Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e31362e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: oA1e8okNvlwpVuCOFJpkP56tORfIPaT/YHEg2SV1xsw=
Subject key identifier: 36:A9:21:11:4E:D3:94:0C:02:25:33:D9:2E:AF:4A:4F:02:6E:6C:CF
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 6A1350AA5C72F9013CB4F3E8DFA7968E54BDA1A9
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:55 +0000
ROA not before: Wed 31 Jul 2024 13:37:55 +0000
ROA not after: Wed 30 Jul 2025 13:42:55 +0000
asID: 11921
IP address blocks: 201.49.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:13:50:aa:5c:72:f9:01:3c:b4:f3:e8:df:a7:96:8e:54:bd:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:55 2024 GMT
Not After : Jul 30 13:42:55 2025 GMT
Subject: CN=36A921114ED3940C022533D92EAF4A4F026E6CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:12:04:63:d4:10:c3:f7:4f:63:9f:98:2b:
d5:65:6c:11:8e:9f:a9:f6:63:5b:48:ee:b0:42:77:
fa:8e:a2:82:03:cd:05:3c:59:5c:f9:01:11:a3:7b:
bd:d0:70:62:ea:11:bc:f5:59:93:06:be:58:e4:a3:
c6:0c:61:d6:03:81:2e:57:d1:32:2d:76:2b:7e:4a:
1b:7a:e4:06:83:cc:de:59:44:a8:26:60:55:7c:a8:
4d:6d:6e:68:b6:c0:11:f8:a9:ce:a7:17:83:26:bb:
32:55:82:24:42:47:37:a4:ff:06:25:c3:65:15:fb:
6c:8e:06:59:0b:95:3c:0a:fe:61:2b:db:7e:10:32:
b6:38:1c:14:85:77:1c:24:f4:16:71:35:64:28:97:
4f:54:ba:26:4e:cd:ac:48:c4:bb:38:cc:89:43:d9:
21:67:aa:85:dd:65:1b:e2:a6:8c:5f:48:53:b3:5b:
c5:fa:e4:36:7d:bc:79:6f:c5:b0:a6:b9:a8:06:0f:
8c:0f:a2:da:70:60:73:38:c4:b0:59:0f:73:96:b6:
d4:f8:e6:1d:ea:ab:75:44:81:61:0f:dd:f9:96:1d:
0a:fa:60:72:27:e1:bb:29:bd:35:3c:77:68:70:8c:
46:af:04:3b:47:a1:f6:5b:34:f4:23:ea:b2:36:41:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:21:11:4E:D3:94:0C:02:25:33:D9:2E:AF:4A:4F:02:6E:6C:CF
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.16.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dc:ef:b6:21:af:e3:1e:86:b1:23:27:d1:29:a1:16:92:e4:
f9:71:41:4e:c2:b7:eb:d1:aa:2b:50:c5:c1:39:3e:c3:65:82:
99:cf:d7:b2:23:e6:b5:12:ce:5f:4b:5e:67:9c:80:7b:0d:b6:
c6:26:15:1e:e5:f6:6a:ab:96:ce:2c:e0:27:08:da:1f:c7:aa:
62:b2:34:74:ed:49:51:2f:91:77:69:24:fd:a5:9c:04:be:cf:
8b:ca:33:6c:19:07:d2:79:59:fd:3a:ca:a1:ec:3c:72:e1:9f:
a1:4a:de:5f:27:71:e2:4c:62:9d:b2:fb:24:45:21:48:9e:a8:
62:b1:f0:05:1e:9d:ed:eb:c2:9a:11:6c:3f:c8:53:20:cb:f4:
bf:74:70:63:1f:c9:4b:1a:30:10:70:5f:69:db:5d:7f:a4:b7:
20:67:4e:67:4e:7c:b0:12:20:41:fb:9e:66:0b:38:03:e0:4a:
22:ed:7e:33:7a:66:ad:f2:00:05:d4:b0:12:86:d4:11:ec:4c:
3f:51:34:f2:85:59:87:58:65:1b:61:51:14:9c:86:4f:09:2c:
be:fe:bb:c5:d3:ee:3b:43:13:6e:f9:c8:cf:3e:76:f4:13:b1:
d9:93:17:41:54:15:7c:68:09:4d:e0:2c:8b:60:53:c2:e9:76:
eb:be:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:12 2025 by rpki-client