Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
File: 3230302e31332e38362e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier: wTx+ab0mEjYhsK0/qlUxBHpOwCJHEaCAvffraeF1Ezc=
Subject key identifier: 1B:F3:EC:05:F2:C6:02:05:A1:D3:13:0A:3E:8D:17:84:45:E2:10:09
Certificate issuer: /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial: 45EDF10229584C38D53699402A408DDD7C5A0BE9
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
Signing time: Tue 28 Jan 2025 18:18:54 +0000
ROA not before: Tue 28 Jan 2025 18:13:54 +0000
ROA not after: Tue 27 Jan 2026 18:18:54 +0000
asID: 270440
IP address blocks: 200.13.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ed:f1:02:29:58:4c:38:d5:36:99:40:2a:40:8d:dd:7c:5a:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
Validity
Not Before: Jan 28 18:13:54 2025 GMT
Not After : Jan 27 18:18:54 2026 GMT
Subject: CN=1BF3EC05F2C60205A1D3130A3E8D178445E21009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:4e:61:3d:12:71:94:64:f6:e6:a0:b5:e8:
82:0c:67:ca:47:f5:86:d2:cf:41:e9:a8:99:10:2c:
31:51:15:50:5f:d7:4d:3a:a7:b8:7d:be:b0:13:2a:
2b:3a:70:f6:80:53:49:c7:38:3f:8e:9c:f0:86:c5:
36:86:ab:31:33:37:b3:09:4f:77:44:25:c0:b6:aa:
c2:8a:b4:4d:d1:e1:71:3c:95:14:52:cd:22:6d:17:
46:24:0a:88:f9:36:20:40:d1:70:63:95:dd:d8:21:
d6:e6:d6:f7:d5:80:e6:aa:a3:54:c2:7c:a9:ee:10:
87:5d:2f:4f:a6:70:c9:52:43:d3:d6:ef:eb:c7:e6:
93:e0:51:08:78:a3:ee:4c:a4:b9:8b:d5:f0:03:00:
6d:af:6e:92:d8:f2:8a:25:42:5d:26:c6:f4:f3:aa:
be:b6:68:22:b6:78:37:98:9b:63:c3:92:38:8b:a8:
1e:56:59:c6:69:87:7c:f5:83:9b:28:54:20:5f:ef:
60:98:4c:cc:25:2e:e1:20:0b:17:78:14:c4:61:b4:
6e:1d:57:c0:47:09:18:35:e0:f3:34:06:5d:a6:42:
37:f0:82:25:c1:c0:51:03:ff:ff:5d:fe:d0:16:16:
3f:93:86:24:df:95:b8:03:09:21:fb:6a:02:30:46:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:EC:05:F2:C6:02:05:A1:D3:13:0A:3E:8D:17:84:45:E2:10:09
X509v3 Authority Key Identifier:
keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.86.0/24
Signature Algorithm: sha256WithRSAEncryption
99:48:30:67:f0:a8:2e:62:2c:17:3c:40:15:1f:5c:1f:55:1e:
24:28:1c:ad:9b:45:a9:03:a5:37:ce:35:ee:cb:36:16:3f:dd:
e7:d2:e0:00:ba:03:75:90:b3:e7:66:ae:d6:ed:02:ca:28:b7:
3e:4b:98:c3:85:db:5e:ea:8a:53:df:4a:76:19:49:34:f8:06:
c1:4b:9e:bb:fd:3d:e1:bd:8a:7b:07:bd:85:fa:f1:81:31:35:
f9:45:3c:24:46:bf:77:d3:45:71:66:c2:1e:49:ab:05:48:9f:
b4:17:1d:b0:8a:55:7e:c8:62:5c:f7:f4:07:cb:6f:c8:39:b0:
66:2c:1c:f4:4f:88:34:b7:7b:8a:cf:e0:f7:9f:d7:cb:34:9e:
4f:d8:7a:c3:21:b8:85:ad:27:65:12:33:9f:21:48:46:52:ff:
82:b0:f2:63:d1:d1:02:3f:de:83:24:c9:3a:f6:14:29:8d:9c:
ef:f4:cc:b6:51:e0:8e:8f:72:21:9f:d5:17:31:b6:18:a5:cc:
06:40:08:69:73:57:1e:24:18:87:24:5a:78:0a:0f:69:3c:1d:
13:de:60:c5:b4:14:c2:ed:5d:e8:a6:52:2f:3a:04:c5:e7:0f:
78:84:c5:b4:a7:53:dc:3d:84:5c:db:4b:32:5d:01:e0:a1:0a:
22:b9:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:55 2025 by rpki-client