Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
File: 3230302e35332e36342e302f32322d3232203d3e20323731353034.roa (raw, json)
Hash identifier: 1EWbU9vaMy7ni661hYSqBQ704Os+78pSxXpejyOQHrk=
Subject key identifier: 9F:0F:02:12:32:A2:83:03:1A:6F:67:8E:EB:FC:D3:19:48:61:E7:0A
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 1FF818F4C5A5F9D95E6AD0B390D4ED3A7594C5D8
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:18 +0000
ROA not before: Tue 21 Jan 2025 20:39:18 +0000
ROA not after: Tue 20 Jan 2026 20:44:18 +0000
asID: 271504
IP address blocks: 200.53.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f8:18:f4:c5:a5:f9:d9:5e:6a:d0:b3:90:d4:ed:3a:75:94:c5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:18 2025 GMT
Not After : Jan 20 20:44:18 2026 GMT
Subject: CN=9F0F021232A283031A6F678EEBFCD3194861E70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:5f:35:6f:6f:f8:ed:54:02:d5:2b:8e:33:
84:6e:6c:4d:19:92:67:c9:16:da:e9:8f:70:25:be:
f6:41:e6:c4:89:66:81:e3:15:ec:2d:14:05:38:c1:
ce:2b:e2:9b:38:ca:a7:e8:97:c9:21:ee:6a:51:07:
b4:94:85:93:e9:55:bd:5b:07:3c:0b:bf:b7:1d:34:
ce:1c:39:dc:db:34:f9:fa:4b:12:f5:c8:ac:fc:da:
3b:f3:93:63:90:10:8d:aa:00:74:cf:6e:58:7f:8d:
ff:9d:46:86:84:c1:48:ba:d4:66:48:c6:b2:2e:f8:
8e:f3:c3:23:e9:44:1e:e0:b4:c5:6f:12:bf:54:02:
de:aa:cb:c5:43:5c:84:8a:49:31:9d:5f:9d:56:73:
03:88:4d:81:64:0d:4b:a9:bc:b7:e5:ef:b1:d8:0e:
2c:3a:3a:de:09:b2:5c:d5:79:6d:fc:51:40:ce:f6:
3d:ab:a9:14:ac:e8:5c:73:e0:be:08:6b:47:2a:4e:
1f:1b:34:56:9f:f5:62:7c:7b:6f:28:e8:a7:e2:8c:
7e:62:33:d5:cc:80:a7:91:cb:1e:b1:fa:fe:f1:7a:
a8:64:fb:fd:28:fc:1f:6d:33:3f:e7:0f:8a:38:68:
69:ab:65:8b:14:5a:2e:dd:20:b1:24:93:f6:40:54:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:02:12:32:A2:83:03:1A:6F:67:8E:EB:FC:D3:19:48:61:E7:0A
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:ec:89:60:74:d0:66:3a:b3:ea:2a:4d:51:7e:22:36:13:40:
fb:4f:89:61:46:eb:9f:8c:68:00:db:c9:19:80:01:a4:9c:d2:
6d:55:b1:dd:59:ab:8b:7c:14:1b:dc:69:1a:29:15:29:d9:4e:
b6:a4:0d:89:9e:66:cd:35:8b:a8:2c:3f:7f:3e:f6:67:b4:6b:
6c:cb:04:83:09:43:10:a5:69:0a:9f:72:49:06:65:25:49:e2:
82:37:3f:53:8f:43:89:08:73:8e:5c:be:37:f3:73:7b:e9:9c:
f9:62:37:33:0c:53:d3:c4:02:61:bf:3d:db:45:2a:9b:e4:59:
f8:25:0b:d0:88:fe:e1:f2:7e:bf:a4:f8:7c:1d:b8:7a:0b:5e:
31:a4:68:08:6a:01:fa:2e:4c:e3:f6:7c:14:29:2d:96:0f:88:
88:f0:f3:01:6f:e8:2a:be:b9:5d:44:01:33:af:b1:05:ca:ed:
55:c5:7a:1d:73:8e:89:a6:e1:cd:46:cd:63:90:3e:3f:08:df:
10:3c:96:03:b3:6c:97:b1:f9:53:25:e2:fb:91:59:48:5d:7b:
b8:77:85:3e:cb:23:1a:be:10:25:2b:13:39:e0:58:98:52:37:
79:b0:8d:ee:77:a5:3c:34:61:74:16:33:1e:8d:e3:78:27:7e:
f3:60:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:29 2025 by rpki-client