Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
File: 3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier: zp+Alv7tm4vYZC7OoBRFFDheIbkSFu3vTkygE53g7a0=
Subject key identifier: E8:A6:33:A9:06:7D:A7:0F:78:2C:CF:9C:73:12:DE:4F:D2:1E:2F:22
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 3F30DEA859891D9C712F15844DD8F491B52BD854
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
Signing time: Tue 23 Apr 2024 19:13:39 +0000
ROA not before: Tue 23 Apr 2024 19:08:39 +0000
ROA not after: Tue 22 Apr 2025 19:13:39 +0000
asID: 263627
IP address blocks: 143.202.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:30:de:a8:59:89:1d:9c:71:2f:15:84:4d:d8:f4:91:b5:2b:d8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Apr 23 19:08:39 2024 GMT
Not After : Apr 22 19:13:39 2025 GMT
Subject: CN=E8A633A9067DA70F782CCF9C7312DE4FD21E2F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:99:07:7b:f4:83:a5:05:4c:30:68:ea:22:
20:8a:dc:03:1b:77:cf:90:94:ba:cb:3d:c7:8a:b1:
b3:f3:7a:a4:0a:bc:9a:79:29:69:8f:db:80:f8:c9:
c8:07:41:9e:e7:e7:d2:c1:df:83:89:24:98:12:09:
f1:02:24:d3:f7:bd:a6:60:fe:2b:6c:25:ff:89:a4:
04:88:28:1d:d6:11:55:da:82:63:88:6f:4c:ab:a9:
33:3a:38:d3:ff:ba:e4:b1:42:6d:44:a7:00:5e:d5:
fd:9c:c0:6c:24:b3:c2:ef:44:85:3c:00:a7:cc:0f:
d0:d0:01:ce:c2:09:03:fe:b1:28:a1:9e:74:5a:af:
31:0e:50:d8:43:c5:76:e1:bb:a5:63:00:2e:7e:42:
11:59:60:85:2c:a5:00:09:80:dd:a8:a8:61:84:24:
17:08:1b:60:b8:02:32:54:13:34:28:13:b8:34:23:
7c:a4:22:37:e7:b5:94:4a:35:1a:cc:f2:dc:2c:7d:
51:2e:8e:fd:f0:da:5e:b9:79:ad:5b:42:6c:8f:86:
74:4f:07:e1:93:8c:2e:8f:c5:81:d8:d6:5d:10:3b:
ba:a3:fb:04:7d:ca:d5:eb:7f:1a:fc:3d:f9:06:c1:
28:3c:b4:1c:7e:17:da:5a:8c:72:7d:1f:50:26:22:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:33:A9:06:7D:A7:0F:78:2C:CF:9C:73:12:DE:4F:D2:1E:2F:22
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.237.0/24
Signature Algorithm: sha256WithRSAEncryption
47:51:9a:bb:7e:5e:1d:83:88:7a:20:d0:cc:40:e3:4a:83:92:
5f:a8:f6:f3:c7:ba:eb:5d:e8:3a:fa:14:2d:8b:59:f1:51:89:
9b:a5:35:1e:70:17:a8:f5:7c:fe:c7:b1:64:13:48:b3:a9:61:
40:08:e8:19:f3:1e:37:14:81:57:bd:85:e8:0f:c1:5c:99:81:
b1:ba:b9:43:fb:7f:6a:5a:67:45:7f:e2:c7:f8:f5:fb:bb:be:
25:9c:7a:b9:63:e4:99:b5:29:43:aa:b4:c7:8f:f2:7b:8f:c4:
7c:d7:0c:90:84:84:42:cb:9f:e1:d1:66:c8:8a:b1:22:78:db:
fc:2c:3d:63:76:46:e2:99:99:33:16:3c:e9:2f:0a:47:10:64:
e6:97:50:bc:39:55:fd:99:51:cd:7f:19:67:75:4e:a4:d3:d4:
c8:58:41:54:82:0c:38:d7:2c:fd:b7:02:6f:6f:8a:f2:92:f6:
ad:28:0e:71:9b:73:29:01:b4:ad:d9:52:88:f1:21:cf:cf:4c:
79:8a:dd:a2:3f:72:13:c0:bc:1b:0a:a9:b0:7a:eb:4d:44:63:
d3:be:46:a2:4a:ec:36:5e:4a:01:4b:cb:79:3d:65:bc:72:8f:
58:31:3c:33:bb:71:ee:21:fb:1b:14:ff:11:b3:5c:a5:4b:6d:
ec:9b:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:58:32 2025 by rpki-client