Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
File: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (raw, json)
Hash identifier: EkK/UCorokttq3uIziXgJW26IylMch9GmBjoaGyv+GI=
Subject key identifier: 48:91:25:84:04:AE:CC:03:CC:3E:22:2C:B5:4F:42:6B:59:DC:D0:19
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 44822E346E8C66F3AD17E4F1A8E03E3AFD30C996
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 01:07:10 +0000
ROA not before: Sat 21 Dec 2024 01:02:10 +0000
ROA not after: Sat 20 Dec 2025 01:07:10 +0000
asID: 11097
IP address blocks: 200.0.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:82:2e:34:6e:8c:66:f3:ad:17:e4:f1:a8:e0:3e:3a:fd:30:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 01:02:10 2024 GMT
Not After : Dec 20 01:07:10 2025 GMT
Subject: CN=4891258404AECC03CC3E222CB54F426B59DCD019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:9c:44:6d:be:84:3f:00:cf:24:c4:4f:d6:
3a:e4:5a:17:13:ac:8e:69:d2:93:b0:57:0c:6a:f6:
c6:2e:ef:06:e8:77:8f:be:d8:11:80:86:e9:a7:5a:
fb:7c:d1:46:93:6f:0d:73:3d:b4:27:3a:c9:aa:da:
0d:9a:f6:c9:4f:97:6d:9a:83:f3:44:40:f5:cb:14:
62:ba:dd:53:51:f6:ce:f5:5f:6c:fc:0c:35:80:31:
09:07:cb:f3:3d:eb:c1:95:87:0d:4b:de:52:50:20:
76:1e:01:39:a7:15:40:72:bb:0b:80:3c:91:9f:ac:
cb:63:8f:29:82:dc:d0:66:38:49:15:33:7d:18:b0:
77:99:2f:85:f1:c2:cb:7f:2b:7f:17:28:e5:1b:04:
95:06:90:5c:7f:68:42:07:d9:e9:3f:b5:e4:84:f7:
a9:2e:9a:57:0d:c0:38:33:9c:64:6c:83:68:e3:40:
36:63:1b:bf:4b:c7:b5:c5:91:3d:e4:b9:81:97:18:
13:1d:b6:9f:6f:4b:2c:94:3b:ae:13:91:72:59:44:
5f:c2:02:7b:e9:5c:39:7d:4b:c2:44:8a:9f:f1:6c:
ab:e1:5a:34:89:1e:7c:da:09:75:5a:f2:f7:0c:61:
3b:d7:77:9c:b3:67:5d:c7:c7:43:10:e3:bd:af:89:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:25:84:04:AE:CC:03:CC:3E:22:2C:B5:4F:42:6B:59:DC:D0:19
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:52:22:0f:bf:1e:61:a1:8e:40:69:d2:ba:f8:33:5b:de:f6:
8b:1d:1c:77:60:d2:73:a3:88:bb:5e:22:43:78:96:0e:a7:1d:
1f:02:f9:ff:2f:45:7f:c8:85:d0:81:4b:1a:65:b4:60:d6:e0:
26:8d:fb:f6:c1:66:46:ee:d4:75:d7:8b:75:f1:a7:a4:82:85:
2e:30:7d:a6:5c:fc:87:86:52:38:63:a2:68:cd:9b:4d:c4:55:
ed:79:30:32:eb:eb:4a:15:e5:c3:25:6f:bf:ec:2a:5e:e7:66:
b3:c6:1c:7e:eb:3a:3f:45:0c:07:45:d6:04:60:6e:2b:43:c8:
f9:00:93:82:90:f2:87:9f:4d:44:5c:8f:07:8d:89:b3:1f:a7:
10:10:2b:fa:bd:2f:47:77:a4:76:43:26:0d:3e:17:94:92:6b:
50:5c:d9:bb:a8:ae:7a:24:da:16:dc:66:e8:a9:b7:5b:2b:50:
1a:e5:b9:7f:87:d4:4e:5a:5d:40:20:b5:96:e2:b7:4d:a4:c9:
18:c5:4b:08:8c:fb:0b:6f:2c:85:64:19:4e:ed:60:5a:04:cc:
04:2f:f9:3b:f4:4b:7c:95:c5:31:4c:6a:54:c3:e6:f5:f7:4d:
f9:b9:74:82:02:90:ec:7e:84:fc:4e:b7:f0:7d:c1:8c:6e:c2:
c6:cd:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:43:30 2025 by rpki-client