Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32342d3234203d3e20323730343431.roa
File: 3230302e31342e35362e302f32342d3234203d3e20323730343431.roa (raw, json)
Hash identifier: GWgkfUWBKbuhgIyKtofWVzbZCU4suYEOhyKe5fzXz/I=
Subject key identifier: D9:02:16:2D:C1:51:DB:76:5E:99:F0:3F:F8:4F:00:AD:59:A1:1F:27
Certificate issuer: /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial: 41C09D6BE377363089A3F191BF8E1692427F14BB
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32342d3234203d3e20323730343431.roa
Signing time: Tue 03 Dec 2024 14:13:52 +0000
ROA not before: Tue 03 Dec 2024 14:08:52 +0000
ROA not after: Tue 02 Dec 2025 14:13:52 +0000
asID: 270441
IP address blocks: 200.14.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c0:9d:6b:e3:77:36:30:89:a3:f1:91:bf:8e:16:92:42:7f:14:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Validity
Not Before: Dec 3 14:08:52 2024 GMT
Not After : Dec 2 14:13:52 2025 GMT
Subject: CN=D902162DC151DB765E99F03FF84F00AD59A11F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:d5:63:b2:dd:ef:7f:4c:f6:66:6c:82:4d:
30:ec:04:b8:71:8c:38:d5:ac:8a:a0:5f:dd:5c:99:
be:d2:70:c7:43:93:48:d1:f5:e6:92:7f:90:88:ab:
1e:bc:30:11:e2:ef:f4:bd:e4:49:16:10:20:35:5f:
2c:82:9e:a3:9a:9a:04:9a:c0:c4:40:44:03:b7:85:
13:25:db:34:bf:11:42:5d:60:0c:26:35:12:f6:de:
95:96:81:13:49:4b:45:6f:99:b5:1f:cb:90:17:40:
a8:d4:3d:1c:cd:4c:51:ad:e7:51:de:bc:a6:c9:89:
86:ac:46:4d:3a:29:8e:3f:ed:c8:ab:2a:1e:02:0b:
75:25:eb:77:d3:25:b8:7b:ef:42:cb:0b:9c:15:5e:
e1:aa:28:4a:9a:62:a0:66:ce:92:11:9f:6b:f3:4f:
c1:fe:63:de:e9:e5:af:2d:4b:bd:72:dd:ad:bc:ae:
f8:d5:4e:8e:ed:9d:dd:2b:f3:b3:54:ee:1f:28:08:
c5:ad:19:5a:fc:8a:90:70:ae:5b:6d:b1:81:0d:7e:
1b:fa:ba:25:53:92:ba:73:07:d0:e3:46:1d:49:77:
7e:9d:ba:c3:5a:06:a2:6c:4c:77:98:2e:e8:13:70:
2d:78:c3:1e:66:72:a8:c0:36:0c:3d:54:de:48:e4:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:16:2D:C1:51:DB:76:5E:99:F0:3F:F8:4F:00:AD:59:A1:1F:27
X509v3 Authority Key Identifier:
keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32342d3234203d3e20323730343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.56.0/24
Signature Algorithm: sha256WithRSAEncryption
29:da:31:d2:43:1d:59:5e:81:dd:89:fe:bb:64:f1:34:af:7b:
14:44:34:74:0b:47:98:e5:41:ff:4e:92:4b:04:e2:ec:30:86:
eb:4d:a9:d9:1f:2c:11:1e:75:b7:cf:b2:68:de:84:90:51:20:
b2:76:52:11:48:45:30:e6:cc:1d:08:f5:dd:27:17:d3:da:45:
ef:95:a2:d4:d4:b5:dd:4b:95:4c:47:49:1b:1d:9f:3f:1d:49:
31:f4:16:66:47:72:cd:40:4f:00:ad:2b:bd:58:51:ff:a8:c5:
6a:d9:a0:02:c6:d7:46:1e:57:4e:90:c6:e3:97:27:61:5b:01:
66:e4:18:d3:c6:3b:15:04:aa:e6:b0:d4:d9:b8:12:0d:28:4a:
73:31:b7:6d:0a:c7:d2:71:32:b5:fd:86:75:45:0c:a3:b9:6f:
aa:a2:04:da:ad:ed:dc:77:e6:6a:57:8b:6a:5a:01:19:58:17:
14:50:b2:ae:9b:7f:ec:82:c0:04:61:70:d1:01:af:d2:cd:c7:
b3:62:ac:e4:54:05:dd:a7:12:d7:77:03:13:37:b0:df:58:5b:
e5:13:e2:32:8c:14:8f:79:0b:cc:e4:60:c1:f4:05:66:ff:2c:
d3:6f:5d:4f:cc:5b:e3:df:80:68:b2:e3:ac:fe:35:88:0e:52:
b9:0d:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:03 2025 by rpki-client