Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3233203d3e20323731323930.roa
File: 3230302e342e3130342e302f32332d3233203d3e20323731323930.roa (raw, json)
Hash identifier: uIK+3ylXgyn/i0oTuJfE6+nMyqRr5rYGh0NaMFL7F98=
Subject key identifier: E8:D4:1E:C4:F7:3D:FB:CD:38:E9:D5:C7:5E:DC:42:92:0C:F8:AB:F7
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 6EB5388E410E448182EA4DF18F713C7E55C9D5E8
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3233203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:21 +0000
ROA not before: Thu 30 Jan 2025 21:01:21 +0000
ROA not after: Thu 29 Jan 2026 21:06:21 +0000
asID: 271290
IP address blocks: 200.4.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b5:38:8e:41:0e:44:81:82:ea:4d:f1:8f:71:3c:7e:55:c9:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:21 2025 GMT
Not After : Jan 29 21:06:21 2026 GMT
Subject: CN=E8D41EC4F73DFBCD38E9D5C75EDC42920CF8ABF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:14:69:33:14:a7:25:ec:fc:7e:61:3c:5e:
27:08:33:e0:9e:3d:51:da:5e:37:b4:1e:bd:84:78:
d1:58:2a:3a:f2:67:25:64:08:17:3c:ab:fc:27:04:
0c:c1:b1:7a:36:3c:ae:ad:87:c2:f6:12:1c:c3:e2:
da:05:95:87:9f:c3:db:ec:eb:d8:66:ad:73:a0:22:
fc:86:2c:63:4c:74:ff:c1:a0:ab:cb:20:c9:e9:51:
7f:f8:6c:5b:31:29:35:61:79:4f:25:3b:7a:7b:f7:
eb:83:5e:0d:a0:80:d2:5f:3e:12:0f:0e:2a:f9:e3:
70:fd:c6:4d:0a:7f:c7:d8:03:82:3e:75:93:7e:74:
68:18:28:a9:33:1f:fe:5f:d4:16:4e:32:3f:8c:b3:
a9:5a:dd:1f:68:27:dc:c4:9d:ae:c9:35:b7:9b:98:
f5:4d:4c:cf:9c:83:f4:1e:39:e9:c8:1d:e8:20:ba:
c2:1e:49:83:47:0e:4c:ec:e0:e1:32:32:44:1c:43:
2d:36:d5:a2:1a:19:6f:eb:87:39:38:56:fd:7d:68:
8d:8e:e6:a8:0c:af:2b:22:8c:96:a1:62:d8:02:b7:
ac:1f:cc:02:bf:51:32:d9:02:12:b4:12:7c:60:7b:
8b:9f:d5:f6:42:fa:aa:50:7e:af:03:9b:ce:b7:fa:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:1E:C4:F7:3D:FB:CD:38:E9:D5:C7:5E:DC:42:92:0C:F8:AB:F7
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3233203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:98:bd:d8:04:9e:a8:9a:9f:39:0b:9a:a8:84:f6:7f:94:6c:
ef:0a:aa:9c:f5:65:05:0d:6e:c3:da:2e:90:f8:57:d9:e0:3d:
c8:50:a8:b4:eb:69:f5:bb:a1:03:d3:74:d0:9b:3f:27:35:e7:
71:ea:ea:ea:e5:9b:cc:5c:c1:19:b5:d8:23:db:fc:6f:32:d2:
79:27:c8:1a:70:c0:c0:9b:d9:13:06:a9:1f:e5:43:d1:e2:9a:
84:0c:2e:13:c1:e3:57:bc:78:d9:5d:21:cc:be:48:82:be:7c:
fb:da:54:e9:1d:2f:d8:6d:43:9f:a3:fa:d1:a6:9c:51:5b:38:
bb:35:45:4d:f4:5e:5e:3e:9a:72:39:2a:6b:1a:3a:82:1e:ab:
29:c2:cc:19:73:5f:8b:7e:e9:88:85:1b:cf:ee:66:66:9c:5b:
c3:fb:97:ef:db:99:26:71:a0:d0:d5:95:ef:00:4b:fd:21:75:
93:03:94:00:d1:30:15:16:6a:3a:70:78:ef:84:5c:38:e0:f0:
f9:d0:22:e2:77:f4:7c:81:62:cb:88:51:82:3d:f4:64:22:dd:
c8:f8:57:fb:34:96:2b:e9:80:57:83:c7:cb:96:5c:a2:13:49:
06:19:d1:51:7a:f0:4a:4a:2a:84:75:24:2f:b1:8d:4a:1f:df:
47:77:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:15 2025 by rpki-client