Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
File: 3230302e392e3232302e302f32322d3234203d3e20323632343538.roa (raw, json)
Hash identifier: +W+uXyiSpes6HPymb2byLXNi5+8H+daN8GvOjtq9weY=
Subject key identifier: A4:1E:33:72:34:BE:99:72:FC:45:08:85:66:5E:E1:62:2A:06:E8:A0
Certificate issuer: /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial: 7250EEDFFD2937CB58C17E4D4E096FE044C32B2B
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
Signing time: Mon 20 Jan 2025 17:54:42 +0000
ROA not before: Mon 20 Jan 2025 17:49:42 +0000
ROA not after: Mon 19 Jan 2026 17:54:42 +0000
asID: 262458
IP address blocks: 200.9.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:50:ee:df:fd:29:37:cb:58:c1:7e:4d:4e:09:6f:e0:44:c3:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Validity
Not Before: Jan 20 17:49:42 2025 GMT
Not After : Jan 19 17:54:42 2026 GMT
Subject: CN=A41E337234BE9972FC450885665EE1622A06E8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:ab:a5:27:61:49:49:bd:cb:37:30:e4:ab:
b6:ff:20:d8:e2:97:de:0f:f7:3d:62:c6:0a:3d:da:
d1:13:06:11:e1:d6:d6:88:57:fb:5e:41:41:e9:7c:
06:ca:50:f5:86:45:b7:43:5f:0d:7b:d5:43:41:38:
f3:be:e8:c8:fb:ba:45:72:ec:de:5a:53:a8:5e:fc:
c8:9f:0e:4c:a4:94:34:ed:de:e6:ba:a0:30:d5:b4:
fe:5d:b2:78:c1:62:20:3b:83:e2:c2:13:e7:f0:33:
da:36:c4:2b:ec:6e:31:fa:45:81:53:ec:f6:d5:b1:
da:08:7b:01:41:67:46:e7:10:9d:0b:df:8c:13:8c:
00:ad:ce:da:16:80:c8:30:0f:1d:51:af:bb:be:2f:
53:f7:21:45:7d:0d:78:73:ca:aa:73:46:7b:f7:6c:
ff:07:5a:2d:d1:e7:75:07:35:51:2b:13:91:65:4b:
ff:52:a0:23:47:e7:84:3c:8b:75:30:42:60:6a:7b:
2a:6d:e8:84:be:74:28:1c:d0:4c:d8:a8:2a:71:cf:
4c:ce:52:97:33:57:dd:67:5a:50:4e:18:ef:d6:79:
47:1b:c7:1a:6e:37:ad:a5:24:f6:c9:4b:aa:6f:68:
ad:7a:35:87:16:9a:42:c1:47:35:a0:29:86:f5:f3:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:33:72:34:BE:99:72:FC:45:08:85:66:5E:E1:62:2A:06:E8:A0
X509v3 Authority Key Identifier:
keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d6:0e:31:34:4b:6e:ce:d5:b2:14:d5:62:e5:1d:73:b2:a9:
9a:27:f4:8c:7c:fc:50:fe:a6:9f:ed:3f:eb:46:b9:e5:e5:01:
80:df:9e:b4:1a:9c:bc:3d:8d:fd:5f:a2:d1:99:f7:43:ba:70:
16:74:bc:55:3f:21:27:df:18:93:6c:db:13:b4:9f:4a:45:5d:
19:e0:e0:06:99:66:82:96:18:9a:5b:43:10:c0:0e:76:f8:a2:
83:db:91:9b:55:a1:ff:f6:c4:df:f9:1d:c8:59:93:82:3c:4c:
42:ba:de:fc:1b:82:3f:eb:25:3f:51:d4:ce:72:86:f3:d5:e4:
01:90:41:e6:72:b7:98:e5:d0:31:6f:43:bc:44:93:3b:5d:62:
f4:25:c8:c5:9c:f1:7d:8d:80:74:87:6b:d8:7b:12:02:a1:69:
65:77:2a:20:2a:61:04:1f:73:fd:d2:13:7d:7e:d2:ff:45:6c:
e9:63:90:c9:21:47:8b:7d:e7:a3:f9:5f:b6:9a:67:31:e8:69:
14:a0:6e:83:75:2c:07:09:06:73:50:83:09:25:ff:e7:cb:e1:
be:e5:f3:44:74:80:1d:e6:f4:51:76:29:50:8a:f3:70:34:43:
27:34:83:4f:b1:ac:f8:b1:18:b1:52:be:c3:91:99:2f:b5:be:
9f:17:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:42 2025 by rpki-client