Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
File: 3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier: W1eMvO91GceiKrK0WezIOXAUu9aWIP7z8lT7Twofisc=
Subject key identifier: A2:94:39:90:A5:2B:F1:42:23:B4:0E:2D:73:EE:A0:ED:AB:70:57:2A
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 07503F24FBDED2A828A5EAE7422BB47DCC0AB707
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
Signing time: Fri 05 Apr 2024 03:07:34 +0000
ROA not before: Fri 05 Apr 2024 03:02:34 +0000
ROA not after: Fri 04 Apr 2025 03:07:34 +0000
asID: 52758
IP address blocks: 201.131.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:50:3f:24:fb:de:d2:a8:28:a5:ea:e7:42:2b:b4:7d:cc:0a:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Apr 5 03:02:34 2024 GMT
Not After : Apr 4 03:07:34 2025 GMT
Subject: CN=A2943990A52BF14223B40E2D73EEA0EDAB70572A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:94:b1:3d:4a:5d:ec:8c:93:94:03:c8:48:
97:5c:03:66:bd:70:d8:6b:52:86:0d:8a:aa:40:8a:
fe:19:1e:1d:0f:8c:0b:77:d8:b8:df:d6:95:ea:96:
48:de:2d:5c:83:57:c1:ed:eb:57:ec:22:46:85:ec:
d4:66:35:6a:2d:32:2d:78:67:f8:08:bc:01:4e:eb:
ff:47:85:77:53:02:ee:7a:a7:0f:32:2e:c1:c6:dd:
f3:01:09:fb:0b:dd:ec:65:cf:3c:af:31:f5:1e:83:
4d:21:24:43:bc:9a:89:e8:81:09:5a:40:ac:a1:34:
e7:a3:3e:e7:ba:51:02:c3:ac:2b:0c:bb:29:8a:37:
8a:68:33:b7:db:0d:c3:29:04:32:d0:d0:e0:5b:9e:
5e:fd:2e:a9:67:3d:78:7b:8a:97:69:8b:b1:90:b5:
2e:29:02:86:e9:a2:d4:b0:bd:3e:5f:08:93:09:54:
ff:f3:45:1c:3b:37:10:4b:c4:b8:96:9b:37:fe:02:
84:fd:7c:78:48:2f:c4:f4:63:c0:b7:a6:6b:74:84:
35:01:1f:bd:c8:67:32:69:d7:d5:50:4f:b6:28:1a:
99:7e:fe:62:f6:68:77:4b:89:5c:3a:b4:fc:99:57:
9b:6f:61:38:af:50:10:41:ee:23:4e:74:ba:32:22:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:39:90:A5:2B:F1:42:23:B4:0E:2D:73:EE:A0:ED:AB:70:57:2A
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.242.0/23
Signature Algorithm: sha256WithRSAEncryption
40:da:a9:be:b9:51:26:f1:19:e4:cd:b2:64:de:a8:2c:d5:38:
fd:9e:b2:5a:1e:90:e9:01:99:cc:ed:85:f3:c0:6a:2e:2f:c7:
bc:f2:03:85:1a:cb:f0:0f:5b:fb:c5:8c:0f:cd:26:c7:3f:0b:
a5:50:e9:e4:6c:45:e7:fa:9e:b0:b8:29:f8:fe:32:11:dc:99:
77:f5:36:17:ef:3c:e0:8c:94:64:7b:a5:a6:1b:45:39:4f:b0:
48:c7:c2:6e:94:20:e2:13:90:13:16:a7:6b:4c:92:52:c5:5a:
9e:a1:cd:00:fa:91:b2:99:59:ff:74:19:6c:17:fa:47:4e:6b:
f1:36:2b:77:0c:ea:14:0a:53:2d:20:92:94:7f:4b:4b:6e:42:
50:6b:69:27:89:e2:07:5f:31:03:fc:52:62:bb:b1:dc:fd:ea:
5f:6f:35:e4:ea:98:03:c3:18:78:78:98:98:0d:6c:64:ce:29:
94:0c:b0:e4:7e:5d:fc:38:93:5a:21:5d:cc:31:bf:3a:f2:9b:
0d:08:20:74:7e:67:6f:9c:46:d7:bf:de:e1:12:69:31:bf:0d:
f8:ae:c7:cc:06:f9:89:c9:4a:1a:2a:92:a9:33:63:76:70:b8:
b7:f9:c8:9b:70:86:24:d9:87:dd:61:91:05:84:93:cc:32:63:
a9:1c:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:45 2025 by rpki-client