Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32332d3332203d3e20323731303232.roa
File: 3230302e34392e32342e302f32332d3332203d3e20323731303232.roa (raw, json)
Hash identifier: OQO0PsCPAcHjy5+cMx3XhR4L8v+8bNNWJG7c6FUsWiM=
Subject key identifier: 43:AC:3D:45:78:02:DA:77:80:31:D3:EE:B8:25:57:02:D8:8E:16:FB
Certificate issuer: /CN=90B94A2532C6C0783CF4EEE63413FBA6605C4412
Certificate serial: 272725941F107E16336A92E5DAE28B82444E6463
Authority key identifier: 90:B9:4A:25:32:C6:C0:78:3C:F4:EE:E6:34:13:FB:A6:60:5C:44:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B94A2532C6C0783CF4EEE63413FBA6605C4412.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32332d3332203d3e20323731303232.roa
Signing time: Mon 10 Feb 2025 18:07:33 +0000
ROA not before: Mon 10 Feb 2025 18:02:33 +0000
ROA not after: Mon 09 Feb 2026 18:07:33 +0000
asID: 271022
IP address blocks: 200.49.24.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:27:25:94:1f:10:7e:16:33:6a:92:e5:da:e2:8b:82:44:4e:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B94A2532C6C0783CF4EEE63413FBA6605C4412
Validity
Not Before: Feb 10 18:02:33 2025 GMT
Not After : Feb 9 18:07:33 2026 GMT
Subject: CN=43AC3D457802DA778031D3EEB8255702D88E16FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:73:3c:c3:d4:21:70:60:cc:09:07:9a:75:
49:bd:b4:9d:a5:ef:1c:d8:4a:01:57:f9:c2:b5:e6:
52:28:72:8e:32:e4:de:ad:29:24:87:b5:55:33:ea:
33:ba:3a:03:50:da:4e:53:1e:c4:27:89:69:7e:9f:
66:c5:8c:7a:55:5f:02:72:9e:41:a0:ad:44:2c:4a:
dd:9a:fe:a4:92:d1:7f:58:35:69:3a:01:00:83:38:
e8:ec:89:59:5f:0c:61:65:13:e6:38:39:5e:d5:c5:
4a:fb:8c:c9:95:d8:0c:c5:42:91:e8:a4:ea:5b:46:
98:15:5a:d8:d9:62:62:0d:3f:66:4f:91:92:c2:13:
6c:91:c0:4c:87:8c:d1:5f:48:eb:33:dc:0f:35:c5:
98:fd:9d:0b:13:06:ea:a1:1a:fe:6e:64:2b:7b:b9:
7f:61:85:0f:ff:5d:2b:65:53:bf:2f:b1:de:eb:d3:
37:75:d2:0d:87:26:35:85:2e:33:8b:37:67:0e:4f:
2a:24:89:07:13:4a:1a:c7:d1:4e:42:2a:32:33:c4:
3e:71:56:75:a5:1c:2f:f3:97:6b:ec:c7:c3:82:3b:
d5:49:03:0d:c6:23:66:f5:fa:08:4f:23:df:56:70:
ea:91:0d:55:2f:e6:ae:64:e1:d9:50:f6:b0:31:d8:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:3D:45:78:02:DA:77:80:31:D3:EE:B8:25:57:02:D8:8E:16:FB
X509v3 Authority Key Identifier:
keyid:90:B9:4A:25:32:C6:C0:78:3C:F4:EE:E6:34:13:FB:A6:60:5C:44:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/90B94A2532C6C0783CF4EEE63413FBA6605C4412.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B94A2532C6C0783CF4EEE63413FBA6605C4412.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32332d3332203d3e20323731303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.24.0/23
Signature Algorithm: sha256WithRSAEncryption
de:7e:83:9e:ed:da:3c:50:88:21:d2:75:32:6e:eb:8d:e5:df:
41:70:bf:c9:b8:73:ab:8e:f7:40:bc:57:67:0a:16:9e:c1:01:
13:ac:32:06:4d:4a:b4:e3:86:c5:87:2e:c0:d5:9e:c2:7d:ce:
70:23:7f:86:45:c6:e5:3f:11:93:bf:9b:40:05:f5:1d:3d:2e:
10:88:89:fe:06:da:ee:4d:60:bc:d5:84:5f:fb:bd:df:cb:bd:
b7:c0:a4:e6:5a:9f:52:1b:8d:f4:a8:42:67:a8:9d:b9:8f:f1:
84:a6:29:0c:4c:fd:22:88:2b:a0:2a:8b:d9:c5:36:ff:c6:c0:
9c:61:1a:55:ad:79:13:f1:67:5a:9f:1c:3f:0e:5d:28:50:b7:
2c:f4:e4:36:43:75:13:eb:67:41:a9:26:36:31:f5:01:ab:ef:
32:e8:7d:cc:7e:48:ff:d1:9b:56:0e:06:9c:6c:a6:e0:cf:d9:
a0:6d:97:97:ff:5c:69:50:51:08:7f:b4:b3:0d:e4:cc:71:ba:
9e:74:09:e2:65:d2:43:c2:79:56:69:c4:b0:d1:3d:71:b6:50:
14:1a:8d:60:e2:ce:e0:72:ab:1b:c7:20:9e:1a:9f:49:f4:15:
72:15:df:21:4b:c6:ff:db:c7:fb:bb:98:79:1e:d9:f8:81:3c:
c2:ee:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:31:35 2025 by rpki-client