Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa
File: 3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa (raw, json)
Hash identifier: z8fBrUqHK6eW16OfDfPi2Fhk9WgKD/IRSGOhinub0QU=
Subject key identifier: 94:81:AF:0A:76:20:31:C3:52:EE:43:E5:51:2E:77:D4:20:D0:8B:95
Certificate issuer: /CN=49172F1453C1D7F097787278D48BCC2D5FD3A3D5
Certificate serial: 23755D7729F8E24CA6B945E167BE43432432CCFC
Authority key identifier: 49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa
Signing time: Fri 21 Feb 2025 19:59:03 +0000
ROA not before: Fri 21 Feb 2025 19:54:03 +0000
ROA not after: Fri 20 Feb 2026 19:59:03 +0000
asID: 270248
IP address blocks: 200.107.116.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:75:5d:77:29:f8:e2:4c:a6:b9:45:e1:67:be:43:43:24:32:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49172F1453C1D7F097787278D48BCC2D5FD3A3D5
Validity
Not Before: Feb 21 19:54:03 2025 GMT
Not After : Feb 20 19:59:03 2026 GMT
Subject: CN=9481AF0A762031C352EE43E5512E77D420D08B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:50:5b:4e:93:54:2e:d8:2e:d4:10:91:96:
5b:e0:99:b7:e4:eb:99:3e:06:4e:06:97:00:05:f2:
55:a6:73:0f:b5:0a:36:54:cb:40:c2:44:47:46:64:
15:4a:c8:37:10:a3:f1:ab:a0:c0:c9:9c:ae:4c:72:
a7:bc:91:84:48:94:af:a2:85:60:cc:6b:6b:04:3a:
f1:ee:b6:9e:7f:17:5e:52:ab:0b:75:2b:49:e9:d8:
b1:4d:44:78:7c:a6:ed:82:0f:2d:8b:b3:8d:f6:0c:
c7:1a:67:98:f5:01:65:87:73:d8:4e:a7:ef:ee:7a:
cb:cf:60:c5:a4:2c:9b:49:2d:c1:ce:86:37:d2:6b:
2b:75:25:4e:56:9e:21:b4:01:5c:3b:9c:ce:9e:e5:
49:0a:91:ec:f6:6c:be:e7:9c:01:84:f5:e7:d5:fa:
a1:af:4f:07:92:bf:a6:f8:44:4c:9d:85:b0:be:27:
ef:eb:e1:8c:38:13:18:b3:f2:71:9d:ac:b2:7c:b7:
ff:8c:e4:94:84:f4:f0:32:af:c8:d0:a5:5c:0f:37:
59:2c:ab:9c:d2:df:94:7a:c0:be:18:e1:4f:01:4c:
f7:86:d1:8c:fb:d8:9e:1b:b7:00:eb:2d:18:72:e7:
b0:5a:ff:1e:a2:ad:2a:e2:03:0a:d3:aa:05:ec:72:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:AF:0A:76:20:31:C3:52:EE:43:E5:51:2E:77:D4:20:D0:8B:95
X509v3 Authority Key Identifier:
keyid:49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.116.0/22
Signature Algorithm: sha256WithRSAEncryption
82:c7:e5:24:ee:6e:ee:5e:af:6e:87:89:50:c8:be:e4:e0:29:
da:c8:e1:4e:f0:ac:40:98:4b:24:22:cb:36:21:e8:da:3e:a7:
e5:9c:19:45:d8:20:10:9a:bc:42:79:6a:a1:e3:26:f6:aa:30:
3e:e9:6e:79:a6:ee:94:8a:67:a2:49:48:a9:dd:12:ed:ac:ca:
d8:ca:3a:d2:fc:9d:07:18:a5:a2:48:13:cf:d1:3a:7f:b2:73:
a6:1c:90:88:c5:0e:15:29:37:d5:88:48:8f:b7:7a:b6:29:56:
00:b0:5c:7d:98:8a:74:82:63:de:a1:9f:a1:12:aa:94:63:a9:
52:5b:03:b6:d5:13:44:fb:5e:c8:57:4d:cf:98:97:5d:5b:e2:
75:33:12:49:45:fc:24:ba:ce:b0:33:fc:dd:24:2b:36:be:a6:
74:12:01:97:e1:81:fd:a8:89:75:a8:29:61:5f:56:30:26:14:
1a:d8:cd:86:69:ee:7b:66:9a:0c:14:15:4a:02:91:57:57:2e:
13:53:84:45:e9:18:dc:a5:8c:7d:21:32:79:a3:e6:85:7b:be:
66:1d:51:e9:6b:8b:b1:e3:4e:2b:31:5c:2f:5a:58:ce:17:04:
5c:ae:60:4b:35:03:67:a3:b1:d7:a4:61:28:b4:86:b9:e0:bf:
99:00:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:55:27 2025 by rpki-client