Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3332203d3e203532363934.roa
File: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (raw, json)
Hash identifier: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=
Subject key identifier: D4:90:30:C0:BB:E7:2A:FA:9F:CF:AD:C4:D8:A2:B8:A8:B4:E7:40:17
Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial: 1F2365E9CB24D83EEDE25BAF567551E72FAF2B26
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3332203d3e203532363934.roa
Signing time: Fri 07 Mar 2025 00:14:01 +0000
ROA not before: Fri 07 Mar 2025 00:09:01 +0000
ROA not after: Fri 06 Mar 2026 00:14:01 +0000
asID: 52694
IP address blocks: 200.6.128.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:23:65:e9:cb:24:d8:3e:ed:e2:5b:af:56:75:51:e7:2f:af:2b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Validity
Not Before: Mar 7 00:09:01 2025 GMT
Not After : Mar 6 00:14:01 2026 GMT
Subject: CN=D49030C0BBE72AFA9FCFADC4D8A2B8A8B4E74017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:91:74:3d:57:e2:57:b9:e1:a0:de:84:99:
fe:be:08:29:49:dc:48:7b:63:5e:0c:4c:d6:4d:bd:
03:cb:38:7a:1b:44:b9:ba:dd:39:16:89:6a:6a:49:
1b:02:17:14:09:91:4f:92:e9:19:3c:d7:e9:98:ed:
9c:f6:c4:2d:2e:f4:25:5f:9b:a1:40:94:ec:96:2a:
70:d9:72:a4:14:d6:5b:de:9b:81:d7:4b:02:6f:f7:
52:18:a7:52:0f:32:17:44:1c:37:41:b4:c1:7a:8d:
c0:ad:b3:83:d3:c5:b3:6c:95:46:a4:ac:81:b1:e0:
e1:65:1c:6c:74:ac:72:1f:41:c9:18:04:26:a4:ff:
b9:cc:b7:ad:3f:20:4b:b8:84:54:b6:98:7f:1c:1b:
e8:b3:aa:f6:c2:5d:f7:0f:30:0b:d3:a1:4f:9a:39:
77:18:1a:97:48:5e:43:d6:fb:e8:52:e6:81:96:95:
87:fb:d9:eb:e8:11:c8:c0:3c:92:7c:af:7f:7e:d7:
2c:ff:b4:4f:66:f9:1d:c9:70:2a:44:81:f0:8a:a2:
6c:0e:51:ef:a7:d9:d9:19:8a:2e:a3:5b:77:8a:b0:
1f:ae:dd:24:32:87:94:a0:70:cd:db:6c:d3:e5:e6:
a4:91:2f:92:f2:52:26:87:b4:c0:26:70:3c:9a:f5:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:90:30:C0:BB:E7:2A:FA:9F:CF:AD:C4:D8:A2:B8:A8:B4:E7:40:17
X509v3 Authority Key Identifier:
keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3332203d3e203532363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:8d:73:d4:48:93:31:26:69:da:61:cd:66:42:b4:a4:c3:3a:
e6:20:36:ab:37:3c:2f:6a:da:c7:6b:99:ee:14:6d:d7:fe:2d:
1f:d8:95:d7:68:c5:90:2c:e9:46:e6:d7:70:53:89:78:ca:14:
12:b9:f4:e3:3a:c4:86:69:a6:0f:0c:25:97:bb:5e:5a:a5:4f:
6a:91:aa:7a:e0:b4:c0:e9:de:ef:32:fc:71:5e:ba:67:cf:3f:
62:be:55:1a:be:29:08:94:84:dc:d9:92:1e:37:6c:8e:87:44:
43:3d:94:2b:67:70:9f:ad:5b:c1:44:77:92:fa:61:ca:21:04:
a9:88:c6:61:15:0d:f9:9f:d5:f3:99:17:2b:3c:1f:41:76:0d:
25:f2:a2:ab:ef:ab:cf:e8:f9:56:15:86:9c:e3:82:2b:e9:65:
64:41:3e:7e:a6:6a:8d:f4:fd:d9:f5:be:89:96:3f:45:d1:5d:
f0:1a:9d:79:f8:6d:aa:14:ce:c4:de:46:02:54:c9:1b:a9:28:
96:c5:ee:76:d2:98:60:4e:4b:38:b1:b1:da:66:6b:9e:c2:bb:
cf:f6:00:63:a2:04:33:d1:7f:54:e5:2a:f5:a1:fc:71:89:2b:
9f:95:c0:8c:4d:bb:81:0a:14:b6:86:9b:5e:11:e6:c0:4d:fc:
72:0f:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:50 2025 by rpki-client