Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa
File: 3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier: R1aodrUI8nxCNN7HQAjQZ5TlwnlkAvyaHg/H1jxbg9U=
Subject key identifier: 75:8C:63:5B:D5:E3:EB:86:90:AB:B3:90:51:42:A2:60:E9:D5:82:6D
Certificate issuer: /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial: 402B0DC633C792A8DB65CFC5BA88297CDBA275C5
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa
Signing time: Wed 12 Jul 2023 20:59:15 +0000
ROA not before: Wed 12 Jul 2023 20:54:15 +0000
ROA not after: Wed 10 Jul 2024 20:59:15 +0000
asID: 263880
IP address blocks: 200.215.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2b:0d:c6:33:c7:92:a8:db:65:cf:c5:ba:88:29:7c:db:a2:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Validity
Not Before: Jul 12 20:54:15 2023 GMT
Not After : Jul 10 20:59:15 2024 GMT
Subject: CN=758C635BD5E3EB8690ABB3905142A260E9D5826D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:53:6a:d7:be:b0:41:de:fc:13:fa:0c:60:
4e:4e:cc:c0:bf:a1:ca:5a:ff:5f:39:ba:35:bc:f1:
04:17:58:cc:9a:79:dd:a9:97:07:e2:9c:1e:95:dd:
4c:62:28:3b:b1:fe:ce:5c:bf:04:f8:7e:35:d6:86:
75:65:70:36:7e:94:19:63:72:08:36:5a:1b:65:c3:
09:04:77:09:f5:90:f6:59:2b:25:a7:4f:00:9c:53:
6f:45:6a:21:db:d6:2d:f0:2a:29:9e:8a:47:c2:e7:
2c:49:6d:d7:5d:0f:39:e7:c3:c9:fc:7b:1a:91:6e:
e4:f6:60:f6:56:ca:0a:89:69:37:9e:29:f6:0b:c6:
d6:39:bf:31:28:66:6d:57:cd:bf:8f:a1:2d:7b:50:
54:8d:be:c1:a5:85:5e:14:1b:35:2e:2f:e3:46:b7:
ed:48:ae:84:f8:9a:08:aa:75:06:a8:6c:ec:c0:d0:
6b:aa:7a:1d:61:47:15:1d:33:97:cf:d6:a6:7b:7c:
ac:2b:4c:bd:51:cc:11:01:0f:a3:c4:c3:cf:d5:9e:
29:47:60:a7:54:37:3a:6b:22:ef:38:5c:bd:c0:96:
e1:62:6d:eb:8c:9c:33:f3:84:8e:d1:d5:75:17:b9:
89:69:54:be:66:94:60:3a:22:2e:53:b7:1a:9c:80:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:63:5B:D5:E3:EB:86:90:AB:B3:90:51:42:A2:60:E9:D5:82:6D
X509v3 Authority Key Identifier:
keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:2d:af:73:7b:f6:8c:84:1b:ab:ea:72:dc:ae:6f:56:67:2f:
cd:b7:b5:1f:c9:3f:f0:9f:c1:dc:00:23:79:c3:34:06:5d:24:
1a:7b:1e:a6:46:94:39:17:e4:c0:85:e7:26:27:dd:b0:a3:30:
d5:9e:b9:85:07:36:63:10:af:84:e9:06:b0:d1:aa:13:a8:ae:
da:55:a4:af:87:1b:d4:f5:13:a2:a1:35:55:fd:17:4d:26:d2:
5c:58:b5:89:7e:3e:62:ca:55:62:81:ad:8a:bf:45:ba:e2:e8:
39:71:bc:32:03:df:8e:e9:81:b4:00:57:ee:85:45:45:1f:99:
84:ad:c9:ef:c1:25:82:25:ed:ad:72:19:5d:34:4e:90:2d:89:
31:28:ca:ca:73:f0:ac:8f:3f:69:54:f5:e3:ae:8c:55:c4:cd:
6f:48:ce:ac:2f:eb:d3:3e:b1:59:c2:48:cd:60:1f:3a:46:54:
b5:32:91:98:c4:27:97:ea:0c:f8:08:5d:f1:69:da:1c:b9:8c:
c7:02:c3:a7:63:a5:4f:78:64:4a:86:be:ca:96:d5:59:94:ef:
5d:b7:55:a7:2a:b1:49:7c:bf:e8:26:8b:19:15:34:b0:9b:16:
50:c6:6f:21:c1:43:c9:52:7e:75:89:86:4b:b5:c4:1c:4c:d4:
2b:e6:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:37:04 2025 by rpki-client