Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa
File: 3230302e35332e38342e302f32332d3233203d3e20323731323938.roa (raw, json)
Hash identifier: ipshsCiRwvuy7LxA1aSPQd3uU2WSrDf4Neb21M/q8m0=
Subject key identifier: 06:95:5D:78:88:9F:2F:57:79:DB:A2:F0:30:17:DC:87:A1:B0:19:01
Certificate issuer: /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial: 2BDB216BAE41EC7CF3BB0F2D8ACFE23BABC7B07A
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa
Signing time: Tue 05 Dec 2023 00:13:20 +0000
ROA not before: Tue 05 Dec 2023 00:08:20 +0000
ROA not after: Tue 03 Dec 2024 00:13:20 +0000
asID: 271298
IP address blocks: 200.53.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:db:21:6b:ae:41:ec:7c:f3:bb:0f:2d:8a:cf:e2:3b:ab:c7:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Validity
Not Before: Dec 5 00:08:20 2023 GMT
Not After : Dec 3 00:13:20 2024 GMT
Subject: CN=06955D78889F2F5779DBA2F03017DC87A1B01901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:84:23:02:42:83:b7:c8:2a:21:96:63:3b:
94:2a:df:0c:72:8f:0f:27:ac:ca:3e:65:e7:bd:d8:
6a:7a:af:96:f9:b7:4f:cb:99:47:df:d1:df:e6:a5:
25:f2:13:40:59:93:11:26:a8:80:92:58:12:56:24:
21:a0:58:b6:e2:61:e7:b3:bb:c2:93:bf:a8:16:db:
85:57:0c:45:74:69:fb:28:59:99:f6:aa:f1:d2:61:
69:39:c2:db:e2:01:15:b5:d3:74:c1:43:3d:a4:da:
88:34:76:ef:27:43:80:36:ad:3f:e1:d9:46:4a:b0:
5b:df:71:04:b4:89:bd:ed:db:60:b5:11:91:02:4e:
0a:7d:e6:26:e8:0e:8d:96:69:67:bd:6d:0d:67:21:
61:b2:9b:06:b3:ad:aa:9b:56:5d:db:82:8c:39:86:
e9:9c:35:96:a9:06:df:c3:d6:28:f5:25:91:66:45:
13:6a:b8:00:23:e8:a6:7f:8d:a2:d9:9c:35:05:ca:
ca:45:8c:ef:aa:b0:79:7f:d9:6c:f1:d2:93:3d:2d:
3e:85:73:b9:9a:41:64:7e:db:74:42:cd:85:05:92:
ce:a6:39:39:23:dd:3a:39:1e:4e:ba:d4:e5:6e:0d:
38:4e:10:10:ec:32:3f:5a:bb:f9:1a:40:d2:8d:b0:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:5D:78:88:9F:2F:57:79:DB:A2:F0:30:17:DC:87:A1:B0:19:01
X509v3 Authority Key Identifier:
keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.84.0/23
Signature Algorithm: sha256WithRSAEncryption
82:db:96:eb:ca:63:25:0e:5b:8f:51:f5:c6:6e:19:d2:60:4a:
ee:ff:8d:79:8e:09:5d:4f:a9:2a:fb:49:ad:c3:16:0a:48:60:
dd:98:cb:4e:96:a3:b6:35:0f:b9:e3:a8:92:7e:51:f5:1c:22:
a1:ca:1a:15:4b:2c:53:7b:19:cc:63:5c:db:60:d6:c2:75:1c:
37:94:9b:d1:57:8f:ab:cb:9e:3d:79:aa:ba:2c:99:cc:57:e1:
b6:3a:b1:0f:b2:8e:78:ae:f7:62:56:eb:21:f1:12:f2:4d:f7:
0d:1f:02:bf:9b:5e:c6:c3:62:51:aa:f0:bf:fc:52:a6:75:11:
eb:dd:0f:a5:88:11:8b:a7:4c:7f:94:77:29:ee:66:84:65:aa:
98:5e:52:a2:7c:03:b7:b3:e3:fe:fc:19:89:d1:40:d4:b1:58:
73:f3:41:19:80:3e:f2:d5:80:a7:06:f9:bc:a1:cb:10:73:84:
d3:04:d4:cf:11:9e:a5:75:48:ef:82:4a:89:24:c9:3d:28:fa:
62:42:a5:78:67:6f:1e:3b:f5:5d:2a:3d:4f:b6:b7:16:30:a8:
c3:d8:89:02:fc:0a:0a:02:a2:7e:69:dd:51:41:0f:35:01:2f:
7a:95:1f:2f:15:42:d6:56:98:f9:9a:89:d9:d8:b0:5d:38:88:
7e:88:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:48 2025 by rpki-client