Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa
File: 3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier: 8nhpMYfUUxvdjMCp78b3pl05pfIFEbkpM2wcDec5FNU=
Subject key identifier: B8:B5:48:75:46:61:A1:CB:7E:E1:D0:F7:4E:E0:86:74:1E:DA:87:F4
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 61746FAFA89AD76E699EDE370B7433D2B59D9682
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:30:36 +0000
ROA not before: Wed 10 Jan 2024 17:25:36 +0000
ROA not after: Wed 08 Jan 2025 17:30:36 +0000
asID: 265303
IP address blocks: 200.150.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:74:6f:af:a8:9a:d7:6e:69:9e:de:37:0b:74:33:d2:b5:9d:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:25:36 2024 GMT
Not After : Jan 8 17:30:36 2025 GMT
Subject: CN=B8B548754661A1CB7EE1D0F74EE086741EDA87F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:59:a7:98:3b:da:49:50:c3:ac:13:9f:b9:
44:7b:58:81:76:fc:b8:25:83:4c:0a:6d:67:33:55:
20:21:e1:87:cd:6c:16:bd:ab:c4:4e:1b:9f:02:5c:
b3:c0:06:bd:9b:cf:d5:8e:30:34:db:bc:09:17:b5:
98:23:7c:b6:a7:64:df:5c:17:09:3f:89:56:15:cf:
bc:eb:33:dc:ba:c8:e5:cf:d9:e6:22:3d:9c:14:3b:
2c:50:8b:99:89:ed:0c:3f:cb:4f:f4:ff:55:75:6c:
d5:4e:a6:5f:d7:73:14:b7:f7:f1:b9:0a:ea:27:b0:
28:e6:18:93:6f:f6:80:f1:9d:e5:00:f2:0a:eb:97:
aa:72:30:3b:09:fe:8d:c0:68:f5:13:29:8f:f8:aa:
09:3a:db:04:df:02:54:1b:4e:cd:3f:ef:ae:50:a9:
19:4d:47:df:ea:d7:99:ec:9e:47:2d:f7:b2:65:4b:
d4:f0:3e:0f:b5:2a:5f:98:f2:5b:d4:89:35:8d:d3:
11:b9:c1:cd:22:21:1b:e2:92:91:00:8c:70:d5:a3:
b5:06:fb:d3:ce:ec:b8:e7:41:9b:0d:2e:e5:c9:05:
4d:de:3a:9a:2c:9e:f0:4e:68:7f:e4:eb:f9:9f:cb:
a7:d5:39:78:60:7e:4a:69:4b:c4:f4:c1:7e:e4:90:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:48:75:46:61:A1:CB:7E:E1:D0:F7:4E:E0:86:74:1E:DA:87:F4
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.164.0/23
Signature Algorithm: sha256WithRSAEncryption
16:87:87:cb:d9:fb:d8:c4:11:0a:58:38:cd:e8:79:0e:7e:c0:
26:5b:63:2b:b9:89:a7:db:f1:f8:a4:36:82:0d:33:13:b7:c8:
7e:2c:3c:a6:d7:87:47:0a:ad:e1:25:29:9e:03:a9:04:33:d4:
d3:3a:65:7a:6c:cc:4c:ae:4d:5a:5a:f2:15:ab:e0:b4:86:34:
83:26:00:8b:70:d0:f9:f9:37:f2:23:41:ed:5c:8d:92:a0:48:
e1:61:f6:21:54:5c:81:22:90:77:d2:14:5e:6a:e5:a1:9c:1c:
ed:b5:4d:47:81:23:e5:5c:de:20:89:78:08:74:80:24:65:78:
61:5a:f2:f2:6f:62:39:21:73:ec:22:6c:fe:10:60:c3:d2:ec:
ce:9f:6c:bb:a9:f6:ac:a1:2d:29:9d:dc:d0:6a:22:24:e8:d3:
e2:bb:1f:00:a6:a2:3c:0d:52:e5:c3:e3:ce:c9:f7:d2:e0:d4:
83:60:de:ce:3a:d8:ea:e6:c1:63:d2:47:7b:4d:16:98:a9:f2:
27:9c:3c:00:b7:a6:4b:46:7b:8c:1d:eb:ab:97:3b:b4:ff:30:
a5:70:49:b3:66:93:f1:94:3f:b2:af:4b:7f:a8:fa:41:ee:4b:
e2:9b:c6:1f:e0:e8:b4:a7:66:9b:be:e0:e0:c0:34:22:b7:05:
7e:62:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:30 2025 by rpki-client