Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
File: 3230302e35332e36352e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier: 3N1yDBkV+jrfwkNNLSOK8kotXXsE90dBhNvsGfHOKNk=
Subject key identifier: 95:A7:5A:00:8D:FA:63:95:52:CA:33:03:2C:E3:0E:A8:A8:2B:20:DE
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 7449693DEAB8E3A4A00B997B1EE8B0633D5A2A29
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:32 +0000
ROA not before: Tue 21 Jan 2025 20:39:32 +0000
ROA not after: Tue 20 Jan 2026 20:44:32 +0000
asID: 271504
IP address blocks: 200.53.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:49:69:3d:ea:b8:e3:a4:a0:0b:99:7b:1e:e8:b0:63:3d:5a:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:32 2025 GMT
Not After : Jan 20 20:44:32 2026 GMT
Subject: CN=95A75A008DFA639552CA33032CE30EA8A82B20DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:9e:6d:c6:6f:d6:00:cf:ee:30:2f:95:d0:
35:49:8f:95:d3:f9:32:82:e5:2b:b8:6f:46:b2:ca:
7c:be:52:f8:68:e0:89:86:69:11:9a:c4:43:21:c7:
64:d4:09:67:0a:8f:76:28:a7:d5:19:34:6d:69:3b:
11:89:7a:40:d5:02:69:77:78:e6:29:29:7a:3a:a8:
5a:ab:13:52:31:1e:fb:d1:f0:93:b2:5b:45:73:58:
8e:18:03:f0:f8:58:f0:09:dd:dc:37:66:4e:69:f0:
e1:ef:25:4f:cc:3e:11:8d:44:0e:f1:62:87:64:55:
99:ba:f5:f9:93:8f:4a:81:38:7d:98:5c:f4:84:93:
51:da:1c:36:36:8a:b4:d0:25:af:12:7c:99:8a:b0:
8c:8c:0d:63:9b:57:66:15:2b:f5:38:12:06:cb:76:
23:19:82:d6:14:73:04:25:8f:e6:9e:f1:ee:30:42:
5f:b3:25:47:66:5a:51:0f:13:84:fd:0e:7b:db:4d:
52:ef:48:f3:b2:8b:e3:5c:fe:7e:a0:4b:cb:e9:96:
b6:4c:5f:86:3b:4f:79:7d:4b:cc:6a:84:bb:39:40:
99:96:32:7d:c9:39:9d:c6:fc:91:73:3e:4a:49:e7:
54:e6:b0:8e:25:e2:12:ea:48:b4:e3:20:fd:cb:bb:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:5A:00:8D:FA:63:95:52:CA:33:03:2C:E3:0E:A8:A8:2B:20:DE
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b2:af:b8:9c:76:3a:4f:75:cf:45:85:7e:90:3b:48:d0:fb:
12:93:10:8c:83:89:d7:97:ac:41:60:eb:3c:f0:9b:ff:63:ce:
32:8f:2e:d0:04:8f:0f:94:9f:02:ac:33:72:4e:15:e8:60:71:
bb:31:00:a4:ac:4d:6a:ab:b8:94:47:4a:47:e3:31:a3:19:3f:
22:5c:60:79:0a:b3:0d:8f:50:f7:b7:ad:7d:f8:e9:b5:46:30:
7d:fe:44:e9:b4:35:0d:12:0b:d2:16:3b:a8:dd:d4:44:e1:15:
6e:8b:49:08:2e:87:7b:95:24:d1:dd:da:85:ac:92:8f:6a:15:
a3:53:04:91:83:ba:fe:03:38:67:0f:07:92:ed:80:2d:bd:b5:
e3:fb:7e:4d:fc:67:b3:9a:91:f5:39:9c:32:e6:6f:b0:f7:40:
fc:aa:78:ef:de:f7:f7:91:3f:f0:cc:86:05:24:d7:bd:11:c5:
ec:5c:e4:a4:86:62:a1:68:24:1a:17:ad:ca:f1:3c:e5:52:69:
13:99:3b:19:9a:15:a5:fe:2a:20:a7:00:a7:fd:40:11:7c:64:
77:d2:b7:6e:15:77:89:1e:4c:10:d0:6f:49:e9:ca:38:f4:39:
e0:a2:71:6c:3f:24:7e:f2:8b:a0:db:87:f4:13:0c:8f:b8:f9:
34:05:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:28 2025 by rpki-client