Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3332203d3e2031393136.roa
File: 3230302e3233372e302e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier: Gn1YPj1DLt/frP3NP+9Q3fQg6p0xREDH6av4PutgTqo=
Subject key identifier: B9:57:E0:DF:CF:CD:04:15:15:44:D2:36:69:46:82:23:19:25:FF:16
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 22C6C923AF1429588D0C7E2F59E2FB25132BD177
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:07 +0000
ROA not before: Wed 29 Nov 2023 17:44:07 +0000
ROA not after: Wed 27 Nov 2024 17:49:07 +0000
asID: 1916
IP address blocks: 200.237.0.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c6:c9:23:af:14:29:58:8d:0c:7e:2f:59:e2:fb:25:13:2b:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:07 2023 GMT
Not After : Nov 27 17:49:07 2024 GMT
Subject: CN=B957E0DFCFCD04151544D236694682231925FF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:0d:d0:f2:cc:83:19:85:74:36:02:b0:42:
d4:33:c9:70:60:00:0f:ec:05:b4:c4:83:4f:70:53:
b6:b1:2f:1d:04:e4:b6:33:9a:76:46:56:2d:e2:6b:
91:d6:c4:93:f7:f1:5a:9b:0b:fb:81:04:3c:54:a3:
07:ab:fb:17:29:68:fd:cb:50:7c:3b:e7:d6:97:41:
95:e2:a7:f2:ef:38:d3:4c:ff:f8:13:e6:1f:2b:dd:
e5:5f:16:dc:bd:8e:1a:b7:53:4b:fb:5c:92:10:f1:
f6:70:ec:81:19:c3:f2:43:81:74:74:2b:9f:02:de:
87:cc:7f:85:f8:1a:f2:f5:73:7d:3f:58:58:49:85:
80:fc:60:30:fe:8a:0b:7a:a9:eb:94:0f:cc:0e:d5:
aa:08:04:4c:3d:63:e7:8b:6e:d2:ab:f7:a7:c7:63:
71:45:d0:7c:63:0b:46:dc:3d:f8:d0:a2:2f:93:1d:
35:f6:fa:20:dc:4e:c3:27:76:6b:15:02:e8:cb:ee:
aa:fa:c1:d5:74:69:06:dc:7a:d5:e1:9b:cd:85:00:
c4:4e:96:1b:6e:81:2f:62:60:ef:51:d9:05:8e:77:
ee:3d:5b:7d:65:74:22:b5:1a:15:c0:5e:30:da:aa:
f3:b5:b9:b3:22:92:ae:a6:2f:4d:02:c9:1b:01:43:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:E0:DF:CF:CD:04:15:15:44:D2:36:69:46:82:23:19:25:FF:16
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.237.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:d4:d5:d6:69:c7:a4:00:a0:db:ee:d4:8f:ea:ab:0d:55:e9:
ad:be:d0:ca:23:fc:d1:44:c0:c4:4d:b5:27:6e:77:61:73:ef:
5b:64:e6:15:25:cf:56:81:7a:2f:c6:ee:d4:9a:06:6e:a3:91:
82:92:97:0b:c4:3c:b4:d3:d2:50:11:f2:ee:14:46:09:17:1f:
8e:37:a2:27:4e:02:3f:0a:2c:47:b5:3b:c7:4e:4b:79:9a:a8:
69:c8:06:8d:64:ec:9d:79:27:ee:27:ec:82:c0:40:6d:c1:33:
93:93:0d:e2:96:1d:50:ba:f6:a9:58:cc:ed:7a:49:61:2c:45:
4f:9a:e0:70:9d:fd:f2:19:f1:44:9d:84:8e:50:e6:ce:78:94:
61:46:3a:47:66:1f:ca:4f:79:5a:54:4c:8a:24:ef:81:59:8a:
97:9d:c9:81:b9:f1:a5:46:13:09:7d:e5:c2:93:5c:99:7f:2d:
78:f9:0b:e9:90:c5:74:d8:42:0c:47:54:ee:d5:1d:0e:a2:a5:
65:3f:5e:dc:7e:18:05:8a:e8:33:68:2c:0f:26:f2:b1:32:f0:
ea:f3:2e:c5:03:da:30:a4:27:18:4e:79:fd:42:8f:73:86:aa:
c4:a9:82:48:53:82:99:53:d2:d1:5e:9d:2d:29:f8:2c:a5:6c:
a4:a8:70:4b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIsbJI68UKViNDH4vWeL7JRMr0XcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhEMDNBRDY1OUFBNDgwRUY1QTNENUJEQzkzNzUzQTRC
RjYxNDgxRDAeFw0yMzExMjkxNzQ0MDdaFw0yNDExMjcxNzQ5MDdaMDMxMTAvBgNV
BAMTKEI5NTdFMERGQ0ZDRDA0MTUxNTQ0RDIzNjY5NDY4MjIzMTkyNUZGMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVw3Q8syDGYV0NgKwQtQzyXBg
AA/sBbTEg09wU7axLx0E5LYzmnZGVi3ia5HWxJP38VqbC/uBBDxUower+xcpaP3L
UHw759aXQZXip/LvONNM//gT5h8r3eVfFty9jhq3U0v7XJIQ8fZw7IEZw/JDgXR0
K58C3ofMf4X4GvL1c30/WFhJhYD8YDD+igt6qeuUD8wO1aoIBEw9Y+eLbtKr96fH
Y3FF0HxjC0bcPfjQoi+THTX2+iDcTsMndmsVAujL7qr6wdV0aQbcetXhm82FAMRO
lhtugS9iYO9R2QWOd+49W31ldCK1GhXAXjDaqvO1ubMikq6mL00CyRsBQ1c7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUuVfg38/NBBUVRNI2aUaCIxkl/xYwHwYDVR0j
BBgwFoAUKNA61lmqSA71o9W9yTdTpL9hSB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC8yOEQwM0FENjU5QUE0ODBFRjVBM0Q1QkRDOTM3NTNBNEJGNjE0ODFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RDAzQUQ2NTlBQTQ4MEVG
NUEzRDVCREM5Mzc1M0E0QkY2MTQ4MUQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMjMzMzcyZTMwMmUzMDJmMzEzODJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAbI7QAwDQYJKoZIhvcNAQELBQADggEBAHvU1dZpx6QAoNvu
1I/qqw1V6a2+0Moj/NFEwMRNtSdud2Fz71tk5hUlz1aBei/G7tSaBm6jkYKSlwvE
PLTT0lAR8u4URgkXH443oidOAj8KLEe1O8dOS3maqGnIBo1k7J15J+4n7ILAQG3B
M5OTDeKWHVC69qlYzO16SWEsRU+a4HCd/fIZ8USdhI5Q5s54lGFGOkdmH8pPeVpU
TIok74FZipedyYG58aVGEwl95cKTXJl/LXj5C+mQxXTYQgxHVO7VHQ6ipWU/Xtx+
GAWK6DNoLA8m8rEy8OrzLsUD2jCkJxhOef1Cj3OGqsSpgkhTgplT0tFenS0p+Cyl
bKSocEs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org