Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
File: 3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier: fFH3VtWOocExl7Vvfywt/ysqpWpVKhpDwEnHGPljNOE=
Subject key identifier: DD:71:0D:2E:96:4E:FC:9A:80:6F:72:A4:EA:1A:DF:3D:06:63:B2:FE
Certificate issuer: /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial: 0D734A4E4B2B25E59A62061A0F14D6FB98A29BE4
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
Signing time: Wed 03 Apr 2024 20:29:44 +0000
ROA not before: Wed 03 Apr 2024 20:24:44 +0000
ROA not after: Wed 02 Apr 2025 20:29:44 +0000
asID: 264444
IP address blocks: 131.221.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:73:4a:4e:4b:2b:25:e5:9a:62:06:1a:0f:14:d6:fb:98:a2:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Validity
Not Before: Apr 3 20:24:44 2024 GMT
Not After : Apr 2 20:29:44 2025 GMT
Subject: CN=DD710D2E964EFC9A806F72A4EA1ADF3D0663B2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:5f:93:00:97:87:41:79:3c:41:0a:ba:ca:
1e:9d:58:8d:e0:55:4b:90:54:ac:0b:9a:ac:89:ca:
1a:f6:a6:83:ae:20:1b:03:7f:dc:50:51:ed:16:9f:
f3:17:2b:39:c6:50:2e:72:29:1e:ff:96:81:2a:2d:
4b:d3:58:c2:93:3b:e9:11:35:7b:1b:8e:fa:20:dc:
7b:8a:26:ea:5b:f2:99:a5:cf:26:c2:7d:0d:a0:cc:
45:1c:9d:5e:38:6f:e1:52:aa:5c:27:b3:1d:38:84:
a6:28:16:11:54:df:20:55:97:cc:1a:45:b2:37:70:
1b:ea:71:f3:6a:f0:1a:1c:ec:b0:ef:05:5c:f9:9e:
18:d0:a7:48:52:ef:b0:ef:e1:5b:84:f8:75:32:e1:
67:57:2d:3d:6c:71:0b:fc:4a:51:12:80:0a:85:b2:
56:96:f3:07:a9:2f:d7:80:f4:45:4c:9e:5b:2c:20:
71:7d:b8:0b:1a:fe:d6:06:bd:5b:17:2e:e4:38:2e:
e1:0e:b9:c7:96:db:7b:c9:24:54:cb:0c:2c:78:40:
cc:1d:4c:75:dc:df:a3:d8:9e:a4:6d:4c:81:5c:e4:
43:66:bc:b4:97:77:ca:6c:c9:d4:8c:17:47:fa:04:
2d:e4:1f:0b:c4:11:f1:d6:86:8d:69:86:96:16:7f:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:0D:2E:96:4E:FC:9A:80:6F:72:A4:EA:1A:DF:3D:06:63:B2:FE
X509v3 Authority Key Identifier:
keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:b6:2e:92:92:72:cb:79:9a:6c:8c:55:dd:c4:2c:13:40:50:
55:62:de:ac:20:ea:61:f6:f0:91:30:8f:1d:70:be:64:e4:6e:
2c:45:ba:4b:dd:89:fb:94:73:0a:32:3e:32:5c:17:52:d4:1f:
bd:f3:6f:60:d0:af:1c:39:13:9e:0f:ea:8a:6c:75:64:eb:90:
05:86:4b:c9:38:b5:45:e4:af:47:0d:1e:f1:69:2a:fb:7d:fa:
5b:d4:42:f4:1b:a3:a2:27:79:cf:f1:17:ee:13:fd:e0:f1:c6:
c6:2e:e9:f7:6d:45:31:10:b7:39:a2:97:60:3e:d1:4b:12:eb:
3a:3f:c7:08:23:ca:b1:ec:f6:9d:12:a7:f7:eb:3b:98:a3:ab:
cc:24:05:0e:72:e5:b0:f7:d9:5f:42:d5:c0:11:32:39:c4:e5:
bd:64:ca:b9:9b:f0:df:21:a7:ad:bd:22:73:a8:2e:a1:68:b6:
d9:7b:e9:89:c7:5d:d4:f6:ff:d1:3e:93:82:1e:22:42:60:c6:
f4:12:3b:a9:ee:7e:d0:83:3b:ca:7f:3f:b7:55:7e:f8:02:f4:
05:82:42:50:74:a6:ef:45:91:54:da:91:e7:ce:41:ae:98:bf:
cc:89:7f:eb:99:e7:44:1c:a8:08:bc:9b:79:69:21:13:f3:2a:
cd:cd:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:08 2025 by rpki-client