Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa
File: 3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier: HxKeU2y2YpiXzuBP5iKq0hfcNZAAp2UkifhvW5OOoUI=
Subject key identifier: 7A:32:C2:8E:2C:36:87:20:CA:79:65:E0:B7:C4:8C:3F:98:A5:0F:06
Certificate issuer: /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial: 25E9E6021E8DACFA49406C4C169EA735A2F9D431
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa
Signing time: Mon 07 Oct 2024 18:37:59 +0000
ROA not before: Mon 07 Oct 2024 18:32:59 +0000
ROA not after: Mon 06 Oct 2025 18:37:59 +0000
asID: 271383
IP address blocks: 200.36.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e9:e6:02:1e:8d:ac:fa:49:40:6c:4c:16:9e:a7:35:a2:f9:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
Validity
Not Before: Oct 7 18:32:59 2024 GMT
Not After : Oct 6 18:37:59 2025 GMT
Subject: CN=7A32C28E2C368720CA7965E0B7C48C3F98A50F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:85:ae:86:44:4f:ef:44:86:af:21:77:9d:9d:
91:b5:fa:d9:5d:f9:60:13:d5:4c:07:b1:a4:94:e0:
5a:57:f5:fb:4e:b6:7f:fa:c5:80:76:cc:37:43:90:
1b:d4:31:82:15:7a:32:6c:f3:65:09:ac:de:0a:15:
c5:57:14:26:9c:01:f3:3f:0d:7b:74:c4:d6:1d:d2:
d6:cd:8d:63:77:d8:e0:bb:13:fa:cb:8e:45:22:c7:
63:48:11:1b:e1:a8:2c:c5:95:50:80:d4:a2:de:40:
aa:43:fd:54:63:3a:50:ea:54:6e:d0:db:b5:9d:44:
6f:12:2f:2c:c7:2c:77:d8:d8:63:f1:8f:fc:65:3f:
71:ac:3d:06:61:51:a7:22:c8:d4:9e:6c:43:e3:fc:
67:88:11:07:d8:e7:f2:cc:e7:e5:3e:d7:b1:67:b8:
1d:d9:10:0a:dc:6d:ad:66:e0:92:d7:d2:b0:0c:d9:
86:3b:f3:4d:85:05:e7:eb:77:77:ab:61:b4:67:34:
f2:e9:37:88:d7:76:4a:68:3b:ef:36:14:b9:24:ee:
05:70:cc:15:c1:6a:55:a3:6f:f1:8e:a6:8e:53:1f:
89:6e:54:98:03:ae:e9:1d:e8:c7:b0:0c:bc:77:2a:
36:4b:ed:52:6f:64:58:71:75:63:5f:58:1c:13:ee:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:C2:8E:2C:36:87:20:CA:79:65:E0:B7:C4:8C:3F:98:A5:0F:06
X509v3 Authority Key Identifier:
keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0a:e8:90:0e:04:f8:69:fb:36:87:88:77:65:12:37:47:1d:
25:6b:0f:c1:c2:7e:3e:c0:1a:41:3d:b6:0f:e6:c0:10:ee:40:
ba:8a:68:00:e4:0b:8f:bc:93:0f:ef:46:30:0f:10:b0:b2:37:
89:bf:c4:8f:a5:36:09:1a:4e:cb:e8:3e:f0:cf:e0:df:1e:ea:
6c:8f:62:46:ae:83:84:43:29:74:2e:59:0e:0f:7f:fe:18:59:
09:8f:4f:6e:fb:1b:6e:0a:34:c3:1f:fb:8c:fa:d8:f3:f2:61:
bc:18:19:a0:df:59:61:be:a2:ff:ce:1c:1f:44:e7:26:29:5f:
30:54:fc:7b:15:2c:e5:a4:22:41:f5:e4:99:97:24:e6:24:19:
6a:7e:af:b8:52:60:b1:ce:25:53:f7:09:20:85:57:0b:18:5e:
36:ac:b4:d6:8f:b3:68:59:f4:2b:e1:26:02:1a:a2:ae:22:38:
e7:8a:97:2d:53:5d:ed:45:ab:7d:09:62:35:07:eb:ce:bf:08:
ea:f7:72:dd:93:b6:af:b4:2e:e1:4d:a1:1f:e2:d0:5a:5f:f4:
83:40:12:4b:5a:ea:48:1e:1f:ac:7f:5c:e7:2e:72:2b:a4:65:
3a:e3:2d:e3:30:a0:7c:6c:74:1f:b1:32:f1:fd:a0:41:f7:28:
97:e3:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:16 2025 by rpki-client