Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234332e302f32342d3234203d3e20323730363134.roa
File: 3230302e3231352e3234332e302f32342d3234203d3e20323730363134.roa (raw, json)
Hash identifier: 0Hs9Zc+VE1c40tHddrzYGDbxSFA0YXcR/b7hD9Z+1cg=
Subject key identifier: A5:21:C3:E8:2D:88:96:17:5E:2D:FB:B9:35:F3:77:8C:0D:B5:5A:ED
Certificate issuer: /CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Certificate serial: 53D311265CCC763F45E3FD0147DE508A060274F6
Authority key identifier: 86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234332e302f32342d3234203d3e20323730363134.roa
Signing time: Tue 23 Apr 2024 19:21:21 +0000
ROA not before: Tue 23 Apr 2024 19:16:21 +0000
ROA not after: Tue 22 Apr 2025 19:21:21 +0000
asID: 270614
IP address blocks: 200.215.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d3:11:26:5c:cc:76:3f:45:e3:fd:01:47:de:50:8a:06:02:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Validity
Not Before: Apr 23 19:16:21 2024 GMT
Not After : Apr 22 19:21:21 2025 GMT
Subject: CN=A521C3E82D8896175E2DFBB935F3778C0DB55AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:dc:89:da:d5:9b:c2:d2:2a:02:b5:42:11:
31:c0:df:8d:df:c7:55:71:43:da:f3:09:bf:31:52:
a3:66:61:db:2f:ec:1d:bd:b1:fd:95:5b:6a:d0:50:
b5:3e:a1:c8:97:07:5d:fb:44:79:3b:aa:62:9b:01:
a7:94:33:6f:c2:50:8a:d6:98:ed:8f:59:b6:c3:de:
90:3f:da:51:a2:7f:92:2c:7e:02:12:7c:cf:ca:65:
37:c8:61:f5:b5:58:2b:08:bb:13:14:0c:51:9a:b4:
65:62:f8:d6:e9:d7:51:92:b8:02:16:b8:68:02:1e:
99:68:06:07:a2:a6:eb:6d:ce:bd:56:f6:78:4d:3c:
5e:22:cf:f0:12:a4:2c:8d:33:17:bf:3c:f4:0b:a4:
94:b5:07:6e:a6:ac:52:28:da:77:95:da:45:e3:d6:
00:eb:96:0c:79:3f:05:79:10:c5:5f:3d:8b:16:18:
29:43:94:cd:d5:3d:29:33:b4:40:f4:9b:64:71:9c:
c8:38:35:05:b0:e5:7f:dc:02:ff:62:cb:2f:b8:14:
78:00:01:da:ac:45:5f:80:da:7b:32:0c:d0:2e:b9:
f4:57:47:82:d9:f5:25:07:85:50:14:c2:88:ac:7e:
06:90:45:5e:2f:01:2c:8c:24:5f:81:c3:e5:22:87:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:C3:E8:2D:88:96:17:5E:2D:FB:B9:35:F3:77:8C:0D:B5:5A:ED
X509v3 Authority Key Identifier:
keyid:86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234332e302f32342d3234203d3e20323730363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.243.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dd:48:bf:fe:b3:cb:18:8d:44:ca:11:67:ac:d8:9f:bc:f2:
31:73:32:d7:22:53:04:06:63:0d:78:20:79:91:4a:f6:68:23:
14:36:b5:1a:d3:cc:a8:4d:09:62:81:20:94:e5:bf:e0:5e:a1:
dc:15:55:f7:09:47:60:39:c1:e0:09:59:f0:65:1f:7e:c8:5b:
50:e5:f9:21:80:5b:06:65:21:e8:fb:8f:59:58:fe:7d:72:ec:
15:f3:ff:10:3c:d5:dd:2c:5f:db:e7:1b:5d:83:bd:a2:ca:50:
c2:0b:e9:50:2c:13:76:9a:62:36:df:70:59:ff:8c:b4:f0:f0:
f1:29:e6:ef:2d:c4:38:b1:d9:65:90:03:92:14:47:b9:29:da:
88:a3:02:6b:42:ba:1e:ec:0c:71:53:a2:93:50:06:46:ae:87:
77:a1:03:9c:cb:01:91:c3:46:df:9b:09:70:6c:5c:58:b6:b7:
5e:21:2c:2c:dc:14:97:74:ef:c4:4a:a9:f8:a1:0a:7e:fd:7d:
de:02:d3:57:62:ed:bf:26:04:71:4b:d8:20:0e:89:ba:b9:36:
94:0f:b0:40:7b:1a:d8:90:72:14:99:e9:a3:9d:93:e9:e8:3a:
d5:47:49:ca:07:b5:1a:ac:4f:29:b4:a3:b5:18:01:b5:de:04:
03:b9:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org