Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa
File: 3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa (raw, json)
Hash identifier: cg/C0w4SmUnaCFrXNMFOVz+kpyh+bHUrzdGwcQ2nD7Q=
Subject key identifier: C7:56:0B:6B:A4:16:96:EF:B9:97:E7:82:D8:B9:90:77:A6:81:23:1A
Certificate issuer: /CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Certificate serial: 6A9AD7A306A167BBD4C771015ACEAA93895BEF1D
Authority key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa
Signing time: Fri 24 Jan 2025 18:25:00 +0000
ROA not before: Fri 24 Jan 2025 18:20:00 +0000
ROA not after: Fri 23 Jan 2026 18:25:00 +0000
asID: 271309
IP address blocks: 207.248.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9a:d7:a3:06:a1:67:bb:d4:c7:71:01:5a:ce:aa:93:89:5b:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Validity
Not Before: Jan 24 18:20:00 2025 GMT
Not After : Jan 23 18:25:00 2026 GMT
Subject: CN=C7560B6BA41696EFB997E782D8B99077A681231A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:b5:e4:62:65:09:aa:7b:13:76:98:d3:2e:
82:fb:a4:59:8f:1e:38:22:28:bb:95:0c:00:34:19:
68:e2:4a:3e:10:b7:5e:97:35:df:8b:14:1e:c1:0e:
41:d3:67:e9:4d:cc:78:79:39:9f:cb:d0:1c:88:98:
57:62:95:43:16:3b:b7:0f:49:f4:06:20:e6:57:52:
6c:7f:69:92:e3:ce:0d:e7:a2:38:bc:3d:27:0c:73:
67:b3:d8:dd:12:40:4f:b4:85:03:15:d8:8e:40:3d:
92:4b:17:e5:cf:21:96:84:07:d7:47:73:be:fe:60:
22:0d:d8:e1:b3:cf:6a:5a:11:09:2c:b8:f0:8a:75:
09:c3:92:05:59:78:40:c6:06:99:df:81:59:68:f9:
46:bf:7b:89:f2:2e:e6:0a:ee:ce:f6:5b:03:7c:82:
2b:51:0b:e7:c4:52:dd:9e:4b:e3:59:eb:04:30:28:
b3:7a:38:b8:a8:41:59:23:01:31:5e:25:43:6c:d7:
00:b1:4c:d3:33:b5:2e:d3:3c:85:d7:13:19:38:74:
0f:9f:3a:82:e6:d4:f4:ba:b5:57:58:1c:5b:33:06:
f3:0a:e6:09:83:a7:00:4b:f3:fb:e2:3c:4a:af:bb:
c1:05:1d:83:28:b3:5b:ad:58:9d:ec:4f:9a:61:70:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:0B:6B:A4:16:96:EF:B9:97:E7:82:D8:B9:90:77:A6:81:23:1A
X509v3 Authority Key Identifier:
keyid:FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d9:59:f3:2f:cc:4a:c9:83:09:a7:1c:02:b6:5b:30:98:c4:
56:b6:02:53:47:80:b1:ff:b1:44:72:69:57:e9:9c:eb:4a:ad:
cd:54:ce:f2:7f:85:a8:43:7a:40:66:03:2f:4c:3c:de:e9:f6:
1e:a0:d6:a3:69:cf:7c:e7:f5:db:b8:5a:7e:2e:e9:57:18:26:
e1:fa:eb:2d:37:75:ea:79:73:ac:ab:74:39:18:e0:45:ad:67:
b7:bb:52:d3:da:85:20:9d:a2:1e:4d:64:c1:6a:7b:03:8b:3f:
a6:95:90:c8:c7:7a:46:9c:80:65:d8:fc:a4:d9:a6:50:d8:6b:
60:31:7b:18:b4:b9:6c:ed:ac:b3:2e:2b:46:42:54:5a:f9:76:
38:f7:d3:aa:e3:7b:bf:5b:b4:00:d9:11:6f:df:fa:03:a9:2a:
ee:7f:2b:53:ff:07:3b:2e:a6:25:cf:35:a3:4b:38:c9:40:54:
0e:10:f5:42:26:9f:b7:b4:46:a9:2e:3a:6f:ae:d0:91:a8:96:
ba:ed:c6:9c:b3:2f:4a:ab:d0:39:22:cc:f5:2f:6e:76:15:b3:
1f:57:32:b8:d8:4e:bd:bd:cc:89:5d:9d:e6:5e:d2:c6:d8:d5:
3b:9f:60:60:91:b2:06:63:11:a5:c0:d9:bb:de:14:22:4f:17:
2c:74:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:59 2025 by rpki-client