Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
File: 3230302e3234332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: OLYmlvtsmTHL+8TEo0JwvbeZmw24iZmf14ERyreal5k=
Subject key identifier: EE:2D:0B:EC:B7:B7:6B:8A:AD:62:F3:09:8A:76:79:B6:44:F9:CE:77
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 7D862AD4E3A547791C37EBC252C34A87992278C9
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 03 Apr 2024 18:31:08 +0000
ROA not before: Wed 03 Apr 2024 18:26:08 +0000
ROA not after: Wed 02 Apr 2025 18:31:08 +0000
asID: 4230
IP address blocks: 200.243.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:86:2a:d4:e3:a5:47:79:1c:37:eb:c2:52:c3:4a:87:99:22:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Apr 3 18:26:08 2024 GMT
Not After : Apr 2 18:31:08 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:6e:16:f4:66:2a:b3:94:6d:04:8c:35:18:
56:bc:eb:6c:a7:8f:17:ba:9c:0c:98:3f:20:a2:4c:
a1:c6:2d:65:4f:f7:ee:07:79:18:5e:6b:4f:a9:fb:
c4:f1:2c:d8:e6:64:fb:64:2b:37:63:2d:1a:e9:59:
0e:5e:7d:fa:83:1d:b1:c1:e6:1a:03:ba:b9:ac:84:
64:1f:14:07:18:01:63:d3:bb:0b:1d:03:3b:aa:c0:
d1:32:7a:9d:7f:b0:9c:76:0f:cb:7a:5a:8b:81:53:
30:35:08:c2:be:33:e6:2e:1a:8c:f8:a5:23:10:6b:
53:49:49:f6:28:f9:5d:bc:9e:4b:fb:63:01:24:21:
fd:86:96:4d:dd:7b:c5:49:5b:39:a5:86:20:c0:a6:
7e:8b:ef:5a:4f:61:eb:3b:e9:b6:7e:76:e7:80:c8:
48:bd:2c:ed:d8:75:0e:73:5b:e5:ca:7a:85:1a:e4:
55:fc:b9:3f:a6:90:bf:1f:99:4d:4d:9c:7a:05:6f:
67:7f:68:e3:3a:c1:89:11:79:0d:1d:a0:f0:9c:88:
9a:d7:1b:e4:f8:b4:54:3c:8e:d4:fb:12:03:2d:c5:
93:5b:83:a5:66:77:28:97:2a:fd:3b:fc:05:11:15:
87:25:85:e3:84:1e:25:95:34:3b:91:69:fe:97:d9:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:0B:EC:B7:B7:6B:8A:AD:62:F3:09:8A:76:79:B6:44:F9:CE:77
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.243.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:5a:06:5a:ef:e4:b2:18:08:88:97:4a:b5:2a:09:bb:2b:45:
05:63:4e:31:6d:cd:bd:0d:c5:e7:1f:20:68:57:b3:f5:5a:ca:
c0:18:d3:49:c7:4e:a1:0e:52:c6:d8:d3:ae:43:c8:06:be:f2:
e1:20:b6:b1:e5:5d:6d:1b:11:5a:d0:87:1b:8d:00:71:47:88:
e5:68:97:b7:85:d1:54:2c:2a:4c:80:8c:ae:5e:19:02:05:14:
a2:ce:d8:52:77:ae:ab:c0:79:a9:90:00:c0:59:91:8f:e0:68:
4f:78:83:a3:a8:57:9b:31:49:e0:9a:6a:99:4b:a6:88:a8:48:
da:a9:53:8b:9e:aa:49:91:05:7f:2a:cb:c9:06:df:c2:fb:3c:
c3:55:64:b5:6a:20:d6:1c:55:52:37:6a:50:bb:0c:0b:9a:bf:
94:5c:f5:47:c5:f6:94:8c:e0:e1:5c:b5:7a:a7:05:8e:9a:04:
74:1c:75:ef:77:71:b2:cd:e7:7f:90:45:1d:fe:20:04:ef:03:
15:20:d6:9b:1a:09:11:ea:24:b5:b9:45:33:62:d1:b9:51:d2:
4e:82:f6:69:af:d8:6d:9f:33:01:27:da:e4:2f:76:39:99:01:
bb:1e:b8:02:80:a5:4a:d6:eb:3b:59:9b:f8:75:9a:c9:a6:ef:
18:92:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:24 2025 by rpki-client