20:58:c7:bf:aa:16:31:99:73:6c:e4:b6:60:
43:1b:0a:06:bf:21:32:7e:81:f0:82:05:49:2a:7b:
9a:30:f3:32:ff:60:1d:34:80:c3:d2:f9:0d:17:96:
ae:51:24:95:22:55:37:29:01:54:ef:31:24:07:cd:
33:17:e5:44:f3:a1:89:ca:56:fa:c2:2a:d0:9a:41:
be:b6:a4:5e:27:7a:af:ae:a1:26:b5:f6:c2:01:1e:
9b:d0:2f:38:2f:f3:04:cb:62:f0:50:d2:83:8e:fc:
b4:59:16:d6:11:a6:a1:63:b1:14:0a:64:8a:c8:61:
df:87:f2:f4:be:f4:6d:1f:df:c4:f9:95:e6:31:7c:
51:ea:59:08:3d:0e:66:19:ac:28:7a:7b:79:1e:bb:
d6:f0:a1:ec:9a:24:42:b7:34:0a:35:81:f2:96:dd:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:95:B7:3B:75:71:EB:1B:DA:E9:6F:07:A3:F6:CF:13:52:8F:A4
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:3a:3d:3e:79:06:af:56:12:79:4b:d7:58:04:00:85:90:
4d:7d:80:70:b8:42:00:dd:d3:fb:44:50:7f:a2:80:fa:50:c6:
48:9a:60:51:0d:1b:ff:be:34:d2:98:ed:19:15:6b:15:4a:a2:
2c:91:3a:ce:08:68:79:28:32:e0:62:76:ee:72:93:a3:41:c6:
97:2d:59:3b:db:21:9c:8f:3a:65:b0:02:85:68:68:ce:6a:a3:
28:e5:a7:70:76:f8:dc:55:a1:99:e5:cd:80:a6:2a:7f:ee:f8:
f3:a6:6d:ff:db:4b:12:78:8f:e1:b4:94:cd:6f:e6:cb:b3:f9:
b9:05:6a:c7:79:07:ec:47:aa:1f:20:84:2c:c0:b1:24:ec:31:
0e:3e:cd:f9:ca:b5:12:7f:d1:e2:58:95:66:2f:78:ef:f1:c5:
bd:7c:be:f4:7d:17:0f:6d:6a:fb:f3:d4:3d:74:c2:1d:25:f8:
60:9e:83:ff:a0:a1:ae:61:d4:fa:00:5e:28:cd:a0:3f:f5:d7:
fe:8e:19:db:2e:f9:af:2a:a6:c7:3f:db:21:8a:ad:c2:43:08:
82:6d:73:d1:70:19:bf:7c:d4:d8:3e:8e:20:87:87:f9:d1:71:
e2:41:ac:db:7d:87:6c:1e:e4:b6:3f:ed:37:91:08:bb:15:6a:
57:09:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:19:16 2025 by rpki-client