Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
File: 3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa (raw, json)
Hash identifier: DVC1SnH4vvH2tTWlUIjRJlGZSl1ULZHSDJb4R9MGmsQ=
Subject key identifier: B1:8B:7D:A6:F0:D7:DB:B1:90:26:83:32:59:DE:25:D0:82:6B:3E:86
Certificate issuer: /CN=B5C41D258314BEAD112B53343A51D3ED73995B11
Certificate serial: 784C3790811D523E41CA03514D8B4380EBD2A8E8
Authority key identifier: B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5C41D258314BEAD112B53343A51D3ED73995B11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
Signing time: Mon 01 Apr 2024 15:40:20 +0000
ROA not before: Mon 01 Apr 2024 15:35:20 +0000
ROA not after: Mon 31 Mar 2025 15:40:20 +0000
asID: 61774
IP address blocks: 200.225.136.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4c:37:90:81:1d:52:3e:41:ca:03:51:4d:8b:43:80:eb:d2:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5C41D258314BEAD112B53343A51D3ED73995B11
Validity
Not Before: Apr 1 15:35:20 2024 GMT
Not After : Mar 31 15:40:20 2025 GMT
Subject: CN=B18B7DA6F0D7DBB19026833259DE25D0826B3E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:f0:51:33:78:b2:ae:ac:49:cb:1f:27:db:
4b:ff:ca:94:77:b2:dc:4f:8f:48:11:74:00:62:fa:
dd:46:eb:35:1e:4e:32:87:66:be:8d:18:36:12:d0:
0a:7c:4c:10:b6:bb:63:c8:94:2d:5a:04:58:f1:76:
69:aa:70:21:e7:ef:fc:c4:58:0c:96:8f:10:7d:a3:
52:30:f6:6e:42:6a:aa:b1:24:d5:ee:a8:d5:59:42:
cb:5d:ca:94:4a:59:36:dc:e9:53:9e:2a:ac:79:76:
60:84:1b:04:e3:1b:b4:6c:a6:b2:30:e0:80:ad:09:
9f:e5:99:7b:a4:f1:2f:b7:b5:fc:ba:d1:68:80:0b:
36:ea:39:b0:9a:dc:7d:c7:5b:eb:8b:f5:0c:c9:b5:
e9:66:c8:45:49:5f:5f:49:94:01:7f:b5:f8:e7:fd:
0e:a4:9d:41:81:72:02:34:7a:6e:dd:76:be:44:25:
5b:31:07:08:63:84:37:4b:66:55:44:3e:ba:ff:99:
5d:1e:0a:98:10:5b:1c:d8:03:54:48:6c:bc:fb:61:
de:15:99:b2:85:c8:56:76:de:de:5f:a9:a8:e8:94:
a1:d2:0a:fd:0c:87:9c:d3:23:70:e1:04:24:f9:82:
ad:28:1e:d7:d5:8a:17:aa:c4:34:a8:a9:4f:d8:d1:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:7D:A6:F0:D7:DB:B1:90:26:83:32:59:DE:25:D0:82:6B:3E:86
X509v3 Authority Key Identifier:
keyid:B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5C41D258314BEAD112B53343A51D3ED73995B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
01:53:d9:9a:c2:d7:af:a8:bd:0f:54:ae:f2:bd:e8:bd:23:38:
42:93:0f:b2:c0:07:85:8d:ab:cc:ce:c6:b2:6a:d2:be:67:7b:
37:5e:d5:6f:e7:02:67:cc:8f:dc:7b:7c:8d:c5:3c:97:d4:c6:
c0:7c:46:4a:d1:63:c8:3e:08:53:bc:33:d9:53:a1:e6:f4:0b:
6f:fa:42:c8:b0:2a:47:d0:e0:cc:87:a1:1c:55:97:7a:f8:1c:
42:39:7a:3c:d8:7b:58:0b:ea:d8:47:71:3a:2c:88:eb:9e:9f:
3c:4a:ec:28:79:5f:ae:e0:6b:f4:a8:17:f5:ff:70:5f:ed:23:
1a:79:cc:23:34:5c:5b:d8:52:ec:88:28:54:5e:dd:32:5d:45:
3d:38:20:75:06:21:b7:21:5e:36:6a:fb:b8:5f:f4:6c:f1:af:
19:40:66:44:1e:ef:4c:75:30:72:d1:91:5a:fe:c8:cf:52:c4:
39:b0:f9:9f:06:6d:60:79:5e:a3:8a:34:98:2d:5d:ee:de:90:
49:a0:02:e2:9a:f4:44:07:b5:65:3d:d9:2c:5b:2d:46:46:1c:
72:a8:2e:15:37:5e:d4:d5:e7:17:9c:89:28:c4:3e:12:5a:18:
eb:da:26:b9:bd:18:b5:cf:08:d8:2e:79:12:6c:97:64:79:96:
59:65:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org