Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
File: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (raw, json)
Hash identifier: mIphSVzmZ4W00sdvxmBEkkjLTlWkFaFd9CMfNRmiqh0=
Subject key identifier: 8A:58:92:51:E7:67:17:B9:A4:ED:CB:38:CF:13:19:46:20:A8:FD:82
Certificate issuer: /CN=40F84FEE57C4E5B280E9D442848B43902C736360
Certificate serial: 2BDE0E2C11B2C315B863FB5F8013AE68D099BD79
Authority key identifier: 40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
Signing time: Mon 08 Jan 2024 12:16:27 +0000
ROA not before: Mon 08 Jan 2024 12:11:27 +0000
ROA not after: Mon 06 Jan 2025 12:16:27 +0000
asID: 271180
IP address blocks: 200.125.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:de:0e:2c:11:b2:c3:15:b8:63:fb:5f:80:13:ae:68:d0:99:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F84FEE57C4E5B280E9D442848B43902C736360
Validity
Not Before: Jan 8 12:11:27 2024 GMT
Not After : Jan 6 12:16:27 2025 GMT
Subject: CN=8A589251E76717B9A4EDCB38CF13194620A8FD82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:83:ca:59:32:40:6c:72:3f:59:f0:2f:55:
8d:08:98:58:a1:d2:2a:91:e3:ed:c8:ff:93:09:ad:
0c:0b:f2:12:e7:f0:2f:9b:66:c9:cf:fa:59:fe:fd:
00:c3:67:72:9d:8b:5a:66:4d:81:2c:16:b9:d8:ca:
1a:ea:1c:27:b2:b0:0a:6f:12:42:45:f4:10:22:41:
ac:75:77:b6:64:72:81:0b:54:d5:4f:ab:c8:31:61:
a5:eb:64:1d:f0:23:6d:c9:db:03:e0:cb:ce:b5:a1:
35:46:91:6c:07:91:a6:9a:e3:1b:c3:53:9c:0c:90:
b8:57:af:a2:52:fc:aa:53:ac:32:da:b2:1f:e4:82:
3a:08:81:0f:1d:92:79:d8:7a:2c:ac:c7:d9:be:0d:
bd:02:3f:0e:87:6e:d0:ee:dd:96:a5:5a:af:dd:5c:
c5:5a:14:ba:3d:d5:cd:3f:b4:cc:25:c2:7e:79:c1:
78:31:cc:60:de:21:67:65:43:21:8e:a5:ed:f9:20:
eb:56:8e:31:c0:7c:c7:6b:4d:53:83:17:14:ef:19:
82:9f:79:b6:67:ee:31:4a:80:65:cd:9e:93:35:f9:
d9:6d:f2:b0:11:05:92:be:9c:63:b5:5c:92:83:92:
9c:de:87:8e:0a:59:6e:6f:83:28:55:b3:a7:21:a2:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:92:51:E7:67:17:B9:A4:ED:CB:38:CF:13:19:46:20:A8:FD:82
X509v3 Authority Key Identifier:
keyid:40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:53:42:38:41:1e:3a:90:19:14:e3:12:92:56:f3:c2:d9:1b:
28:e4:43:56:c2:9c:29:13:5d:40:bf:1d:fb:72:91:14:07:56:
a9:10:af:7b:d9:32:e0:55:58:d8:90:4a:ec:e8:87:d6:90:2a:
9f:b3:b4:f8:d4:32:e4:43:ef:f3:b4:e9:7b:50:b3:cb:33:b3:
74:b4:99:c2:fc:cc:3e:79:4f:82:f1:4c:31:6a:88:28:5b:8f:
8f:4c:7d:db:80:b0:4d:e9:73:ae:a8:33:a8:0a:65:af:bd:c8:
73:5d:31:b3:53:d7:ac:95:c2:0e:bd:43:f3:21:e2:3e:26:96:
48:9b:9e:75:e9:4d:da:96:0b:50:2a:c5:19:f4:31:b4:16:24:
b7:a0:95:76:62:36:58:e6:00:e2:f0:2c:35:f3:0d:3f:2e:34:
21:c8:75:f0:3f:40:16:2a:d1:20:1d:aa:62:6c:b8:b5:ce:7c:
1e:fd:42:da:57:68:ff:34:fb:3d:f0:33:dc:1e:80:7c:61:b8:
25:23:83:24:6a:9c:96:40:21:40:ff:b9:71:ad:aa:c1:2e:3b:
d8:a1:50:70:38:78:38:4e:9a:a6:7d:46:f0:fa:1d:86:fc:52:
2b:8a:c0:31:aa:30:d3:a1:52:f6:4b:f0:bf:64:ff:46:e0:6b:
51:1f:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:50:45 2025 by rpki-client