Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
File: 3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (raw, json)
Hash identifier: amnmfn2/lMKCh7Kl+GlEk8dTLAe/ObrWGr1dPWGiiqg=
Subject key identifier: BF:84:2F:8E:99:6A:F5:D6:D6:60:4D:0F:EB:80:23:CC:8A:E3:14:41
Certificate issuer: /CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Certificate serial: 658367AA8D6549372027CAA3851C4559450B7783
Authority key identifier: D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
Signing time: Thu 06 Mar 2025 11:52:21 +0000
ROA not before: Thu 06 Mar 2025 11:47:21 +0000
ROA not after: Thu 05 Mar 2026 11:52:21 +0000
asID: 272435
IP address blocks: 201.216.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:83:67:aa:8d:65:49:37:20:27:ca:a3:85:1c:45:59:45:0b:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Validity
Not Before: Mar 6 11:47:21 2025 GMT
Not After : Mar 5 11:52:21 2026 GMT
Subject: CN=BF842F8E996AF5D6D6604D0FEB8023CC8AE31441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:03:4b:ba:17:cd:e0:70:e3:f3:88:db:34:
08:e4:82:d7:e0:01:fb:dc:e0:51:08:b1:44:dd:65:
91:4c:50:86:d1:f0:4c:02:60:6d:56:2e:c4:0b:00:
7a:cb:d1:53:f0:49:f8:3e:c2:27:ea:38:3a:fd:89:
8a:01:35:1d:ef:f1:31:27:f6:98:51:26:7b:83:f0:
26:03:45:89:51:07:c1:99:04:dd:32:ed:cc:16:80:
c6:0d:42:bf:5f:8e:dc:e1:40:bf:63:87:fe:ee:61:
a4:86:cc:91:47:9f:d6:b6:1e:2b:84:84:6a:7e:b7:
fc:ab:35:0a:da:26:2c:8d:f7:18:d9:bb:56:28:7c:
56:a4:16:19:84:76:f2:cd:5e:a4:3b:3b:18:05:2e:
3d:b8:98:4a:44:6c:54:2b:48:83:f4:39:f5:0d:c2:
c6:ce:a0:2b:d0:8d:17:7c:bf:1d:53:b2:87:fc:7f:
e2:f6:f5:a1:8d:30:be:9f:89:a3:a9:36:ad:5f:36:
c3:95:57:db:b0:91:d7:c1:ab:d3:98:a4:6f:ac:6d:
04:99:fb:be:f3:8d:2a:77:b0:0a:a9:53:e8:f4:04:
61:b4:8a:9d:57:27:7a:94:8a:ca:0d:12:e1:2d:10:
0c:7d:85:aa:7f:87:da:f5:d7:7b:3c:f9:e3:8f:84:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:2F:8E:99:6A:F5:D6:D6:60:4D:0F:EB:80:23:CC:8A:E3:14:41
X509v3 Authority Key Identifier:
keyid:D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.68.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:92:b7:3e:ad:88:63:78:64:ea:2c:ff:e3:6e:26:1e:a0:7d:
d1:7c:ed:44:0f:32:2b:3d:89:a6:aa:39:b0:1e:c5:18:03:d4:
0f:82:ba:3c:07:4d:66:7c:23:28:0c:13:8d:91:c3:f5:cf:b1:
1b:0e:a2:54:72:03:9b:5a:9e:4b:ef:8b:07:83:22:2e:3f:7a:
5a:7d:81:78:e9:f0:55:a0:94:ef:55:88:83:5c:3c:50:8f:fa:
54:b2:29:bf:79:29:8d:88:1b:73:40:ed:b6:f9:61:3c:86:62:
38:87:d2:96:dd:d0:be:49:89:be:1b:13:1a:da:41:47:f1:48:
10:3c:ee:00:06:1a:5a:29:30:be:3d:60:48:ee:37:6d:9e:94:
2e:89:c0:bb:ba:eb:91:6d:cf:08:66:16:17:f5:43:f0:4f:3a:
b2:5d:d1:b0:43:ca:aa:1f:ef:39:a7:ca:6b:3d:97:52:84:e9:
29:2b:06:59:ce:e6:64:92:d6:0f:08:b7:8f:97:e9:16:af:2c:
dd:16:0e:70:e9:e2:95:9f:db:67:ba:1d:00:b6:4e:d1:f2:80:
61:91:fa:b5:5c:6e:9a:d4:cc:1a:17:ec:87:c1:a6:4d:d1:a1:
d0:e8:d0:77:fc:6a:c4:10:c4:9e:6f:ef:52:a3:99:da:c8:c4:
18:a6:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:38 2025 by rpki-client