Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39352e302f32342d3234203d3e20323730343336.roa
File: 3230302e362e39352e302f32342d3234203d3e20323730343336.roa (raw, json)
Hash identifier: Nkz6zWoAZhhy4w/EKqaISu6PPvP1m/SfCNHFwjtq9lw=
Subject key identifier: 5C:4A:4A:38:D2:0F:7F:9D:BD:E5:36:B9:E5:5B:E2:19:2B:11:F0:4E
Certificate issuer: /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial: 16F00E89EA9BC7B213C67F001704DD1B3CA8465D
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39352e302f32342d3234203d3e20323730343336.roa
Signing time: Tue 11 Mar 2025 19:56:51 +0000
ROA not before: Tue 11 Mar 2025 19:51:51 +0000
ROA not after: Tue 10 Mar 2026 19:56:51 +0000
asID: 270436
IP address blocks: 200.6.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f0:0e:89:ea:9b:c7:b2:13:c6:7f:00:17:04:dd:1b:3c:a8:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Validity
Not Before: Mar 11 19:51:51 2025 GMT
Not After : Mar 10 19:56:51 2026 GMT
Subject: CN=5C4A4A38D20F7F9DBDE536B9E55BE2192B11F04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:d2:4d:21:72:ba:23:5a:52:c3:a5:0e:fc:
eb:bc:10:46:1a:cd:16:d1:9d:6c:7d:8c:62:50:7f:
37:06:a4:8e:78:58:15:b9:d2:03:7c:a6:3b:2b:f0:
67:73:35:a7:74:d4:21:e9:d7:76:ab:4e:7e:68:d4:
44:84:3a:a0:7b:60:ef:f2:15:51:ce:44:e3:6d:91:
51:06:18:3d:80:2f:bc:f8:c2:4b:34:8c:6f:ec:7c:
6f:83:d8:dd:38:50:be:53:55:b6:79:32:6a:66:b7:
d2:9f:48:b3:23:bc:3d:9f:dd:11:c4:f1:09:d6:2d:
57:36:cb:a0:2e:e0:ed:84:6d:0b:49:b3:99:b2:21:
f0:1a:72:04:55:13:ad:a9:b9:59:de:29:e1:58:ff:
fe:9a:b7:52:c8:70:18:1f:6c:ca:04:64:be:48:55:
6f:37:88:8c:04:6d:f3:01:3b:1a:db:b0:13:f5:4d:
53:6d:16:7b:ac:49:3f:af:ea:e7:83:be:9e:97:83:
d4:49:1f:7d:b5:5d:a0:14:b9:80:78:c6:31:2a:38:
6a:cd:9e:13:45:d8:4f:0b:ec:95:65:8c:ba:32:57:
bb:b7:68:1b:e2:4f:60:7b:47:9c:ba:f4:c7:5d:07:
6f:a8:cf:70:8a:38:85:9e:e4:59:21:97:1b:52:20:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:4A:38:D2:0F:7F:9D:BD:E5:36:B9:E5:5B:E2:19:2B:11:F0:4E
X509v3 Authority Key Identifier:
keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39352e302f32342d3234203d3e20323730343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e7:9f:8c:3b:6d:4f:75:05:06:2c:62:71:e9:a3:f4:23:6f:
04:41:6d:69:6c:8b:b2:4f:80:6e:5f:18:00:4b:68:77:7b:12:
2b:91:f9:d9:bc:e7:a2:62:6d:2b:ff:33:2d:b7:0e:bd:0e:b0:
69:4a:02:ec:73:6d:00:bd:4a:c5:64:bf:2b:61:13:65:dc:6b:
64:fc:fd:9e:52:70:41:c5:a5:06:80:d4:73:33:ba:d2:d6:6e:
ba:78:c5:db:bd:f5:95:5e:03:2e:dd:3d:e8:77:47:37:1f:c6:
4b:72:4c:22:10:cd:50:e5:ed:bd:a9:db:c3:b6:1f:45:75:62:
e9:98:31:40:7f:88:5f:73:1e:17:09:16:1f:3d:7f:3a:fe:da:
2c:32:cd:45:4f:8c:80:7c:04:59:02:41:f5:fb:7f:3a:78:c0:
5c:2c:d1:77:9d:88:96:3d:d6:1c:d5:75:95:29:1f:7d:09:94:
e2:f8:65:a2:98:5c:3c:68:52:c1:86:01:e7:15:71:cc:74:7f:
cd:87:b6:ff:7f:72:f7:f0:64:d9:c0:7f:5b:3a:ac:76:8c:8e:
a2:08:51:e8:44:ab:cc:02:9e:39:00:f8:31:d3:7f:a8:29:9a:
6b:3c:3e:8a:84:a0:cd:e0:09:31:bb:62:c2:e5:7f:6f:f6:e6:
05:e1:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:58:02 2025 by rpki-client