Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
File: 3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa (raw, json)
Hash identifier: um2kb3GU//U0pjeRPUeq30pUf4AnupgIOte5PGvTR9s=
Subject key identifier: D1:B7:12:32:0E:C0:C5:2E:0B:AF:5D:19:53:E9:18:02:91:7B:2F:16
Certificate issuer: /CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Certificate serial: 7BD922A980BEE3AA66417DA513F8EEBB68CAAFA5
Authority key identifier: BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
Signing time: Thu 05 Dec 2024 21:27:30 +0000
ROA not before: Thu 05 Dec 2024 21:22:30 +0000
ROA not after: Thu 04 Dec 2025 21:27:30 +0000
asID: 27688
IP address blocks: 200.159.128.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d9:22:a9:80:be:e3:aa:66:41:7d:a5:13:f8:ee:bb:68:ca:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Validity
Not Before: Dec 5 21:22:30 2024 GMT
Not After : Dec 4 21:27:30 2025 GMT
Subject: CN=D1B712320EC0C52E0BAF5D1953E91802917B2F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:17:b0:47:a3:12:a1:e8:51:84:01:d6:60:
38:8e:56:2a:18:e4:90:4f:47:d8:1c:c7:72:03:bb:
ac:e5:f7:ad:07:59:36:10:89:61:a4:e0:b7:78:50:
17:e9:59:32:9f:a7:4d:5b:52:e5:f3:9c:d1:af:63:
b0:52:1d:6f:fc:22:0a:58:77:aa:20:cd:62:11:61:
52:3e:64:2e:38:00:81:a9:ab:f3:27:55:6f:10:8a:
ee:6f:4a:8e:ed:64:e6:3a:be:c3:d3:5e:f4:26:da:
36:73:6d:bc:26:0b:a5:01:4e:b0:a6:cf:a7:56:14:
50:da:5d:2a:1f:60:61:a2:a8:dc:bf:3a:de:d3:fa:
b0:16:9f:29:1d:69:85:09:17:c8:f7:3f:cf:a4:00:
ae:70:d4:a7:1d:34:bd:0a:15:99:da:cc:ab:b5:e6:
7f:b1:55:17:63:c4:1f:a5:a3:04:70:a2:48:c5:93:
99:b8:03:85:e8:1f:7d:d1:fe:c9:8c:6a:8d:14:56:
40:a9:62:17:58:8b:20:a0:d0:8d:6b:0f:58:73:f7:
6c:71:dd:b9:58:71:d6:a3:94:0a:98:bc:d0:32:45:
5a:b9:d8:53:46:b8:80:bb:f0:9a:65:93:84:14:67:
03:d4:be:fc:91:cb:4d:68:a2:cc:fe:21:65:3c:bf:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:12:32:0E:C0:C5:2E:0B:AF:5D:19:53:E9:18:02:91:7B:2F:16
X509v3 Authority Key Identifier:
keyid:BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.128.0/19
Signature Algorithm: sha256WithRSAEncryption
47:0a:fe:1c:cc:ac:27:9d:9f:0e:63:cb:65:ba:50:3a:f3:b4:
92:77:ff:83:39:01:98:54:8a:28:69:ca:a5:3c:48:43:9e:a2:
c4:a5:26:b3:f0:cb:60:d8:12:b7:42:a3:a4:3a:a2:c5:dc:77:
0a:72:ee:b5:f9:1e:48:64:97:27:e8:3d:c0:68:fa:1e:b0:82:
c7:e8:21:6a:fc:ac:1d:b5:c8:d9:a8:40:73:28:b6:d7:56:ab:
dc:bf:e6:1f:04:00:56:ce:dc:ce:41:cb:7e:67:49:cf:40:89:
00:05:ad:ca:ad:d2:00:cd:cc:81:5e:ea:f0:e6:2f:be:8c:c6:
98:34:58:5c:3a:07:97:50:6e:8d:7d:c7:66:fb:d3:dc:21:6d:
43:b8:83:4c:8a:20:94:1a:f0:5c:4c:27:1d:12:de:7c:61:18:
04:e5:99:9f:ea:0d:38:1c:87:ec:6f:6d:e8:29:8b:d1:89:a8:
6b:a9:8c:33:e5:aa:14:3f:1f:de:05:4b:42:6e:e0:ec:a6:4a:
2b:02:0e:ca:df:1c:35:8d:45:22:01:e6:ea:71:a4:87:52:23:
40:7b:3b:5b:3e:4b:50:e7:1f:14:46:28:f0:82:16:45:71:79:
54:1a:b6:eb:02:d3:3f:72:29:bc:39:ac:68:99:8f:1e:65:6b:
67:70:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:53:20 2025 by rpki-client