Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
File: 3230302e31332e38352e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier: wgJcNIJaTMw3/XnXgnHb9Dlme/YH2LnM5kjfysqQZCc=
Subject key identifier: 68:0F:E8:89:B6:CF:AB:7F:07:04:C7:33:44:12:32:FA:7C:8F:DC:2C
Certificate issuer: /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial: 250723CD8872EDD90585F2F2DBE6070163C6BFEC
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
Signing time: Tue 28 Jan 2025 18:18:56 +0000
ROA not before: Tue 28 Jan 2025 18:13:56 +0000
ROA not after: Tue 27 Jan 2026 18:18:56 +0000
asID: 270440
IP address blocks: 200.13.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:07:23:cd:88:72:ed:d9:05:85:f2:f2:db:e6:07:01:63:c6:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
Validity
Not Before: Jan 28 18:13:56 2025 GMT
Not After : Jan 27 18:18:56 2026 GMT
Subject: CN=680FE889B6CFAB7F0704C733441232FA7C8FDC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:4c:dc:b1:bb:33:19:1e:ef:ed:79:4e:24:
cf:d8:59:c3:ab:ec:24:56:c6:2f:3d:76:27:96:43:
34:ac:6c:1b:a7:f3:c4:4f:0f:50:7e:2e:a8:43:57:
11:6a:83:7a:f4:e2:02:e2:da:c4:60:84:d7:26:83:
7e:ed:8a:8f:cb:61:44:1e:90:98:7f:99:11:46:48:
1d:71:0e:c9:f1:41:76:28:bc:91:04:1a:39:7e:be:
6a:81:05:28:ba:68:b7:ad:42:93:b1:6c:14:23:a1:
ee:4e:16:67:e9:c7:ae:20:59:19:a1:79:6d:3f:ad:
05:96:e9:21:37:48:16:b9:43:b4:c7:f1:eb:df:b9:
e3:e9:be:96:5f:92:94:1d:02:7d:07:8d:7f:cd:42:
7e:7a:b9:eb:32:b7:b7:49:ed:17:db:60:2c:a9:2a:
b3:96:d2:fe:c5:e4:b2:61:eb:5e:14:87:72:e7:90:
1b:c8:26:0c:ce:13:f6:88:1b:26:fc:00:b6:b8:8d:
61:15:50:c5:f2:3d:fa:57:2c:b9:35:66:5c:77:7b:
1c:86:6c:82:dc:f8:81:e8:92:c8:d7:c4:e6:d2:ce:
b1:92:6a:d7:a3:6d:33:02:e4:70:09:a9:78:5d:e5:
70:e6:35:59:6f:31:0f:ef:72:69:7a:74:8f:88:49:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:E8:89:B6:CF:AB:7F:07:04:C7:33:44:12:32:FA:7C:8F:DC:2C
X509v3 Authority Key Identifier:
keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1f:2b:d8:37:51:b2:23:ac:ed:ba:8a:cc:7b:af:49:40:06:
4f:a9:4e:1c:64:4f:a1:dc:09:3a:b8:58:83:1f:d0:16:dc:60:
89:1f:f2:ba:ae:3e:0f:e4:b8:be:4f:9f:24:1a:e7:0c:d5:0b:
c7:b4:9f:78:5d:6a:54:5f:9a:fe:46:f2:45:18:81:04:7c:6a:
48:31:0d:8a:6b:12:28:a3:38:dc:59:64:cb:0c:d4:fd:aa:df:
96:65:ef:b7:de:57:7b:48:ba:8b:53:5a:8e:26:7d:3e:d8:cd:
8c:5c:be:58:2b:21:a3:d5:aa:09:b0:62:12:72:39:76:21:83:
55:9f:ba:04:03:4a:f4:a3:31:f0:ac:9a:4f:aa:75:25:c4:24:
c7:37:f7:ca:24:23:49:79:a9:19:5b:06:e9:11:dc:34:94:07:
9e:16:eb:26:14:8f:ab:b1:90:a0:35:c9:ba:02:c5:e2:82:2b:
fd:64:8a:8d:82:38:cf:4e:00:6c:73:f5:48:c1:6a:c5:48:7e:
14:63:a4:e9:4c:77:c5:1f:ad:fd:77:2d:4f:e0:0a:db:73:eb:
a4:d6:7b:d8:76:08:2e:f0:4a:35:b4:68:92:29:65:91:b4:06:
c5:0e:bf:a1:ee:b0:9f:16:15:b4:58:50:e9:e1:0a:8c:31:17:
79:b9:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:40 2025 by rpki-client