Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
File: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (raw, json)
Hash identifier: HB5aQ3pv8z7TbaFms5Fi4fjyqRxiLYV5qACYWBUrwno=
Subject key identifier: B4:EF:45:BD:25:AE:5A:5D:B8:E2:CF:71:59:D3:37:39:9C:37:74:8F
Certificate issuer: /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial: 7D5D1682898264B87693EB7A0EEE5F6B0584964B
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
Signing time: Wed 03 Apr 2024 18:32:56 +0000
ROA not before: Wed 03 Apr 2024 18:27:56 +0000
ROA not after: Wed 02 Apr 2025 18:32:56 +0000
asID: 270279
IP address blocks: 200.124.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5d:16:82:89:82:64:b8:76:93:eb:7a:0e:ee:5f:6b:05:84:96:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Validity
Not Before: Apr 3 18:27:56 2024 GMT
Not After : Apr 2 18:32:56 2025 GMT
Subject: CN=B4EF45BD25AE5A5DB8E2CF7159D337399C37748F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:ab:e8:f2:36:36:72:3a:ac:6a:8b:6f:fb:
af:ec:33:60:8d:bd:e9:71:63:64:ef:cb:81:d7:c9:
21:ff:a8:0d:d6:7c:e6:f3:0b:64:d8:ff:93:88:c9:
8b:0f:de:b1:35:8c:d4:f2:71:63:5a:98:8d:c7:bc:
40:d4:01:87:b1:88:5b:8e:d6:41:d4:ab:33:41:92:
1e:9b:67:48:e7:44:64:b2:79:4c:15:a8:5d:26:48:
02:5e:c8:cc:e7:8b:6b:ae:21:91:4a:23:2b:76:4a:
7c:9e:f3:3e:a2:47:c9:5a:ea:2b:29:a9:4c:bd:fa:
e4:53:30:43:02:f5:4d:44:14:d0:bb:bb:34:e8:48:
78:09:c7:98:3e:1c:be:6c:c6:2d:c0:4c:4d:9d:d3:
28:bf:a1:86:af:4b:a4:75:56:aa:69:de:e2:91:24:
f3:ce:f4:d4:f2:b4:5e:e8:a8:12:47:43:33:e6:75:
6c:0a:04:42:4e:23:f0:fb:1c:6e:22:f8:69:ad:b3:
c4:38:02:a9:e3:4a:6b:cc:36:a7:d3:25:8d:f9:ee:
8b:b7:db:8a:ca:2b:8c:4f:08:3a:0b:cb:4f:74:2c:
3b:5d:08:46:35:48:cf:3f:53:39:ce:28:2b:a5:2c:
ff:a5:c4:19:22:5b:0b:64:19:97:9f:f0:a5:42:e3:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:45:BD:25:AE:5A:5D:B8:E2:CF:71:59:D3:37:39:9C:37:74:8F
X509v3 Authority Key Identifier:
keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:07:d1:40:d7:bb:eb:ee:27:c7:58:41:20:09:dd:14:5f:58:
cf:33:9e:a0:b8:5a:ea:6d:9e:d7:7f:b6:2e:9e:9c:53:76:b1:
df:ad:ce:a6:ed:8d:0d:77:60:37:36:ec:03:71:74:ba:89:29:
3c:0a:cb:56:d6:96:c1:ad:51:53:78:e5:db:03:67:52:41:4e:
02:dd:a9:56:f8:61:eb:a9:1c:29:78:43:57:24:20:e0:b8:28:
14:9e:32:b0:47:4b:b7:6c:70:ca:bd:51:6c:b5:df:6f:01:47:
e7:6a:f1:a2:59:b7:71:cc:9a:79:26:30:f0:49:c3:42:32:88:
79:9d:ac:04:29:e6:8e:8a:18:5b:da:11:34:93:22:af:fd:5c:
9f:9b:b9:af:0d:13:a7:f0:dd:5d:e1:b9:ac:0b:15:2f:84:fa:
e9:b1:1d:39:e2:68:d9:f4:4e:3e:20:ca:e7:02:31:05:e5:62:
06:23:99:f5:d0:5d:80:86:09:35:16:ee:b6:a3:3a:6c:df:2c:
bd:e2:c1:c5:3d:47:44:9c:89:16:27:17:82:d5:d0:b2:65:d0:
50:be:e7:fa:b6:21:10:47:0c:d3:3a:ae:3e:0e:43:0f:d1:e4:
c1:6d:4e:f5:28:54:29:b3:71:02:c7:42:82:dd:90:cc:e7:f5:
b6:89:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:58 2025 by rpki-client