Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa
File: 3230302e37312e39362e302f32322d3234203d3e20323730343533.roa (raw, json)
Hash identifier: XIko/oHAiuaIXL8cp4ZaYjvo1p+3o6HC7u/Q2SKZG1U=
Subject key identifier: 9A:6D:2A:43:A6:F6:4F:A2:20:5B:4A:5E:45:13:52:06:95:CB:B5:A5
Certificate issuer: /CN=4789007660ED3ABF117FD57FE8F1948535ABD806
Certificate serial: 3C83299E116C8B4AACBEB26A752E8D2F696E5B51
Authority key identifier: 47:89:00:76:60:ED:3A:BF:11:7F:D5:7F:E8:F1:94:85:35:AB:D8:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4789007660ED3ABF117FD57FE8F1948535ABD806.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa
Signing time: Tue 24 Dec 2024 17:41:10 +0000
ROA not before: Tue 24 Dec 2024 17:36:10 +0000
ROA not after: Tue 23 Dec 2025 17:41:10 +0000
asID: 270453
IP address blocks: 200.71.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:83:29:9e:11:6c:8b:4a:ac:be:b2:6a:75:2e:8d:2f:69:6e:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4789007660ED3ABF117FD57FE8F1948535ABD806
Validity
Not Before: Dec 24 17:36:10 2024 GMT
Not After : Dec 23 17:41:10 2025 GMT
Subject: CN=9A6D2A43A6F64FA2205B4A5E4513520695CBB5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:5d:15:ee:97:b4:ab:3e:bd:24:59:e9:ce:
56:ab:59:23:ac:b9:ad:29:36:18:23:5e:7f:4b:45:
7f:cb:06:31:30:b3:ac:a4:a1:c0:4b:53:3d:61:38:
c8:54:64:d5:ad:1f:bd:58:97:8b:e0:38:1f:85:85:
9f:d6:19:87:6a:fa:1d:60:9a:d0:44:f4:a9:88:57:
47:04:ff:46:ec:e4:fb:0a:04:17:de:83:3d:4e:29:
16:87:85:60:7a:2b:c2:b8:45:3d:59:ca:71:98:d8:
63:d3:d8:4e:89:2f:5a:01:f1:04:7e:4d:4e:f7:2d:
75:45:62:c6:33:11:d4:2b:6c:a9:ce:3d:07:e5:44:
c1:2d:64:4a:60:e1:2d:14:9e:2e:e8:6d:86:ab:d2:
a7:b9:f0:8d:f0:a2:e6:b7:c4:43:3f:2d:8d:e5:e1:
ab:a6:97:0a:47:1b:89:e5:af:d4:56:6b:3c:b4:41:
78:ad:a1:6a:9c:8d:40:e3:9e:66:17:bc:2f:10:cd:
c6:19:05:ca:0e:12:25:e1:cf:c2:90:fd:52:7b:d2:
40:65:3c:bd:53:0d:bd:e6:20:a3:bc:43:fa:84:4b:
38:61:5a:3e:b2:5f:b5:fb:2f:a7:23:43:cd:c7:2e:
5f:5c:0a:89:e6:07:47:6d:09:f3:c4:3f:22:1a:29:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:2A:43:A6:F6:4F:A2:20:5B:4A:5E:45:13:52:06:95:CB:B5:A5
X509v3 Authority Key Identifier:
keyid:47:89:00:76:60:ED:3A:BF:11:7F:D5:7F:E8:F1:94:85:35:AB:D8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/4789007660ED3ABF117FD57FE8F1948535ABD806.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4789007660ED3ABF117FD57FE8F1948535ABD806.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:e2:c0:c4:b8:7d:73:12:f4:d1:f4:7c:82:9b:19:c6:b2:cb:
d1:21:18:74:c4:3f:2b:40:fa:ef:62:bf:c4:55:7c:ea:8f:64:
38:ba:12:8f:70:5e:67:47:47:db:87:6f:27:32:cb:c3:02:59:
28:81:cc:43:82:e8:99:7b:ce:7f:43:79:4d:a0:5a:ee:26:a9:
1d:b6:a7:62:7a:12:98:9a:b7:0e:33:be:a3:16:85:18:d6:2e:
79:ad:85:a4:14:26:07:22:e8:f5:ac:6f:53:58:f0:8f:4d:c6:
a4:ac:62:18:78:1b:e1:5f:12:89:05:3e:50:57:02:d6:39:71:
25:20:c7:58:7b:f4:c2:f0:b9:0a:80:33:17:c6:d8:ed:27:9f:
4e:84:c0:04:f5:72:47:e5:8f:49:10:c9:de:0f:9c:28:a2:b6:
e2:9f:92:fb:c1:e3:c0:35:73:81:2f:a0:f1:fa:d2:42:6b:58:
a3:93:80:3e:7c:03:dd:c8:c1:82:70:b1:10:a9:4a:16:02:87:
98:28:ad:61:5a:51:61:14:1c:13:b1:f4:53:fd:dc:06:4f:dc:
c5:7a:f4:7d:48:51:ab:2f:19:2f:4e:9c:03:c1:d0:39:92:05:
a8:39:a5:a2:74:99:50:f5:f7:6f:ac:f9:b2:c6:88:2a:e9:0f:
69:46:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:06 2025 by rpki-client