Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa
File: 3230302e35332e38362e302f32332d3233203d3e20323731323938.roa (raw, json)
Hash identifier: g6S6HuQcg1JW4flKsJJW1SFG3j+Sd6MYUUPClIQu21I=
Subject key identifier: A7:02:21:A8:92:A8:0A:9F:DE:BC:50:E2:8F:B5:5D:F4:CA:41:22:80
Certificate issuer: /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial: 28A19A224FED7C221C3658C29AC46CDD1AA97936
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa
Signing time: Tue 05 Dec 2023 00:24:29 +0000
ROA not before: Tue 05 Dec 2023 00:19:29 +0000
ROA not after: Tue 03 Dec 2024 00:24:29 +0000
asID: 271298
IP address blocks: 200.53.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a1:9a:22:4f:ed:7c:22:1c:36:58:c2:9a:c4:6c:dd:1a:a9:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Validity
Not Before: Dec 5 00:19:29 2023 GMT
Not After : Dec 3 00:24:29 2024 GMT
Subject: CN=A70221A892A80A9FDEBC50E28FB55DF4CA412280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:5f:51:76:8f:1d:58:44:6c:47:8b:df:18:
c5:6c:b2:56:f7:8d:fc:b3:16:c8:d7:56:8b:fb:2a:
85:e4:5d:3c:15:74:c7:5e:4b:40:4c:28:fb:e3:69:
07:90:21:d7:a6:d3:ad:02:fe:88:4d:b6:d3:17:eb:
ea:6f:95:89:d0:b3:c0:2d:d2:d7:9c:76:db:c4:ed:
74:2e:5e:3a:55:43:c1:29:a3:af:ab:0d:c9:72:26:
19:db:da:1f:7d:29:88:83:7a:99:88:57:5d:9a:b4:
9b:6a:64:6b:82:6a:db:be:83:8d:80:7d:2f:91:0e:
69:66:17:ae:27:36:5a:2c:47:40:5e:20:cc:1e:6b:
1d:11:1c:50:a2:50:09:d3:f2:d1:59:d6:0e:dd:e4:
9f:0e:b4:84:f3:3a:1b:b0:14:8e:62:c7:82:df:01:
7a:84:04:33:98:da:da:3b:3c:c3:95:68:f7:c6:f0:
3d:6e:20:29:54:d9:ce:f7:e4:b6:86:cc:11:6e:17:
a2:f7:3f:40:f1:f7:1f:78:75:6a:64:c7:e7:05:b4:
56:84:ca:25:bb:f0:9e:31:95:ad:56:0d:37:2c:54:
e2:ad:c2:89:a2:1b:5d:ba:f4:ec:8a:f1:ba:eb:30:
56:07:cd:ee:00:6d:17:ac:a3:26:c8:8e:90:9a:55:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:21:A8:92:A8:0A:9F:DE:BC:50:E2:8F:B5:5D:F4:CA:41:22:80
X509v3 Authority Key Identifier:
keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.86.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d7:55:1f:2e:0e:70:20:81:8b:ca:c6:dc:83:a1:99:db:f2:
4b:01:0b:b4:75:2c:b3:d4:9f:05:b1:19:7d:ba:cb:10:63:5e:
54:7c:b0:8c:06:35:2d:37:06:aa:ba:0a:a9:df:88:a4:2b:fe:
3a:62:22:a0:48:bd:5d:d9:fb:60:58:16:40:c2:b4:78:e8:d6:
10:a7:83:bc:d1:a4:65:1a:8d:a9:11:10:c6:72:9e:23:d1:d6:
c4:5f:41:84:16:70:f6:a4:33:2d:ac:40:40:72:a3:09:a4:94:
53:8d:1e:d9:5b:ef:16:83:ae:97:24:3f:aa:79:08:7b:b6:e7:
1f:a3:c4:b2:66:5d:28:a5:aa:ee:81:03:62:7d:56:31:47:9b:
4d:d9:5f:1d:b3:83:ed:fa:3c:f7:27:ad:0e:36:b4:b0:b5:1e:
70:54:62:71:ec:83:73:ba:37:f9:a1:80:ec:09:d9:54:ac:9e:
57:cf:34:62:b6:1d:0b:7e:ed:fb:4e:74:c3:30:82:bb:74:a5:
d7:0d:a4:4e:b9:50:3f:85:6d:39:ac:42:2b:57:40:44:80:ec:
69:dc:56:dc:62:43:24:00:2f:6c:f1:1d:4c:9f:ce:0e:ce:f8:
cc:3a:ec:3a:c1:c6:9e:46:ca:9b:99:f5:78:b2:84:11:f7:08:
4f:27:fc:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKKGaIk/tfCIcNljCmsRs3RqpeTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCNDM0NTA4MTJFNzMwOEFFRDZDMDlFMTM2RjQ4OUMy
RUFDNkU2NjAeFw0yMzEyMDUwMDE5MjlaFw0yNDEyMDMwMDI0MjlaMDMxMTAvBgNV
BAMTKEE3MDIyMUE4OTJBODBBOUZERUJDNTBFMjhGQjU1REY0Q0E0MTIyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl7l9Rdo8dWERsR4vfGMVsslb3
jfyzFsjXVov7KoXkXTwVdMdeS0BMKPvjaQeQIdem060C/ohNttMX6+pvlYnQs8At
0tecdtvE7XQuXjpVQ8Epo6+rDclyJhnb2h99KYiDepmIV12atJtqZGuCatu+g42A
fS+RDmlmF64nNlosR0BeIMweax0RHFCiUAnT8tFZ1g7d5J8OtITzOhuwFI5ix4Lf
AXqEBDOY2to7PMOVaPfG8D1uIClU2c735LaGzBFuF6L3P0Dx9x94dWpkx+cFtFaE
yiW78J4xla1WDTcsVOKtwomiG1269OyK8brrMFYHze4AbResoybIjpCaVbOPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpwIhqJKoCp/evFDij7Vd9MpBIoAwHwYDVR0j
BBgwFoAUirQ0UIEucwiu1sCeE29InC6sbmYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtTcm1LV1liMXVNU3hOOFVQN016YlVBNUJWZ2dVd1E5QnlQZEhIOGJD
eDYvMC84QUI0MzQ1MDgxMkU3MzA4QUVENkMwOUUxMzZGNDg5QzJFQUM2RTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBQjQzNDUwODEyRTczMDhB
RUQ2QzA5RTEzNkY0ODlDMkVBQzZFNjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrU3JtS1dZYjF1TVN4TjhVUDdNemJVQTVCVmdnVXdROUJ5UGRISDhiQ3g2LzAv
MzIzMDMwMmUzNTMzMmUzODM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByDVWMA0GCSqGSIb3DQEBCwUAA4IBAQAZ11UfLg5w
IIGLysbcg6GZ2/JLAQu0dSyz1J8FsRl9ussQY15UfLCMBjUtNwaqugqp34ikK/46
YiKgSL1d2ftgWBZAwrR46NYQp4O80aRlGo2pERDGcp4j0dbEX0GEFnD2pDMtrEBA
cqMJpJRTjR7ZW+8Wg66XJD+qeQh7tucfo8SyZl0oparugQNifVYxR5tN2V8ds4Pt
+jz3J60ONrSwtR5wVGJx7INzujf5oYDsCdlUrJ5XzzRith0Lfu37TnTDMIK7dKXX
DaROuVA/hW05rEIrV0BEgOxp3FbcYkMkAC9s8R1Mn84OzvjMOuw6wcaeRsqbmfV4
soQR9whPJ/yg
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:59 2025 by rpki-client