Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32322d3232203d3e20323730363134.roa
File: 3230302e3231352e3234302e302f32322d3232203d3e20323730363134.roa (raw, json)
Hash identifier: UmQaGbxQ9niMgG+DKRzColPYW8lj3zsBu/WJDrz5KIs=
Subject key identifier: 13:2B:9E:A7:BE:FD:4A:45:AB:D2:9B:BC:01:1F:43:3C:CA:FD:37:FB
Certificate issuer: /CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Certificate serial: 2BD91E124064E2BE84E78835CA1D2B87F23FDD28
Authority key identifier: 86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32322d3232203d3e20323730363134.roa
Signing time: Tue 23 Apr 2024 19:21:21 +0000
ROA not before: Tue 23 Apr 2024 19:16:21 +0000
ROA not after: Tue 22 Apr 2025 19:21:21 +0000
asID: 270614
IP address blocks: 200.215.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d9:1e:12:40:64:e2:be:84:e7:88:35:ca:1d:2b:87:f2:3f:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Validity
Not Before: Apr 23 19:16:21 2024 GMT
Not After : Apr 22 19:21:21 2025 GMT
Subject: CN=132B9EA7BEFD4A45ABD29BBC011F433CCAFD37FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:5d:1b:10:f0:e3:2d:93:93:f1:b2:42:5e:
ef:25:10:51:c5:ea:f9:3b:70:22:78:4a:c3:5d:7a:
6a:f1:61:a3:64:b9:fa:78:82:ff:82:19:c9:58:cc:
81:a3:ea:6c:67:f3:cd:bb:90:79:5a:f2:b9:f0:9b:
3f:20:63:c1:1c:a1:d0:f5:87:5b:c7:af:84:09:1a:
f0:0d:25:01:f0:3e:5e:6e:a2:89:e8:19:48:bf:8d:
6d:5c:89:41:b6:2f:26:2f:9e:48:09:84:2f:df:41:
2b:9b:41:30:c7:29:7c:48:10:a1:24:91:a7:c0:d5:
55:c1:1d:8e:8a:4a:81:66:22:be:50:8d:74:b1:57:
3d:a5:d3:53:02:97:39:4a:9f:91:b2:8d:c4:a8:86:
aa:16:9b:f6:05:e6:5b:a4:89:2a:34:ef:17:63:d8:
b2:d3:06:b9:a2:57:0f:a4:33:21:19:66:73:6a:17:
14:14:b1:54:4d:ac:7f:e2:9e:56:45:d9:75:d3:86:
2c:5c:05:5e:a4:d1:fa:40:31:19:15:66:34:63:ef:
cb:2f:8b:f9:a3:dd:1a:1f:be:00:7d:b4:5a:91:3c:
b3:bc:e6:32:45:e6:bc:20:68:25:2d:f8:cf:d1:cb:
e4:6b:a3:37:23:d1:18:07:0f:7d:61:f3:56:87:c1:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2B:9E:A7:BE:FD:4A:45:AB:D2:9B:BC:01:1F:43:3C:CA:FD:37:FB
X509v3 Authority Key Identifier:
keyid:86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32322d3232203d3e20323730363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.240.0/22
Signature Algorithm: sha256WithRSAEncryption
56:6a:8c:a9:ea:f7:1a:3a:b7:35:2a:0f:0e:38:b4:3a:83:c0:
9d:19:a9:47:74:3a:9b:ed:35:cc:02:ab:c2:53:94:39:2a:0c:
56:e5:21:01:2e:06:af:fc:b5:69:d3:85:cd:9e:f7:fb:6b:6b:
6e:da:e9:70:5e:e7:7d:18:21:bd:27:8d:18:62:17:33:98:73:
21:35:ce:dc:c3:ad:f2:c0:c3:72:65:80:e6:bd:8b:0e:d1:bb:
2b:59:f1:68:84:40:f1:87:1f:6f:52:6a:da:48:da:27:c2:76:
a7:ba:ac:2f:43:29:08:cb:d9:3c:d0:1e:2c:8e:f5:b5:01:8c:
80:0c:4e:0e:fb:7d:e4:b5:0c:c9:d6:66:2c:d4:52:b0:a9:65:
e8:69:dc:77:99:79:a8:10:b9:d6:2d:86:ff:51:dd:ef:11:eb:
7d:90:a1:39:c7:6e:d1:76:14:55:82:29:e8:af:ab:34:13:08:
5c:c0:26:50:74:8e:35:e3:ba:13:91:2d:4d:0f:8e:b0:bc:cb:
97:31:57:78:c6:61:a4:56:c0:ce:ab:1d:3b:27:94:21:ed:4f:
d3:4c:39:23:5a:be:9d:41:60:76:7b:51:bb:88:a8:9d:b6:9d:
04:b8:ef:43:e3:e8:87:25:59:21:01:5c:02:de:61:7a:08:21:
65:f4:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org