Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa
File: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (raw, json)
Hash identifier: RrTldeuc70xkEk4+NZE8cD1Ic4ZXWDfD1tl/h52gGt0=
Subject key identifier: 12:34:B4:1B:CB:82:15:74:06:16:1B:9E:E9:F8:2B:45:68:73:76:65
Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11
Certificate serial: 7D4F9AC11A585CB8710247194F61D7EF7BE65B63
Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa
Signing time: Sat 27 Apr 2024 03:40:11 +0000
ROA not before: Sat 27 Apr 2024 03:35:11 +0000
ROA not after: Sat 26 Apr 2025 03:40:11 +0000
asID: 270265
IP address blocks: 200.108.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4f:9a:c1:1a:58:5c:b8:71:02:47:19:4f:61:d7:ef:7b:e6:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11
Validity
Not Before: Apr 27 03:35:11 2024 GMT
Not After : Apr 26 03:40:11 2025 GMT
Subject: CN=1234B41BCB82157406161B9EE9F82B4568737665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:d1:65:ee:9d:3f:5b:0f:f3:eb:fc:46:b7:
5e:c9:0d:14:bd:e0:34:16:69:dd:e0:c1:2b:93:c1:
e1:d2:72:23:cb:33:99:04:d3:62:a6:d9:2b:09:d5:
48:06:5c:d6:9b:e5:a7:95:5a:2a:ac:93:f4:b2:65:
ea:12:2a:2d:dd:10:b8:be:17:5d:b3:d2:45:a2:fb:
b0:d6:e4:ea:bb:47:93:b4:41:b3:db:05:45:b8:de:
3f:61:3e:8b:1a:43:28:b0:c9:fd:62:f6:aa:49:50:
f7:d0:38:a3:f2:88:b4:63:3d:94:12:e9:4f:ba:0f:
1e:9b:37:e5:3a:74:2f:5b:be:2f:3b:d3:f4:d5:fe:
83:e5:37:5c:d6:cb:2e:a8:b6:65:cc:68:41:9f:ed:
af:e5:53:41:dc:9d:1b:99:9c:51:bc:42:4d:e1:bd:
4a:6e:13:d9:39:ff:dc:42:d8:46:b9:9a:9d:b6:5e:
1b:db:db:b5:04:4a:a0:00:1d:cc:52:98:27:ab:5c:
b1:67:e6:a1:fe:f5:87:d0:ce:9c:9d:a1:6c:17:24:
a4:70:f6:5d:72:58:a6:e6:3a:19:bb:9b:51:2d:32:
37:c7:d0:5f:70:b3:7d:eb:5b:f8:47:ee:f1:3b:bf:
eb:9b:a5:81:89:59:f4:f9:21:9f:0a:3b:ed:fc:09:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:B4:1B:CB:82:15:74:06:16:1B:9E:E9:F8:2B:45:68:73:76:65
X509v3 Authority Key Identifier:
keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.164.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e5:15:45:7e:6c:39:2d:b8:65:c5:a0:b6:0d:e5:3c:2d:62:
ff:f5:28:fc:dd:c3:0a:b7:cb:41:2b:45:e5:19:8a:28:58:a9:
3c:e5:ca:24:c7:f1:c3:a7:a6:a1:c8:bf:b9:e5:2a:6e:22:d7:
f2:04:49:f1:ff:74:0f:8b:f0:a4:ae:7f:d1:ca:c2:ac:2a:ca:
63:46:34:f8:52:e4:57:36:a0:e5:30:23:3b:a9:52:02:72:d4:
1d:43:bc:85:cd:78:e7:ac:00:7b:8b:16:8f:89:b1:98:1b:4c:
24:c1:a1:d5:67:a8:dc:2b:97:37:dc:a4:81:67:b8:a6:4e:24:
f2:fc:2f:0d:8a:4b:1c:af:b2:09:8c:d7:05:7b:05:c6:ad:c9:
a3:87:a4:57:e7:b5:59:ef:1a:ea:6d:3d:04:17:ba:02:c5:08:
1f:fb:4b:1f:36:fd:be:4f:f4:2c:e8:07:12:f0:a9:60:29:d7:
ad:90:e7:9b:85:5b:99:5d:8a:ca:64:01:61:1a:38:83:e4:c6:
0e:25:7a:1f:76:40:fe:13:a3:37:40:fb:5a:fa:a8:18:10:58:
66:4c:19:c0:ed:3e:b5:c3:3d:dc:54:a6:f8:75:88:bd:86:95:
14:06:cb:87:84:6c:46:d0:f6:e3:65:a4:ea:d7:84:7f:7b:73:
e6:9b:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:28 2025 by rpki-client