Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
File: 3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: XHC1+bfzc8BO5xBsDSzgdlt2QL6iU1ofQi08yLLdA00=
Subject key identifier: 6A:D6:52:C7:68:A1:F6:37:B6:2A:24:3E:1A:A7:14:F7:84:65:3F:CB
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 4DDF7767331BAFE5644FFCA9549123372E98E0B2
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:52 +0000
ROA not before: Mon 14 Oct 2024 01:44:52 +0000
ROA not after: Mon 13 Oct 2025 01:49:52 +0000
asID: 28270
IP address blocks: 201.149.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:df:77:67:33:1b:af:e5:64:4f:fc:a9:54:91:23:37:2e:98:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:52 2024 GMT
Not After : Oct 13 01:49:52 2025 GMT
Subject: CN=6AD652C768A1F637B62A243E1AA714F784653FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:37:72:13:6d:8a:41:91:dc:ad:59:a6:46:
51:0a:43:63:20:9d:9b:70:50:95:15:e8:c2:ad:e5:
8c:c4:2e:46:58:67:92:8d:72:1e:6c:e0:ff:77:78:
e6:e3:4e:c3:b1:2c:16:c5:cf:db:88:e6:0e:24:12:
b4:52:e5:4c:7c:45:33:df:54:52:77:7d:d2:77:d4:
e3:c5:38:65:41:cc:16:40:3b:fd:4d:1c:2c:e4:97:
64:9e:24:fd:bd:d9:3c:9e:d0:f7:43:03:17:80:d6:
1c:15:e4:c9:0f:14:89:89:71:5b:88:1a:96:29:c4:
02:08:4b:99:12:64:8c:d7:c5:03:d5:59:0a:59:8b:
ab:d9:06:01:e0:0a:d3:ad:76:b9:8b:4e:cb:40:a7:
9d:d9:52:38:aa:6b:e9:6d:0b:9e:31:3e:a6:e5:72:
41:84:f9:05:d1:60:97:17:3b:ab:54:83:45:b6:df:
c4:b7:09:4c:cb:bc:4f:55:71:23:b5:f6:ac:29:11:
5d:6c:73:33:d5:a1:b8:ba:7f:a8:fe:db:81:d7:71:
5f:d6:de:db:de:52:e0:a2:5d:62:b5:98:6a:45:25:
2a:02:60:d5:12:6f:88:fe:07:ea:a5:23:2d:18:b4:
52:67:d9:69:c1:61:1d:b7:c4:4b:bd:4f:06:0b:a2:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:52:C7:68:A1:F6:37:B6:2A:24:3E:1A:A7:14:F7:84:65:3F:CB
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.149.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:2d:bf:2b:20:83:fa:04:75:1c:dc:86:0b:3a:63:ef:7a:d4:
3e:e7:70:3b:1b:a8:dc:aa:e0:53:68:93:ca:0d:d3:2b:25:f5:
ca:d7:44:53:fc:1d:86:15:08:bc:8b:59:99:66:75:9c:0b:9e:
c3:9d:cf:1b:3e:8a:76:4b:46:ed:29:af:08:79:ea:fc:cc:79:
47:11:61:2d:be:55:ab:39:98:b5:2e:ee:74:7c:7d:88:fe:70:
98:77:bc:57:b3:ee:fe:ff:a9:7b:98:e9:18:85:73:16:9e:1d:
81:03:23:d9:f3:ff:3c:b9:52:8a:32:84:e0:f9:d8:61:cc:0a:
24:d4:a0:96:0a:2d:c7:79:15:0f:bf:f2:8a:01:98:d7:a1:1a:
d5:ba:a1:e8:ef:38:54:8a:93:40:0c:56:a2:61:15:71:3e:ae:
5c:93:c1:0e:d0:70:aa:40:54:c3:a7:26:ff:0f:a7:34:40:ad:
b4:51:61:96:9f:61:98:c9:20:7d:2c:7f:19:ec:bf:79:5a:e6:
f5:e3:a9:75:59:f8:08:b4:10:ca:f4:bf:8c:f1:56:50:db:3d:
31:ae:d9:4e:6d:52:3b:94:8c:6e:ed:48:84:fd:5e:6b:23:b3:
40:23:b2:2d:b4:56:7b:f6:60:42:3e:06:a7:42:6c:96:5c:f9:
ce:b0:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:15 2024 by rpki-client on console.sobornost.net