Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
File: 3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier: Opypgsuz+Na80w1t6lv5lr6+UZWYiFiq4MJF1TqNl1c=
Subject key identifier: 1A:45:36:7E:82:4E:45:FC:9A:B7:B7:54:C5:FD:83:7D:CE:5A:15:DC
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 688FF4F0D74279D710060E799DB95271307F3605
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
Signing time: Wed 23 Oct 2024 13:07:12 +0000
ROA not before: Wed 23 Oct 2024 13:02:12 +0000
ROA not after: Wed 22 Oct 2025 13:07:12 +0000
asID: 52871
IP address blocks: 201.157.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8f:f4:f0:d7:42:79:d7:10:06:0e:79:9d:b9:52:71:30:7f:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Oct 23 13:02:12 2024 GMT
Not After : Oct 22 13:07:12 2025 GMT
Subject: CN=1A45367E824E45FC9AB7B754C5FD837DCE5A15DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:04:bd:94:27:91:93:7e:45:e9:c0:32:bc:
eb:98:8d:c4:e4:78:dc:17:84:ac:22:51:df:29:be:
e7:c1:44:d9:1c:21:34:68:4a:64:63:13:4c:ba:d9:
70:eb:60:b4:f2:6c:0e:40:32:0a:21:02:19:b6:b2:
df:4b:7f:45:dd:14:b7:f0:e7:10:d8:ef:66:cb:21:
05:39:53:f0:e4:02:6f:3e:11:6a:91:1c:00:22:8e:
c7:79:a0:4c:b0:e3:cb:a9:8f:81:c3:43:ba:33:c5:
68:ea:b6:92:85:8f:d0:c2:a1:41:a2:2f:77:6a:10:
28:1f:20:79:fc:08:b3:8c:4e:0a:40:9e:c8:e1:c2:
7f:07:c1:21:70:6e:61:5f:a7:0d:75:24:3d:5b:ae:
29:3f:93:d8:19:a3:6c:b3:40:43:76:80:5d:c6:ee:
80:01:45:ac:38:88:3b:63:e7:bc:58:ed:a5:5b:34:
84:4b:2a:1a:19:6b:36:e5:43:38:9e:dc:30:03:ce:
c7:b8:bf:d6:dc:06:3b:26:41:ab:6d:04:a7:9a:90:
1e:25:f5:0a:32:d2:b9:28:94:61:09:01:00:0a:b6:
49:ab:cf:ba:28:c6:88:91:a4:44:3c:df:84:5f:b6:
ef:32:53:ac:98:95:bc:64:e7:4a:00:79:10:e5:f0:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:36:7E:82:4E:45:FC:9A:B7:B7:54:C5:FD:83:7D:CE:5A:15:DC
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:89:7f:f7:c4:e4:90:ce:d3:75:15:82:3f:af:f0:e3:a7:
53:f8:ca:32:c3:ec:5a:19:15:37:7b:e1:c3:18:c3:23:68:ea:
e3:db:22:ec:21:a6:18:27:5b:af:52:fd:47:02:56:8e:0b:6e:
eb:92:0f:b6:70:02:7e:64:40:0f:88:a2:37:fd:cd:1e:6c:ce:
cf:8f:0a:ed:53:67:ab:da:34:a7:ab:35:5e:b7:46:7a:a9:7e:
55:65:6b:ff:64:7d:37:33:fd:72:6f:86:d9:9c:25:c2:66:61:
92:48:24:c4:14:ca:c6:33:c9:42:a5:6d:2f:38:50:b4:d0:24:
f6:f7:fb:a6:67:08:5c:56:ab:fd:64:e7:97:38:ab:3d:2c:f8:
df:6c:2a:0a:4f:1b:69:9e:f7:15:44:65:0f:6c:f1:63:b0:7f:
b2:17:f0:18:0f:ef:14:a6:1a:50:71:8d:0b:c7:4d:9c:04:21:
78:89:97:71:6d:52:66:61:3c:e9:bb:25:c4:c1:2a:4c:44:f1:
d2:85:fd:22:7d:d8:b8:c4:64:20:07:c8:bf:cf:3c:be:5f:75:
00:bc:bd:c0:59:77:57:f6:7b:26:ac:cf:e3:8b:0b:95:f9:cb:
c8:2e:f8:11:03:da:48:e6:58:c4:0d:b3:31:1f:18:e5:07:c0:
d6:9a:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:40:34 2025 by rpki-client