Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
File: 3230302e31392e3230312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier: rwCdfH1yNsTUkjA4OxD4rtAc1TbkXiVFUgr+evfursg=
Subject key identifier: 8F:AF:30:33:96:CC:6E:C9:19:37:14:25:06:59:01:B6:D1:6B:70:76
Certificate issuer: /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial: 38AB6903CA8A875F1BD02B2BCF16BFA9D0CE5A4E
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
Signing time: Thu 18 Jul 2024 20:02:26 +0000
ROA not before: Thu 18 Jul 2024 19:57:26 +0000
ROA not after: Thu 17 Jul 2025 20:02:26 +0000
asID: 11802
IP address blocks: 200.19.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ab:69:03:ca:8a:87:5f:1b:d0:2b:2b:cf:16:bf:a9:d0:ce:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Validity
Not Before: Jul 18 19:57:26 2024 GMT
Not After : Jul 17 20:02:26 2025 GMT
Subject: CN=8FAF303396CC6EC919371425065901B6D16B7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:da:cf:23:b2:8a:85:20:00:6e:b2:4d:a1:
13:74:66:32:e5:c3:09:e9:54:08:36:54:34:b7:db:
21:90:92:43:d0:e8:36:09:f1:26:a6:cb:cf:9c:d6:
32:d6:70:38:4b:23:f9:b3:ad:a0:71:bb:10:c2:9d:
4c:73:24:86:e4:04:77:db:b6:07:48:7a:9d:e2:fb:
c1:45:e9:b2:0c:e0:34:55:28:eb:4b:55:80:13:ae:
dc:99:ec:58:b5:d0:62:5d:ca:c7:c3:92:bc:34:e4:
a3:a8:d7:4a:c8:a1:71:8a:d6:3b:0a:5e:74:9f:87:
a2:a9:03:5f:df:73:50:77:e9:d2:f0:8e:c2:e1:54:
ad:07:10:9b:bc:d1:11:d1:c9:c0:c2:e4:e6:85:95:
68:18:ed:28:25:4c:8f:60:de:81:3f:15:7f:8f:57:
29:88:df:35:6a:19:62:e8:85:ac:6d:63:45:a9:8a:
75:ab:59:71:8c:2e:ed:7e:0c:1b:12:58:95:cc:63:
81:4b:cc:9b:52:d4:ac:80:17:92:7f:32:46:a7:d5:
3d:53:36:d0:2d:53:ed:57:81:b4:4c:b1:03:9c:7a:
49:a0:f6:8b:dd:1c:cf:90:e0:05:df:5f:73:1a:75:
9e:3c:ed:3d:74:0c:22:6e:d1:b2:b1:00:15:a9:34:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:30:33:96:CC:6E:C9:19:37:14:25:06:59:01:B6:D1:6B:70:76
X509v3 Authority Key Identifier:
keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.19.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3a:cd:da:d5:89:f4:66:95:1f:8b:5f:99:f3:40:83:ed:8f:
04:b4:e0:68:5f:eb:96:71:2f:08:a2:9d:56:71:19:80:e9:0f:
d4:ef:5d:45:d4:86:0a:6d:80:28:7f:c1:92:30:45:1a:6c:06:
ce:26:fd:4e:1c:05:1f:c2:00:d3:96:b0:ad:c5:69:0a:b9:d1:
35:9b:24:97:7a:c3:3f:43:1e:39:c8:ca:45:60:e0:23:c8:ca:
76:9b:d4:4a:d5:ea:c8:24:e0:57:39:88:8e:63:c4:13:5a:30:
11:28:e8:ce:f4:b3:e3:9d:85:4a:66:e3:2f:36:2d:94:a7:29:
1d:e3:8d:79:15:f1:ae:0a:d9:87:56:0f:08:32:bf:bd:f3:4d:
cc:9e:20:c9:14:d7:63:a3:a8:f0:ee:b2:ca:b1:db:85:2f:e6:
9b:06:aa:3b:b1:45:b0:5e:5d:5d:db:c2:f6:84:04:f6:aa:d8:
30:2c:eb:a0:68:9f:33:90:1d:ef:87:49:e9:3d:7b:96:71:82:
8d:dd:93:96:fb:ff:e7:91:ca:88:d4:97:81:4f:c1:fb:a9:02:
64:1d:ed:71:d6:75:06:62:a5:28:7b:39:d3:53:57:f5:b0:61:
a8:d7:bc:66:3f:97:a5:66:c5:89:a2:c2:d7:74:3b:69:24:8b:
74:43:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:53:23 2025 by rpki-client