Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e332e302f32342d3234203d3e203131393231.roa
File: 3230312e34392e332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier: x2aOu+bV8tcnASrSgHfRi1dTnlIp6qFFnFwhmfo0Tv8=
Subject key identifier: 90:A2:5D:2B:00:3E:F0:16:F6:34:0E:88:6A:B1:3C:84:0C:11:7B:43
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 784E10ABC7CF93BC3BD39F0BD71D7353F999F807
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e332e302f32342d3234203d3e203131393231.roa
Signing time: Wed 31 Jul 2024 13:42:49 +0000
ROA not before: Wed 31 Jul 2024 13:37:49 +0000
ROA not after: Wed 30 Jul 2025 13:42:49 +0000
asID: 11921
IP address blocks: 201.49.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4e:10:ab:c7:cf:93:bc:3b:d3:9f:0b:d7:1d:73:53:f9:99:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Jul 31 13:37:49 2024 GMT
Not After : Jul 30 13:42:49 2025 GMT
Subject: CN=90A25D2B003EF016F6340E886AB13C840C117B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:16:09:a4:a1:b8:01:f3:6f:0b:bf:6f:50:
6f:6a:66:d6:9f:1c:52:e9:b1:52:29:2c:f0:b0:57:
1b:f5:11:14:4c:41:7e:df:bb:09:27:84:8b:2e:b0:
41:cf:3f:8e:f9:b9:9c:9d:95:fb:f0:73:85:1e:94:
26:b2:c0:2d:a1:b4:ac:2d:12:7e:96:0e:b5:67:36:
71:93:cf:09:01:2a:b2:6f:22:bd:2f:ea:79:43:93:
86:d9:ae:eb:72:fc:df:f3:96:5d:7a:77:18:8c:38:
11:04:75:e2:fa:a6:0c:9c:a1:81:4f:8b:1b:83:ef:
ef:f5:8e:74:37:8d:6c:42:79:91:23:63:3c:4c:ee:
ea:e3:76:d4:ca:ad:17:b6:3a:80:2d:3e:5b:16:67:
35:aa:de:03:0d:64:af:86:90:d7:37:80:28:c3:65:
88:5d:5f:e1:99:79:f3:e5:43:31:4a:3f:a8:de:11:
f9:47:5b:a1:a5:1b:fa:f7:ae:e0:2c:8b:54:56:4a:
b7:cd:64:f8:6b:48:44:3c:8b:32:36:8b:a1:bb:cb:
58:f5:9d:02:95:45:b3:45:dd:e4:9e:5e:52:7f:e9:
ae:10:bc:ae:4a:cf:dd:7a:97:f7:4c:2f:7f:4c:88:
88:49:54:b5:a6:9c:aa:63:ae:53:5d:e4:82:d3:9b:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:5D:2B:00:3E:F0:16:F6:34:0E:88:6A:B1:3C:84:0C:11:7B:43
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e332e302f32342d3234203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a3:43:3a:19:74:72:30:64:e0:92:9c:20:5a:9d:1a:23:56:
fc:21:ed:27:df:72:d9:68:09:71:e8:b0:3a:b8:38:83:89:6d:
44:b3:ef:9d:12:d2:a0:66:b5:49:da:cc:39:24:39:56:e2:71:
e6:f8:a9:ae:da:8a:01:6d:79:52:5a:1e:57:6b:f2:d4:41:fb:
05:ea:c7:a4:ea:bc:28:b1:50:78:03:dc:0c:a8:8b:db:3a:2d:
c5:38:39:26:37:c9:a9:dd:05:02:2c:7c:94:00:5e:bb:23:94:
e2:de:86:7e:74:aa:a1:b5:a1:93:a6:4d:e3:a6:9d:ca:cd:be:
39:44:76:61:04:87:87:5c:9a:a6:ab:8d:f5:42:eb:e9:3b:59:
ec:5b:7f:fb:95:c0:e1:ab:5d:b3:58:d3:fb:76:dd:8a:4a:84:
a1:11:c9:eb:dd:31:02:c7:da:d1:56:cb:1c:b9:8c:de:39:6c:
58:b8:d0:0d:f1:13:f9:ab:a0:a3:71:47:4d:fe:68:33:35:3c:
b2:56:83:32:70:f2:d5:03:3b:dd:a8:dc:46:f8:6b:86:43:7b:
d6:09:86:3d:f9:4f:cf:02:f1:ad:36:77:46:4f:2a:bd:38:52:
91:ed:bd:5f:91:ae:f7:a4:6d:bb:87:8c:63:e2:69:c6:74:43:
bf:7f:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:35 2025 by rpki-client