Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
File: 3230302e35332e36362e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier: MgKrdgN7cDBCS6A0+mzlRQWXJpe+EUJ6VJbF7v4O4qs=
Subject key identifier: 9B:22:77:3B:29:E0:62:56:0B:6A:2C:24:78:F2:D6:32:07:99:7F:AE
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 653D696FEA083799791699A0B055B55C781D6D55
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:42 +0000
ROA not before: Tue 21 Jan 2025 20:39:42 +0000
ROA not after: Tue 20 Jan 2026 20:44:42 +0000
asID: 271504
IP address blocks: 200.53.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3d:69:6f:ea:08:37:99:79:16:99:a0:b0:55:b5:5c:78:1d:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:42 2025 GMT
Not After : Jan 20 20:44:42 2026 GMT
Subject: CN=9B22773B29E062560B6A2C2478F2D63207997FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:fa:03:19:6f:15:08:9e:f4:6d:f8:01:72:
46:27:bc:9e:e1:d6:4d:58:23:e2:11:4f:b8:49:9e:
69:28:bc:8f:6f:05:a3:9f:82:b4:ce:56:ef:fc:56:
78:68:ec:9a:05:9b:96:79:d4:6f:20:c4:6a:fb:b9:
8f:fc:8e:a2:32:35:82:71:93:0c:b3:30:ac:47:2e:
4f:28:cd:9b:2d:d5:ae:bc:dc:49:0a:7b:d8:a4:ac:
ea:9d:1b:55:ae:67:8e:5b:8f:74:19:5b:c9:35:5f:
d1:5f:b0:8e:4d:26:c9:10:88:39:e7:11:7f:ce:4b:
ac:6e:bd:10:a5:72:1a:e1:4a:3b:86:85:c2:c6:60:
c7:c7:99:ef:6b:e7:bf:3a:75:de:c6:39:fe:bf:29:
f0:ba:7c:e8:f4:c1:59:ec:f7:4d:5c:34:48:d5:e8:
b5:33:0c:51:a7:8a:66:88:f9:4c:a1:44:ab:d7:f9:
bc:07:9d:96:69:e0:8d:ee:ce:8a:6f:1b:ec:9a:34:
91:aa:e9:64:b6:09:fe:38:bb:0e:a9:02:9a:a2:bc:
43:d1:ca:b2:21:6d:08:35:23:39:50:8c:13:dd:a8:
bf:42:fb:ed:ba:f7:80:fc:f9:75:8c:7e:10:24:68:
c2:bc:36:7b:72:40:0a:f8:b8:38:dd:d5:29:23:6e:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:77:3B:29:E0:62:56:0B:6A:2C:24:78:F2:D6:32:07:99:7F:AE
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.66.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9b:7e:65:ca:3d:8b:3e:5a:38:87:92:47:ef:91:c4:6e:d9:
bc:02:63:80:e6:cd:bf:e8:59:97:7e:2b:73:a5:8e:84:f1:41:
8b:3c:8f:bf:9d:79:50:5b:ea:c7:7d:50:94:d5:fb:b8:77:4e:
ca:16:2a:c8:47:bc:42:c4:ad:44:d8:7d:0d:c3:31:ca:99:bb:
00:d1:15:ca:61:6d:82:97:8a:83:38:fd:64:ee:aa:d9:65:c9:
be:ed:ed:ab:90:32:3f:50:72:84:d9:58:c7:e2:66:59:12:70:
b3:1e:60:ec:f5:e1:0a:95:49:27:d2:e4:97:e8:60:d2:5a:a1:
89:7d:26:ba:a5:b3:6c:d7:87:b6:f1:95:a1:80:ac:c3:f7:9e:
5c:ed:df:fe:69:a0:95:2f:24:bf:b5:77:94:2a:bd:6a:31:31:
dc:88:db:c3:bc:e3:24:48:62:68:39:9b:f6:7a:3a:46:1e:0a:
05:28:28:f6:16:bf:53:14:01:38:13:02:da:67:cd:88:1e:96:
20:c7:25:ab:5b:02:74:e5:ec:12:db:80:2f:e2:1e:ac:91:48:
5d:a8:57:8b:0e:d0:e7:a9:de:53:be:c2:38:c1:2d:58:78:ad:
cd:46:06:ff:8c:eb:a3:5c:a1:85:a6:9d:6d:dd:aa:df:9d:70:
03:55:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:10 2025 by rpki-client