Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
File: 3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier: 0J0aRzH2WxN8JTnoLRgONnUe8lXI0SydyMZdClYRerw=
Subject key identifier: 46:08:6A:69:B6:59:08:9F:C6:45:60:02:7B:CF:0B:A0:B7:09:11:E3
Certificate issuer: /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial: 59D081DF77F2A21064AB65AACAD18266280E3F1F
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
Signing time: Sun 25 Feb 2024 23:34:58 +0000
ROA not before: Sun 25 Feb 2024 23:29:58 +0000
ROA not after: Sun 23 Feb 2025 23:34:58 +0000
asID: 22773
IP address blocks: 200.220.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d0:81:df:77:f2:a2:10:64:ab:65:aa:ca:d1:82:66:28:0e:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Validity
Not Before: Feb 25 23:29:58 2024 GMT
Not After : Feb 23 23:34:58 2025 GMT
Subject: CN=46086A69B659089FC64560027BCF0BA0B70911E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:59:f7:2a:cc:ce:d4:92:28:9a:53:7c:ea:
5e:6d:2c:4b:72:4a:f8:eb:5b:52:05:c1:86:06:72:
01:9d:10:73:16:31:ec:f1:0b:44:f3:2c:a9:54:89:
88:26:5b:47:cd:97:06:fa:06:4f:27:88:cc:b1:23:
1f:ea:ed:02:75:6f:22:d6:2f:62:f4:1c:34:70:04:
73:1a:0a:c8:74:80:19:87:96:7b:04:34:a2:58:76:
dd:ac:1d:0f:9c:ec:61:f0:ea:4f:cd:34:4f:74:27:
38:68:33:57:37:07:1f:4d:3b:7b:af:3b:e2:98:7c:
cf:fe:3a:da:45:c0:e6:50:7d:10:47:ef:93:e7:9d:
37:40:ff:79:79:7b:41:e3:96:64:3e:98:77:9b:3d:
bc:d2:e1:da:78:fc:65:5d:24:75:23:cb:99:f1:57:
89:b5:e7:15:70:b5:95:f7:57:1b:f4:f7:fe:37:f7:
46:b2:17:84:15:4c:1a:8b:03:ee:5a:42:13:d0:5a:
a8:25:bc:bb:95:2c:8a:3e:d5:fe:e1:b7:08:8d:de:
c8:3c:d8:11:76:1b:28:9b:03:22:30:74:f0:bf:36:
e0:a3:0e:71:8c:36:30:58:1d:8a:9f:b5:99:a9:e6:
5c:96:c3:28:52:2f:4b:ae:05:a2:76:5f:f4:5e:1b:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:6A:69:B6:59:08:9F:C6:45:60:02:7B:CF:0B:A0:B7:09:11:E3
X509v3 Authority Key Identifier:
keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.220.160.0/22
Signature Algorithm: sha256WithRSAEncryption
98:62:f2:17:97:6e:b2:ea:a1:58:d8:2a:36:35:7c:e7:4e:ca:
43:c2:cf:96:f6:ef:19:cb:bd:1e:99:67:8e:3e:28:95:e1:b5:
9c:88:cc:d0:6e:53:fd:99:92:00:12:29:9e:26:16:c6:00:55:
31:d1:f9:cd:5b:8b:e7:8d:73:cb:f0:f5:96:e0:9a:0e:36:d0:
9a:76:3d:9a:a5:24:54:ca:b8:0a:c3:91:2b:2c:65:5f:b5:71:
be:de:ed:c6:27:2a:ef:93:88:e5:82:57:1c:66:6d:8b:91:fe:
79:f6:70:39:59:80:9d:9b:4d:76:cf:cf:52:d2:93:66:26:39:
2f:00:ce:b4:0f:d8:08:f1:06:82:2e:97:23:c8:a0:e9:56:e6:
fc:d8:d5:e3:3c:bf:7a:77:2d:e5:a5:a4:ce:c2:4d:e6:c8:5e:
4c:f9:94:a6:54:7f:9f:df:7f:96:67:bc:c5:fb:52:9f:27:45:
7a:b7:a4:ac:e9:72:d9:0c:05:dd:8f:a3:20:a6:68:d3:c8:f9:
f8:ae:ff:f9:21:5a:b8:12:9d:57:ab:5e:d9:f7:d8:39:46:52:
d6:97:ff:d1:de:ff:47:15:97:7b:59:df:10:6b:a2:9c:5f:e6:
9c:7c:0d:a3:12:ba:f9:43:d2:da:39:d9:d9:88:ae:78:00:01:
26:6e:c9:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWdCB33fyohBkq2WqytGCZigOPx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBMDkzNDRCQjgyMTU5QkYzMzkwRjc3MTNDQzcwRUI1
OEFFNDNERjAeFw0yNDAyMjUyMzI5NThaFw0yNTAyMjMyMzM0NThaMDMxMTAvBgNV
BAMTKDQ2MDg2QTY5QjY1OTA4OUZDNjQ1NjAwMjdCQ0YwQkEwQjcwOTExRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBln3KszO1JIomlN86l5tLEty
SvjrW1IFwYYGcgGdEHMWMezxC0TzLKlUiYgmW0fNlwb6Bk8niMyxIx/q7QJ1byLW
L2L0HDRwBHMaCsh0gBmHlnsENKJYdt2sHQ+c7GHw6k/NNE90JzhoM1c3Bx9NO3uv
O+KYfM/+OtpFwOZQfRBH75PnnTdA/3l5e0HjlmQ+mHebPbzS4dp4/GVdJHUjy5nx
V4m15xVwtZX3Vxv09/4390ayF4QVTBqLA+5aQhPQWqglvLuVLIo+1f7htwiN3sg8
2BF2GyibAyIwdPC/NuCjDnGMNjBYHYqftZmp5lyWwyhSL0uuBaJ2X/ReG9TvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURghqabZZCJ/GRWACe88LoLcJEeMwHwYDVR0j
BBgwFoAUZaCTRLuCFZvzOQ93E8xw61iuQ98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMC82NUEwOTM0NEJCODIxNTlCRjMzOTBGNzcxM0NDNzBFQjU4QUU0M0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QTA5MzQ0QkI4MjE1OUJG
MzM5MEY3NzEzQ0M3MEVCNThBRTQzREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzAv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KAwDQYJKoZIhvcNAQELBQADggEBAJhi8heX
brLqoVjYKjY1fOdOykPCz5b27xnLvR6ZZ44+KJXhtZyIzNBuU/2ZkgASKZ4mFsYA
VTHR+c1bi+eNc8vw9Zbgmg420Jp2PZqlJFTKuArDkSssZV+1cb7e7cYnKu+TiOWC
VxxmbYuR/nn2cDlZgJ2bTXbPz1LSk2YmOS8AzrQP2AjxBoIulyPIoOlW5vzY1eM8
v3p3LeWlpM7CTebIXkz5lKZUf5/ff5ZnvMX7Up8nRXq3pKzpctkMBd2PoyCmaNPI
+fiu//khWrgSnVerXtn32DlGUtaX/9He/0cVl3tZ3xBropxf5px8DaMSuvlD0to5
2dmIrngAASZuyWo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:54 2025 by rpki-client