Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
File: 3230302e35332e36342e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier: OyM4qsaoommj2YIpAnQF8haFByUhhmhnjYHoXyplGqU=
Subject key identifier: FB:A3:B5:35:A7:DE:6B:4C:E7:5D:F7:BE:55:B8:BE:ED:D2:9E:17:3D
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 41BC0B73C15E57C38B4EA6A194A8B6814982C122
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:28 +0000
ROA not before: Tue 21 Jan 2025 20:39:28 +0000
ROA not after: Tue 20 Jan 2026 20:44:28 +0000
asID: 271504
IP address blocks: 200.53.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:bc:0b:73:c1:5e:57:c3:8b:4e:a6:a1:94:a8:b6:81:49:82:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:28 2025 GMT
Not After : Jan 20 20:44:28 2026 GMT
Subject: CN=FBA3B535A7DE6B4CE75DF7BE55B8BEEDD29E173D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:e2:ab:c8:91:52:23:cf:04:08:97:ea:b2:
7a:e1:52:1a:41:65:ec:64:98:89:d4:e4:12:0c:a9:
b1:f4:b6:f3:49:24:43:49:47:b3:69:d6:35:0e:1d:
34:ea:85:52:65:bf:fe:e9:b8:f2:28:f3:ad:75:59:
93:df:37:32:2f:13:e4:5d:66:af:42:b0:2c:5c:40:
63:90:17:20:95:98:bf:9e:23:ad:4d:3a:78:c0:37:
86:53:27:11:43:13:be:7b:ec:1a:f8:59:d2:9d:0d:
57:90:49:20:ef:71:3c:1c:29:57:02:86:a5:cc:eb:
75:55:0a:12:3c:66:94:f0:1b:c4:75:ea:d9:58:9d:
e4:1a:1d:a5:92:39:b7:41:50:2e:4f:19:69:26:db:
aa:cf:ff:e7:cb:92:06:da:df:33:bd:b9:00:b2:62:
09:a5:30:fc:2c:04:fa:c4:e9:04:a4:71:3d:82:1f:
98:6e:4a:32:14:c6:59:0c:b3:0a:5d:ca:df:75:bc:
e8:6d:83:a6:9e:c8:6f:0b:85:35:50:7f:94:b1:0c:
c8:e7:b1:d2:93:62:ae:36:c6:b0:00:d0:40:74:64:
6e:8d:6f:9f:72:89:ae:82:22:f6:de:78:5b:4f:66:
d3:bb:6b:56:80:45:e2:9e:2b:4f:d7:9f:1a:29:ed:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:B5:35:A7:DE:6B:4C:E7:5D:F7:BE:55:B8:BE:ED:D2:9E:17:3D
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:a9:93:fb:d3:23:c8:7a:fc:b1:a3:16:06:27:f2:b0:12:cf:
0e:9b:6c:4b:f0:26:ca:a1:22:c8:cf:d3:d2:65:07:e4:fd:1e:
0f:a7:d2:86:a8:62:c7:fb:e1:d6:1d:75:25:fb:41:cd:a6:c0:
ad:c2:04:8e:94:a3:5a:fb:7b:78:e3:64:7d:d2:62:d3:e7:3f:
8c:73:31:62:c4:e4:12:76:ae:ac:47:5f:81:8c:71:50:7a:33:
f8:ab:a3:b6:98:ef:42:27:14:35:cf:a9:c6:8b:2d:5e:07:85:
22:1f:57:91:44:60:23:37:1e:eb:9f:8c:7c:f4:46:0c:35:42:
6d:91:cd:f8:f5:7f:79:f4:5e:18:27:d4:af:16:d5:3c:d6:46:
7a:29:e2:6b:b1:95:5c:b4:36:26:b8:0d:20:f6:18:82:6b:88:
07:c9:ef:71:5b:9a:82:fe:d9:c7:a2:5a:f6:4e:98:c6:34:14:
4b:af:ba:8c:dd:4d:18:9e:31:35:50:eb:5b:73:d5:81:a2:f9:
bd:b5:ef:5b:70:bc:ec:7b:57:88:0f:87:8b:9c:03:f8:75:d5:
56:52:15:4b:5a:d2:87:99:43:8f:8c:a9:60:b3:2d:bb:81:d5:
b2:3d:0e:d5:84:3a:9d:ec:f6:91:c1:1d:70:c3:72:84:cb:90:
a9:f9:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:35 2025 by rpki-client