Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
File: 3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa (raw, json)
Hash identifier: DeHpMKjqwdnpMxgRz+0D4NPJKATP/W1cXY2WzX8F6Ds=
Subject key identifier: 4A:32:30:35:6C:16:F8:50:37:3E:DE:FC:C2:D3:A1:9E:D4:32:5B:0E
Certificate issuer: /CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Certificate serial: 664F9EE8EDC180D0CC48E66E8C49144BEC243DB6
Authority key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
Signing time: Fri 24 Jan 2025 18:25:00 +0000
ROA not before: Fri 24 Jan 2025 18:20:00 +0000
ROA not after: Fri 23 Jan 2026 18:25:00 +0000
asID: 271309
IP address blocks: 207.248.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4f:9e:e8:ed:c1:80:d0:cc:48:e6:6e:8c:49:14:4b:ec:24:3d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Validity
Not Before: Jan 24 18:20:00 2025 GMT
Not After : Jan 23 18:25:00 2026 GMT
Subject: CN=4A3230356C16F850373EDEFCC2D3A19ED4325B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:63:28:51:69:7f:fc:89:a6:cf:55:b9:0c:
6a:b6:d5:46:a5:04:ca:72:4b:da:23:a2:a4:a3:9e:
45:13:e9:67:da:08:b6:e2:4d:7e:26:b0:56:14:b7:
cf:f6:77:bd:28:af:91:e3:37:ce:0b:84:b6:da:cb:
90:1f:a1:72:57:36:39:24:d6:54:56:f8:c9:68:39:
0a:89:c7:a6:54:6f:3e:29:9c:7c:cf:82:ec:17:fe:
79:a3:43:44:35:0c:1d:ae:c2:2c:16:75:45:1e:23:
d5:cc:2c:15:bf:00:e4:68:aa:84:c3:ad:58:d6:ea:
8b:6b:fb:cc:84:80:e4:ea:47:ca:1d:a4:78:d4:03:
13:e0:59:c5:a8:ac:22:46:13:ba:65:16:4d:ac:00:
e6:f1:b8:60:bf:e0:d8:79:7c:76:2f:ca:38:7a:8a:
75:73:76:03:c8:88:70:3e:f7:1a:a6:a5:97:92:fa:
1e:b1:e5:2a:f2:32:b7:32:50:a4:c7:94:04:a4:e7:
27:37:cb:81:df:2a:17:3d:fc:a7:32:32:a4:a5:ad:
7b:5b:b9:fe:ee:19:eb:fb:3a:ac:d0:79:6e:31:9e:
b0:8b:e0:97:99:e5:b0:8d:46:60:66:b8:4a:67:43:
fa:ef:04:c7:98:1b:cc:d3:cb:36:69:1b:ec:46:aa:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:30:35:6C:16:F8:50:37:3E:DE:FC:C2:D3:A1:9E:D4:32:5B:0E
X509v3 Authority Key Identifier:
keyid:FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.26.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:b9:75:65:73:c7:7b:05:dd:fc:4d:e9:42:1c:85:11:30:60:
7a:5e:3a:ac:68:51:a8:61:81:92:34:0e:6a:97:08:c0:8e:5f:
6e:dc:12:99:89:36:f8:4d:44:72:b5:e4:a3:67:7e:f6:59:27:
07:28:4f:76:e8:17:76:44:53:be:ed:45:73:c4:db:82:bd:1a:
7b:17:ab:6f:6f:b4:fd:d8:ed:91:03:16:d4:ff:7c:cc:a8:2c:
47:f4:a6:14:9b:48:91:1c:a6:70:e0:1b:fb:f9:67:61:ba:13:
b3:7e:06:28:fb:6e:78:69:21:be:8b:7d:b8:ed:1b:a3:f7:3f:
2b:24:08:1c:04:3f:a4:57:e4:5b:80:be:ae:4d:8e:e8:66:9d:
33:35:d9:96:59:27:7a:fb:73:b2:c0:d2:04:bd:ae:5f:e3:af:
d6:f2:60:bf:b6:56:03:41:c5:82:1f:a3:45:12:3f:7f:df:bb:
a8:ed:07:56:4b:f4:f6:cb:b8:3a:12:38:83:aa:bd:f2:88:b8:
5a:d8:ee:ce:4b:b4:22:62:34:60:c3:1d:df:77:1d:04:5d:57:
22:e7:d2:63:8d:43:ec:d6:97:43:1e:e0:a7:d2:82:bb:0f:7c:
d8:21:2f:45:30:7d:9e:2d:85:da:f9:7c:c9:22:88:92:d5:d2:
46:b5:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:04:35 2025 by rpki-client