Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
File: 3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: axBPYbuFTkkOvFGJGxbZGNtV2ofQf29Z5P29pEKlNVc=
Subject key identifier: 3F:02:55:7E:45:15:BE:A1:E1:96:A7:DC:BA:1F:91:97:53:37:E4:A5
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 5A41849127E7D75B661D21831DCD1658E1BAE937
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:22:10 +0000
ROA not before: Mon 01 Jul 2024 19:17:10 +0000
ROA not after: Mon 30 Jun 2025 19:22:10 +0000
asID: 28165
IP address blocks: 200.229.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:41:84:91:27:e7:d7:5b:66:1d:21:83:1d:cd:16:58:e1:ba:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:17:10 2024 GMT
Not After : Jun 30 19:22:10 2025 GMT
Subject: CN=3F02557E4515BEA1E196A7DCBA1F91975337E4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:19:3a:9e:45:e5:53:54:ab:96:a4:c3:ad:
5a:12:0e:36:1c:9e:44:6a:89:f5:ab:4d:df:9b:bc:
ca:6d:79:ff:30:ba:45:00:c9:c2:28:64:dd:d4:bf:
89:88:be:8a:7d:71:93:8f:58:f0:db:70:38:e6:b5:
33:0b:53:47:8f:27:3f:51:05:9b:8b:1d:4d:e7:99:
ff:a6:8a:0b:a4:c9:f7:73:60:ba:92:ee:30:da:e0:
9e:2a:10:21:54:b0:fc:a1:2d:9a:0b:d1:f0:c1:2c:
c7:9a:f5:d7:38:77:40:12:7a:98:09:44:49:2b:b4:
71:9a:42:52:19:59:ec:2f:fb:31:db:81:75:54:b5:
4a:ee:78:30:0f:63:88:8b:10:58:7c:2a:13:8e:32:
ed:36:2b:5e:e9:b3:42:6d:0c:70:c8:a2:b8:33:32:
17:87:41:fa:f0:cb:7c:ca:a5:6d:f3:03:66:bd:98:
82:45:ee:42:cc:c8:39:10:d7:4f:6e:c6:26:86:d1:
ad:81:2d:c7:25:a1:b8:57:e1:76:ba:8c:93:1c:ff:
e1:06:aa:e9:87:b9:c1:98:ba:66:0e:70:70:55:b6:
17:8d:89:b1:a0:c0:85:e3:81:31:65:5e:6e:26:76:
d9:e0:cd:16:c8:6f:bc:bc:f8:da:8e:dc:40:e4:1e:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:55:7E:45:15:BE:A1:E1:96:A7:DC:BA:1F:91:97:53:37:E4:A5
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.228.0/22
Signature Algorithm: sha256WithRSAEncryption
39:22:51:7f:55:b5:f6:2e:0d:d9:b8:f2:80:fd:64:3a:45:6d:
4d:35:6e:d7:63:08:47:21:08:d8:46:21:bc:d1:be:b9:28:ed:
72:f6:e1:ea:30:ae:6b:54:36:95:6f:04:c1:11:e0:10:ac:2e:
f1:f6:ec:89:fc:f9:82:0f:51:ed:33:48:9d:64:44:e9:78:3e:
f8:34:57:bf:05:de:de:83:26:c9:b1:42:33:39:29:86:ca:86:
10:f7:fa:61:6b:ee:00:bb:07:2d:f9:5c:f4:2c:2b:73:6c:38:
0c:51:26:b7:27:d3:e3:c4:20:1e:52:7d:ae:60:18:29:ef:eb:
8a:70:a9:6a:25:71:cb:ac:c9:42:2e:12:94:22:40:be:af:4c:
6b:35:fa:a0:67:35:91:78:3e:99:bf:a9:e1:a5:8c:48:af:5e:
61:2c:67:c8:ef:95:9c:d2:86:43:f9:85:47:cf:14:2f:93:55:
98:57:54:9d:62:9d:e8:b1:56:22:7c:f7:ef:d2:22:27:f1:d9:
6b:47:fc:33:b1:2c:34:4b:d9:b0:43:e4:5b:08:a5:92:67:ba:
53:22:73:9f:05:19:f2:53:bf:8d:12:1f:35:a7:ce:9e:43:d1:
fa:49:c7:de:4c:30:93:03:43:cb:6b:30:07:ed:05:d6:9b:4e:
d8:14:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:36 2025 by rpki-client