Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e38322e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: TT1y5g1UhigiVBAZNPxltwsDObrFzQRDIVNmkTyJ4Bw=
Subject key identifier: 62:FF:F5:FB:53:5F:D2:F6:89:1C:E8:4B:45:FF:35:55:D8:75:38:2B
Certificate issuer: /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial: 02408B20F36E99161C7B5C58DDC522A1DF3DFCE0
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa
Signing time: Mon 09 Jan 2023 22:49:00 +0000
ROA not before: Mon 09 Jan 2023 22:44:00 +0000
ROA not after: Mon 08 Jan 2024 22:49:00 +0000
asID: 22706
IP address blocks: 200.152.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:40:8b:20:f3:6e:99:16:1c:7b:5c:58:dd:c5:22:a1:df:3d:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Validity
Not Before: Jan 9 22:44:00 2023 GMT
Not After : Jan 8 22:49:00 2024 GMT
Subject: CN=62FFF5FB535FD2F6891CE84B45FF3555D875382B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:e8:31:42:78:f3:d0:f8:c1:57:48:23:f2:
eb:39:46:46:ea:81:11:89:dc:20:2c:4a:f3:33:d1:
62:14:6e:6a:71:1a:b5:20:5f:03:b5:d1:66:fe:fc:
9b:91:65:db:56:63:3f:35:30:c1:b7:a1:5a:2c:dc:
12:a7:60:62:18:46:6e:05:37:1c:06:f3:c1:25:40:
46:2d:20:ba:59:a7:23:07:1c:fc:83:fe:28:eb:d9:
a8:8e:2e:3f:2b:5a:33:86:41:af:0b:e0:11:72:96:
cf:9b:39:57:5e:af:f4:38:b4:42:48:6e:c7:b5:9a:
73:35:18:1e:f3:b2:29:a7:e6:f2:f3:bb:ed:78:7e:
c3:3e:1d:3e:dd:91:ac:f9:24:01:e2:0e:dd:d9:ed:
10:c8:57:c6:96:c1:93:03:87:7b:ac:bb:79:64:e8:
6b:f2:90:ad:88:fc:d9:06:47:b4:0c:5f:b8:98:b0:
26:53:72:ea:18:23:37:14:e1:27:7e:2b:19:7d:6c:
a6:54:0a:8f:b9:0b:20:8a:d7:e3:d6:f5:57:b8:a6:
60:a6:b0:ab:73:ea:3a:3e:61:99:bd:e2:9b:2f:b6:
cd:0f:7e:ab:4f:a3:c7:8c:02:a2:a0:bc:57:57:9f:
2c:f7:3d:92:ff:67:9f:23:54:0e:91:17:9f:88:1f:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:F5:FB:53:5F:D2:F6:89:1C:E8:4B:45:FF:35:55:D8:75:38:2B
X509v3 Authority Key Identifier:
keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ed:b9:87:6f:7b:7c:1a:e5:0c:77:e2:58:b7:44:11:a8:6d:
56:f8:63:32:a5:a0:c4:a3:66:d8:e5:6e:ef:98:a2:66:4c:11:
46:e8:86:42:88:c6:a0:2e:59:8b:80:cf:e1:f7:cf:72:6e:00:
17:f8:dd:70:4c:c6:72:55:0e:7b:9b:58:9e:89:1c:84:5d:87:
05:31:81:f8:b2:5c:91:5a:ad:0d:71:96:73:db:fe:35:d6:d5:
2d:27:ff:39:b0:c9:20:78:bd:ae:b2:86:cb:06:a1:fb:f2:44:
b3:7e:37:a1:fa:e7:b8:e5:e2:22:86:18:fc:e1:8e:3e:25:83:
c2:e9:2f:5c:76:a6:21:a5:09:e2:5c:64:f5:dc:20:e3:d3:f4:
cc:28:8d:d9:3b:53:4c:a1:4b:46:83:5f:7e:d8:b7:c3:2a:0d:
e1:ae:b6:d3:be:91:36:b2:3b:df:0d:b4:68:ab:47:49:cd:a5:
29:84:82:97:b2:c2:8b:71:89:a4:d1:c3:2c:13:35:ba:eb:fb:
31:95:0a:83:28:c3:58:c6:fd:18:e1:cb:79:96:a9:bd:1b:55:
2b:d4:29:c4:7d:bf:85:ab:e6:f6:4e:db:66:3b:a5:c4:00:4f:
79:74:a0:2a:b4:9f:78:3d:e5:ce:8a:e5:0b:ac:85:e3:d9:7c:
e7:2c:f8:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAkCLIPNumRYce1xY3cUiod89/OAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkyMjQ0MDBaFw0yNDAxMDgyMjQ5MDBaMDMxMTAvBgNV
BAMTKDYyRkZGNUZCNTM1RkQyRjY4OTFDRTg0QjQ1RkYzNTU1RDg3NTM4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutOgxQnjz0PjBV0gj8us5Rkbq
gRGJ3CAsSvMz0WIUbmpxGrUgXwO10Wb+/JuRZdtWYz81MMG3oVos3BKnYGIYRm4F
NxwG88ElQEYtILpZpyMHHPyD/ijr2aiOLj8rWjOGQa8L4BFyls+bOVder/Q4tEJI
bse1mnM1GB7zsimn5vLzu+14fsM+HT7dkaz5JAHiDt3Z7RDIV8aWwZMDh3usu3lk
6GvykK2I/NkGR7QMX7iYsCZTcuoYIzcU4Sd+Kxl9bKZUCo+5CyCK1+PW9Ve4pmCm
sKtz6jo+YZm94psvts0PfqtPo8eMAqKgvFdXnyz3PZL/Z58jVA6RF5+IH/ExAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYv/1+1Nf0vaJHOhLRf81Vdh1OCswHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyJhSMA0GCSqGSIb3DQEBCwUAA4IBAQCM7bmHb3t8
GuUMd+JYt0QRqG1W+GMypaDEo2bY5W7vmKJmTBFG6IZCiMagLlmLgM/h989ybgAX
+N1wTMZyVQ57m1ieiRyEXYcFMYH4slyRWq0NcZZz2/411tUtJ/85sMkgeL2usobL
BqH78kSzfjeh+ue45eIihhj84Y4+JYPC6S9cdqYhpQniXGT13CDj0/TMKI3ZO1NM
oUtGg19+2LfDKg3hrrbTvpE2sjvfDbRoq0dJzaUphIKXssKLcYmk0cMsEzW66/sx
lQqDKMNYxv0Y4ct5lqm9G1Ur1CnEfb+Fq+b2TttmO6XEAE95dKAqtJ94PeXOiuUL
rIXj2XznLPji
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:17 2025 by rpki-client