Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
File: 3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier: OCnMwetSJYwT/OVvtMs8pIk0fyAvSoHawYjL3UQBABY=
Subject key identifier: 6E:38:D3:70:5F:3E:E9:96:7E:4F:3A:5F:0D:EE:E3:82:5A:9E:C5:A8
Certificate issuer: /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial: 490D73395FF272B946446817AF1EB9625CACFEB9
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
Signing time: Thu 04 Apr 2024 00:53:38 +0000
ROA not before: Thu 04 Apr 2024 00:48:38 +0000
ROA not after: Thu 03 Apr 2025 00:53:38 +0000
asID: 28594
IP address blocks: 200.218.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0d:73:39:5f:f2:72:b9:46:44:68:17:af:1e:b9:62:5c:ac:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Validity
Not Before: Apr 4 00:48:38 2024 GMT
Not After : Apr 3 00:53:38 2025 GMT
Subject: CN=6E38D3705F3EE9967E4F3A5F0DEEE3825A9EC5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:05:6a:40:83:ea:94:a9:32:1e:7f:a6:9e:
ee:84:b0:fd:b9:1b:67:34:6b:54:61:eb:54:0a:c1:
3f:e2:f3:a2:1d:86:4d:54:0f:b6:bc:c9:2f:5d:04:
48:f3:f8:b4:b9:74:3d:f4:66:df:0f:e0:0a:51:7e:
a7:7b:60:17:10:5d:6c:75:86:92:d5:a1:41:fa:89:
6e:f3:07:76:13:fb:91:a2:69:d4:ad:46:66:44:5b:
8e:ea:19:fa:e0:30:c8:e6:33:07:4f:9e:91:3d:57:
f3:e6:3a:b9:54:d5:9d:a3:b1:1f:fe:a5:2a:33:b8:
0e:bc:e5:b4:7a:9f:30:0e:87:e5:71:67:76:16:19:
74:59:ac:d9:09:c3:1d:68:09:73:a1:90:63:c0:1a:
de:a0:0b:f4:e1:f2:22:00:07:b1:c7:ed:7f:f9:7b:
3b:73:26:c0:ed:1d:69:53:9c:1d:ed:b7:af:21:40:
b1:54:e2:97:32:f7:ac:8e:2d:5c:aa:4c:0c:6a:d5:
61:80:39:a5:f5:e3:d5:b1:cf:a2:55:35:d8:14:4b:
42:47:6f:a5:38:7a:34:97:87:a0:b5:5b:3e:f7:44:
d2:fe:f4:a3:00:41:35:d5:8b:eb:83:78:27:80:13:
11:a4:0d:13:04:03:98:8f:05:00:14:52:79:c3:ac:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:D3:70:5F:3E:E9:96:7E:4F:3A:5F:0D:EE:E3:82:5A:9E:C5:A8
X509v3 Authority Key Identifier:
keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.218.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:6c:47:92:b8:13:cd:3d:67:ce:ac:1e:0d:97:9d:3d:1f:15:
87:e0:a3:2e:a1:21:72:14:5e:61:54:7b:31:98:35:0b:40:a6:
f1:cb:88:0b:a8:84:97:f4:f1:4f:9d:da:cc:98:ba:e9:43:26:
55:06:ed:dd:ab:4f:61:4d:54:74:c6:67:65:12:b2:5f:e6:86:
17:71:b7:b9:f4:ce:fd:6d:dc:19:02:ef:68:ba:fa:c8:79:af:
54:07:86:47:de:18:6c:c4:b7:d0:13:76:de:bb:81:b4:ce:c6:
4f:27:82:60:be:0b:a7:6a:31:33:d9:3e:eb:f7:51:e1:bd:82:
95:3e:50:ee:c9:a2:bc:fe:00:76:d4:d3:f7:b4:47:3a:f9:3a:
59:14:fa:07:14:4e:85:1f:2d:02:15:42:67:cd:90:d5:ad:39:
a7:8e:36:96:83:b9:7f:35:56:4e:85:08:f7:fb:b5:ac:6e:ce:
51:7b:a2:4c:75:1d:5b:55:83:2a:0f:3a:cc:a7:41:c9:c6:ae:
19:fb:a8:f1:a1:dd:e5:4b:10:b2:38:dd:37:e4:7a:bd:a8:95:
12:2b:ef:85:4e:af:29:ed:be:2a:5a:86:96:7d:71:ea:cf:44:
d3:33:2f:59:26:13:5b:10:8e:12:a4:9f:1e:7d:8c:fd:55:d5:
28:be:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:18 2025 by rpki-client