Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa
File: 3230302e35332e36342e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier: Sa84osisTkOVlQzl/yIu+OQ3+ZjJqZ+GSfD3T/dcnKE=
Subject key identifier: 0B:8C:C1:A4:64:DD:86:E9:5A:E9:47:27:F8:3D:16:CD:74:F7:EB:0E
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 14A07D0F9CD8BE1D439C44E2F974D33F36DF670E
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:23 +0000
ROA not before: Tue 21 Jan 2025 20:39:23 +0000
ROA not after: Tue 20 Jan 2026 20:44:23 +0000
asID: 271504
IP address blocks: 200.53.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a0:7d:0f:9c:d8:be:1d:43:9c:44:e2:f9:74:d3:3f:36:df:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:23 2025 GMT
Not After : Jan 20 20:44:23 2026 GMT
Subject: CN=0B8CC1A464DD86E95AE94727F83D16CD74F7EB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:1c:a5:ea:93:1f:5f:f8:20:98:5e:21:e5:
1f:0b:65:70:8e:4f:fc:81:2b:bb:64:d0:8f:68:c6:
e1:ba:3d:56:e1:6a:bf:00:e1:1e:84:1f:d4:f7:29:
d6:87:4f:a3:c1:17:24:be:12:53:3b:6f:a8:92:c7:
69:b1:46:6e:af:db:3c:65:d8:42:c9:f7:95:23:fe:
99:0e:e6:82:48:5a:13:56:e8:09:be:d2:94:33:cf:
18:9e:52:68:0b:ef:b9:64:2d:95:df:89:dd:79:55:
26:a0:e9:9b:19:c9:2b:03:7e:bd:ef:e1:b1:2a:c2:
c7:54:3a:de:db:7e:6c:f0:66:41:c0:a1:45:0b:84:
bb:91:31:d5:51:bb:50:70:82:86:76:74:ad:21:1b:
82:50:02:55:38:b6:d7:87:95:f7:7c:6e:d1:c4:47:
bf:b2:78:72:ec:f5:98:be:a6:59:25:3b:0c:9d:67:
26:90:7d:ca:f8:32:55:dd:00:4b:ec:88:05:63:a8:
85:72:9e:20:6e:f4:bb:95:59:10:4b:da:14:3f:69:
63:3b:03:d1:e2:b1:f4:73:90:52:e5:af:6a:7e:99:
e4:ca:7d:c0:02:ff:80:b9:07:e2:e1:3f:f8:69:5d:
c9:97:e9:bb:11:77:ec:dc:d9:18:26:b6:5b:9c:83:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:C1:A4:64:DD:86:E9:5A:E9:47:27:F8:3D:16:CD:74:F7:EB:0E
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:13:12:34:2a:02:af:a6:93:6b:ea:be:99:06:71:54:89:93:
58:20:95:e8:25:7d:54:cc:62:f3:1c:ba:14:fa:71:f3:cc:78:
f2:75:e6:c5:55:da:06:a6:b9:9d:c4:4d:1c:c8:c4:33:53:46:
bb:0b:a5:a3:b6:89:49:25:ba:f4:88:ee:a5:a1:02:34:0c:80:
36:10:d2:58:12:fa:36:3f:a6:a0:22:ed:11:dc:82:2a:82:c6:
11:31:70:77:87:91:77:dc:4f:e5:76:a8:13:cd:bf:e6:71:e6:
09:51:b3:54:2c:c0:5e:ef:3c:1f:93:6b:5c:39:7c:02:db:e9:
4c:56:ae:11:a5:73:f1:1c:db:bf:e2:0d:76:cc:5a:bf:4a:d6:
9d:49:82:12:4e:1f:a2:3d:45:0d:47:8e:f6:47:b1:f1:84:95:
ab:f9:91:54:5c:fd:cb:87:c7:36:2e:db:38:9d:f6:41:18:aa:
a4:17:cb:88:8d:48:20:b2:c3:ca:d7:6e:c7:2a:96:12:f6:83:
b4:4d:ed:4f:ef:e5:e6:98:8f:a3:07:cc:80:80:95:48:00:c8:
c8:9f:a7:80:06:c1:8d:5d:dd:2e:22:4a:02:be:c1:69:da:6c:
1d:ba:7e:91:f7:3c:a4:ab:59:7c:f8:a2:e0:38:28:4a:26:92:
51:4a:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:58 2025 by rpki-client