Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3233203d3e203532363934.roa
File: 3230302e362e3132382e302f32322d3233203d3e203532363934.roa (raw, json)
Hash identifier: h9huqyfjqlUf7ezfzABhjETLp8Ljfm09sh2hoJqJaPs=
Subject key identifier: 22:4E:22:47:E5:C2:22:BE:7E:A3:23:AF:46:E2:0C:C1:39:D4:ED:A0
Certificate issuer: /CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
Certificate serial: 6A70604E9552B8B4985317BB195F506AA332518E
Authority key identifier: 3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3233203d3e203532363934.roa
Signing time: Thu 29 Feb 2024 14:25:42 +0000
ROA not before: Thu 29 Feb 2024 14:20:42 +0000
ROA not after: Thu 27 Feb 2025 14:25:42 +0000
asID: 52694
IP address blocks: 200.6.128.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:70:60:4e:95:52:b8:b4:98:53:17:bb:19:5f:50:6a:a3:32:51:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
Validity
Not Before: Feb 29 14:20:42 2024 GMT
Not After : Feb 27 14:25:42 2025 GMT
Subject: CN=224E2247E5C222BE7EA323AF46E20CC139D4EDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:bb:da:6e:22:3a:01:8a:20:0f:71:10:ff:
19:67:dc:92:d9:30:52:91:16:ff:cb:e8:4f:76:66:
a2:a1:4f:de:cb:f0:8b:c4:b5:bb:dd:08:30:c1:91:
1f:31:b3:d3:28:a1:19:bc:83:ec:58:9a:aa:a5:01:
4d:06:53:2c:d8:ef:2b:c1:d0:22:37:c6:71:b6:b5:
aa:09:7c:81:c8:aa:01:32:07:2e:71:f3:36:40:4d:
32:67:6f:a2:51:59:d1:4a:f9:13:ec:c3:0f:34:79:
c2:4d:48:ca:b4:3d:b4:64:9b:75:8d:27:ae:85:47:
ed:97:2a:a4:ff:3f:3f:48:5e:ed:f9:5c:83:76:b9:
fb:7c:58:99:37:be:56:82:63:94:3f:33:20:9c:07:
e2:e6:61:58:0d:ae:b7:30:47:ce:a4:55:4b:e9:9d:
67:e6:76:8c:7a:4e:8a:8a:85:16:2d:e3:18:38:50:
8a:8b:59:b5:37:af:a0:a4:98:06:65:7f:c7:32:9c:
0f:d5:29:53:84:3e:d9:24:72:12:8d:cd:b1:8a:f8:
38:38:d8:6c:11:66:9b:d6:08:2b:f8:a2:02:77:9a:
09:9e:84:cc:ed:c2:b1:98:fe:f0:3f:f3:d0:76:7b:
83:ec:d0:25:bb:a8:c8:27:96:96:c1:72:e8:23:2a:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:22:47:E5:C2:22:BE:7E:A3:23:AF:46:E2:0C:C1:39:D4:ED:A0
X509v3 Authority Key Identifier:
keyid:3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3233203d3e203532363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:c4:1b:5a:07:fa:b3:ff:d8:c6:cd:6a:00:08:a7:37:ed:d7:
b3:3b:01:d7:a7:98:a1:c6:72:73:c5:c4:6a:24:27:88:29:66:
62:b2:6d:b9:7c:8c:74:49:cc:44:91:b0:f1:2a:99:cb:5e:17:
d1:07:51:d4:86:20:24:f7:0a:ba:48:da:b8:1d:03:6f:f0:5f:
d4:44:8e:f9:69:a0:da:7d:66:12:8b:0b:22:bb:6c:e4:7d:6a:
75:ab:07:ac:bd:f5:5f:1a:4d:ee:d8:d5:d1:19:50:27:2b:40:
1e:b8:56:bf:12:59:fb:c3:c1:82:e2:02:b5:6c:22:91:6f:00:
dd:d0:6a:db:59:53:ea:a5:34:02:f4:79:e5:14:57:b3:44:66:
39:ae:66:7e:58:93:3e:30:25:8c:84:6e:0f:8c:d5:36:73:7f:
90:b1:5f:ae:f4:eb:57:c2:d7:e9:4d:8a:a2:bf:fb:ca:50:1b:
a4:6d:f9:f1:29:fd:da:46:3a:8c:d9:70:5e:12:c4:d8:44:96:
72:69:d2:75:6e:6e:63:4d:2b:9f:aa:9a:66:53:2f:ce:5e:ab:
97:80:ed:ac:4a:bb:b2:80:f6:a1:03:7a:0e:04:cb:7e:15:2a:
0d:6f:b8:b8:b9:a7:a3:f1:8b:4a:cc:89:23:56:2b:31:bb:72:
16:2f:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:52 2025 by rpki-client