Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
File: 3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier: TQBbSkJrZ3olEK7vv9sDNjHY8CdYZsDfQdZyDVK6Sro=
Subject key identifier: 39:29:37:95:EF:F7:7E:43:BC:01:FD:E8:56:3B:74:E7:0B:7E:56:93
Certificate issuer: /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial: 2FA8CA9CC83BB874F2486095940E46561B788DDD
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
Signing time: Sun 25 Feb 2024 22:26:59 +0000
ROA not before: Sun 25 Feb 2024 22:21:59 +0000
ROA not after: Sun 23 Feb 2025 22:26:59 +0000
asID: 61317
IP address blocks: 200.220.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a8:ca:9c:c8:3b:b8:74:f2:48:60:95:94:0e:46:56:1b:78:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Validity
Not Before: Feb 25 22:21:59 2024 GMT
Not After : Feb 23 22:26:59 2025 GMT
Subject: CN=39293795EFF77E43BC01FDE8563B74E70B7E5693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:71:50:f7:85:7a:c4:89:c2:ba:86:db:a6:
69:70:a9:9c:aa:fd:4b:07:2b:a0:7b:b2:8e:b5:3b:
a5:85:e3:56:80:1a:a9:dd:05:b3:a5:c6:7e:bc:cf:
c9:78:b8:a1:7b:b4:26:82:68:a4:e1:ef:1d:42:9c:
dc:1e:3a:2a:68:47:14:a0:91:7c:76:c0:46:33:6d:
c6:6c:69:0b:62:4a:47:a9:ff:9b:09:1e:da:b1:8b:
12:04:d4:bb:df:6e:bb:c8:6f:75:b1:46:6b:1d:58:
b3:23:98:31:cb:80:98:d8:d2:c5:4b:18:c2:c3:46:
4b:52:a5:b1:54:12:43:6c:b1:7b:c1:37:30:ae:62:
2a:8d:6c:c8:62:e1:60:5e:6a:ff:ee:88:85:af:4d:
07:1a:01:e0:89:f1:ca:db:91:31:da:df:88:c1:ec:
b4:21:67:7d:90:2b:22:08:d1:6a:e1:f4:67:da:9b:
3d:cd:df:09:64:1e:d4:32:c6:02:71:4d:e8:59:d5:
60:7c:bb:8f:35:d9:5b:fa:f0:2b:f7:e6:31:51:1a:
d9:57:30:4f:67:21:4d:2a:16:f4:94:a0:0d:e8:e8:
30:d6:d6:b6:df:f9:0f:57:0e:e1:b5:e7:90:d8:65:
a8:c6:c2:af:23:df:c2:b2:7d:57:8a:13:3b:f3:9d:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:37:95:EF:F7:7E:43:BC:01:FD:E8:56:3B:74:E7:0B:7E:56:93
X509v3 Authority Key Identifier:
keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.220.168.0/22
Signature Algorithm: sha256WithRSAEncryption
35:26:eb:72:51:4d:29:81:2b:e8:65:42:d8:fb:ee:f5:02:22:
c9:0d:eb:e2:2b:5c:9a:d7:82:4b:75:69:99:d6:50:82:22:f8:
96:ab:d0:69:99:82:dd:a2:5d:0d:8d:9a:49:96:7a:c2:87:ab:
c7:7d:29:27:a1:db:72:72:38:24:5e:0d:ea:98:99:f7:30:c6:
1a:42:58:2c:25:95:92:20:a4:74:63:6e:81:01:c2:31:7e:db:
9f:3a:3c:41:43:64:c1:aa:71:17:b8:92:26:f4:fe:5d:17:f5:
b7:53:90:3e:63:3e:7e:a8:5c:45:a2:b6:d6:ef:5a:51:b9:00:
75:64:0f:f2:ca:52:6b:de:a5:09:15:f3:35:fd:4c:66:49:4a:
c9:e7:94:c0:56:b4:24:92:7b:6c:44:ac:60:60:6b:62:39:fb:
4f:8f:da:49:f7:56:d2:bc:2e:5d:f1:b9:96:aa:1f:44:69:18:
24:0b:82:7c:03:96:dd:26:1b:5f:1e:72:49:26:9b:34:38:f4:
84:89:57:59:cc:f9:91:ec:0d:47:45:87:58:f6:d2:17:f3:92:
08:b3:97:1e:81:4a:0e:6b:cb:96:7a:a6:b7:c7:e9:bd:1f:d6:
74:0e:15:4c:59:41:99:10:63:c6:e0:eb:af:96:98:6a:08:37:
b7:27:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:34:15 2025 by rpki-client