Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323635303738.roa
File: 3230302e362e38342e302f32322d3234203d3e20323635303738.roa (raw, json)
Hash identifier: xhee165ibpsxv9UEGQLkHia8ZOs0KI0jd6friHKr55o=
Subject key identifier: 28:D9:BD:BE:F2:BB:50:2A:61:C5:3F:02:7E:EE:81:E6:FB:D1:BD:BE
Certificate issuer: /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial: 77B908F7B546A9FCBC72DBF585E2F4E013937AD3
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323635303738.roa
Signing time: Mon 04 Sep 2023 14:27:07 +0000
ROA not before: Mon 04 Sep 2023 14:22:07 +0000
ROA not after: Mon 02 Sep 2024 14:27:07 +0000
asID: 265078
IP address blocks: 200.6.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b9:08:f7:b5:46:a9:fc:bc:72:db:f5:85:e2:f4:e0:13:93:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Validity
Not Before: Sep 4 14:22:07 2023 GMT
Not After : Sep 2 14:27:07 2024 GMT
Subject: CN=28D9BDBEF2BB502A61C53F027EEE81E6FBD1BDBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:ef:6e:6d:95:33:a5:bc:82:57:33:c1:40:
dc:08:b7:58:f1:88:d2:08:ac:af:ff:3a:0d:e5:60:
1b:d2:21:8f:9a:fc:61:7d:f2:91:db:bd:cf:26:3a:
04:c3:2b:96:b2:2c:27:9b:83:45:15:5e:73:78:6d:
03:5a:d8:d7:69:c2:c2:1c:db:27:e7:2b:7e:b6:45:
7e:d5:18:5a:ee:b2:e9:76:cb:b9:da:71:bc:78:15:
85:71:1a:6d:32:9a:8d:17:0f:c8:86:ee:4b:4d:49:
2d:7c:c7:64:80:ba:ca:0c:81:84:e4:b3:67:41:76:
8c:0f:1b:1f:d0:db:42:7d:2d:a9:6a:9b:18:f2:7b:
c7:bf:a1:b1:6c:1f:e6:d3:24:a2:c6:ec:5f:1d:2d:
4a:3c:ea:88:d1:ba:b7:9b:9d:ab:3c:1e:94:9d:3a:
ff:38:90:71:dd:e8:39:ff:a1:88:96:36:bc:a8:74:
7b:01:14:26:96:74:b3:25:64:60:3a:d3:9f:34:5c:
76:f3:90:33:0d:cf:f0:7f:72:65:a7:8a:fa:b8:9d:
45:76:25:8c:f8:27:03:87:61:7b:76:9f:d8:5d:a4:
c9:cf:07:8b:e2:de:4a:15:59:65:0d:c8:00:e5:73:
e4:38:ff:51:ac:7b:e9:ee:c9:52:c7:c5:68:13:5e:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:BD:BE:F2:BB:50:2A:61:C5:3F:02:7E:EE:81:E6:FB:D1:BD:BE
X509v3 Authority Key Identifier:
keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323635303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.84.0/22
Signature Algorithm: sha256WithRSAEncryption
41:2c:4b:d0:45:1d:41:6c:4d:41:f8:d5:e7:9a:b4:ae:95:79:
a7:ee:e9:6a:eb:2e:06:15:72:3c:14:63:a3:fa:7d:9e:08:c7:
e8:43:36:88:1c:ea:e1:f8:05:27:c9:42:90:07:ca:c2:c8:40:
74:1b:86:78:82:38:2b:8d:07:ed:14:ef:92:8b:4d:80:c1:02:
59:b5:c9:fb:a3:b9:5d:e8:15:8b:1e:d1:7c:7e:c0:21:0a:95:
0c:f1:c8:6a:82:d4:ba:5a:5b:7e:78:b6:62:7e:20:d0:5a:52:
71:32:58:d1:ec:ea:8c:23:ac:ba:7a:28:73:51:a2:f6:16:af:
4d:35:3d:d7:45:9d:08:70:a2:e5:30:f8:e4:a6:d4:80:33:30:
2f:bf:ff:dc:22:c8:7d:3e:d5:6c:b9:dc:98:61:a8:ee:ad:cb:
77:3a:b7:72:e9:32:6e:2c:dc:32:0b:33:82:be:f3:d0:ea:f9:
cc:c7:a3:6d:f7:3f:8a:b8:93:c8:b1:ff:8d:86:c8:53:0d:cd:
ec:37:d7:93:15:b9:09:29:38:bf:84:5e:6c:ea:3d:c9:1e:dc:
e8:5b:4e:6a:15:f2:78:c6:38:df:b6:85:4f:f4:f1:c0:a9:0e:
f8:ef:98:9d:16:95:40:bb:ea:05:bb:a2:24:88:3f:0a:50:de:
9e:7a:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:25 2025 by rpki-client