Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa
File: 3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier: 0jOIrTFa5eXiNVNnyYAaZCZEltbQR6Q6YE8DEVN26Aw=
Subject key identifier: 1C:B0:B1:C8:C4:6F:40:7E:05:D8:84:D9:23:4C:57:59:CE:37:37:F7
Certificate issuer: /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial: 6BDA57AA024026EF5E09C4CC56E24BBB7CDA1458
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa
Signing time: Sun 25 Feb 2024 23:34:58 +0000
ROA not before: Sun 25 Feb 2024 23:29:58 +0000
ROA not after: Sun 23 Feb 2025 23:34:58 +0000
asID: 22773
IP address blocks: 200.220.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:da:57:aa:02:40:26:ef:5e:09:c4:cc:56:e2:4b:bb:7c:da:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Validity
Not Before: Feb 25 23:29:58 2024 GMT
Not After : Feb 23 23:34:58 2025 GMT
Subject: CN=1CB0B1C8C46F407E05D884D9234C5759CE3737F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:ab:94:68:38:11:27:aa:6d:72:ce:42:36:
fa:c7:0f:5e:59:58:0b:6f:95:50:80:eb:56:12:4a:
f3:82:b7:7c:2c:33:93:fc:e7:e9:61:7a:b2:0a:1a:
84:15:47:19:fc:98:b7:b7:5b:d9:e9:0d:39:e1:d8:
5a:1c:4f:f0:0e:97:7f:c8:22:95:14:c3:7e:9c:74:
25:46:e1:40:99:73:9b:1a:90:d4:b1:f5:72:d1:1f:
9b:b6:93:2b:d6:0d:2c:e8:44:8c:4a:6a:15:d9:f8:
65:b1:9e:e1:fd:f8:b8:d3:29:4c:62:32:1a:3b:48:
86:e1:8a:ba:65:40:74:09:3b:b6:96:e7:97:a5:bc:
f2:04:63:7b:aa:f2:89:df:6e:1c:a2:5b:12:d9:f7:
f7:b0:1d:d6:a8:66:7b:81:44:8b:40:87:19:d2:e6:
65:0b:f1:83:6b:ce:5d:3c:c0:c7:53:a0:4e:83:bd:
54:a7:d9:c0:54:79:c2:70:f8:5e:a0:ca:11:bc:b0:
bc:3e:8a:82:fb:dc:26:09:c5:86:c1:1e:c1:22:25:
3a:90:27:4e:64:40:c2:25:5b:57:56:d0:67:6a:c9:
19:2d:3b:3d:82:74:83:e3:05:84:69:53:06:3d:66:
9c:08:2a:b8:69:e6:59:3c:9d:c3:87:b9:ec:35:ad:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:B1:C8:C4:6F:40:7E:05:D8:84:D9:23:4C:57:59:CE:37:37:F7
X509v3 Authority Key Identifier:
keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.220.164.0/22
Signature Algorithm: sha256WithRSAEncryption
37:cb:36:00:af:6f:ad:23:5d:fe:00:11:be:55:ef:35:e9:55:
ac:29:9a:f6:e0:a7:cc:d4:30:0d:d0:48:fa:e9:14:52:80:48:
7c:ee:4c:5e:1d:e0:1e:47:72:1c:dc:50:5c:8b:f6:3c:b0:1d:
22:b6:64:97:23:90:99:59:49:17:45:8f:c8:1d:f7:17:56:aa:
64:17:9f:4a:93:de:7d:1d:03:e6:d8:5e:03:77:4f:7e:99:8c:
25:21:ad:68:ce:c0:39:eb:ef:ad:88:d2:99:54:ae:db:c3:be:
f5:bc:3c:4c:b8:8a:80:e4:97:7f:87:0f:97:fd:9a:80:5b:b0:
b4:ad:23:3e:82:b3:7b:6d:40:a7:59:09:c2:82:6b:f9:cd:e2:
ab:60:ef:a7:41:5e:dd:1c:19:0a:2c:79:28:0a:09:13:01:f4:
4b:90:03:b0:42:95:fd:b4:b0:8c:8e:2a:e4:dd:1c:e4:9b:7d:
d0:54:73:1b:05:f6:f2:5e:6c:e2:84:70:cc:a3:f9:90:5e:8f:
7f:e0:8a:d1:c3:ee:96:dd:f8:3f:59:b2:d7:3f:fa:b3:fe:ce:
86:09:8b:89:87:eb:55:37:22:9b:63:14:5f:f2:01:75:95:8d:
63:60:37:eb:62:cc:c8:93:61:fa:44:90:d6:92:a0:4e:88:a1:
43:2d:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:31:43 2025 by rpki-client