Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
File: 3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier: LtpQSrCNt1ZHzCebNqsYXso+CFXRRvNnAar1NRdyBYE=
Subject key identifier: 54:31:72:0B:C5:44:36:5C:9F:D8:0D:83:AA:F1:76:DC:5F:DF:BB:E8
Certificate issuer: /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial: 3CBD19CFA9ECDF20851F6067EF7C944CF71D118A
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
Signing time: Sun 25 Feb 2024 23:34:58 +0000
ROA not before: Sun 25 Feb 2024 23:29:58 +0000
ROA not after: Sun 23 Feb 2025 23:34:58 +0000
asID: 22773
IP address blocks: 200.220.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bd:19:cf:a9:ec:df:20:85:1f:60:67:ef:7c:94:4c:f7:1d:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Validity
Not Before: Feb 25 23:29:58 2024 GMT
Not After : Feb 23 23:34:58 2025 GMT
Subject: CN=5431720BC544365C9FD80D83AAF176DC5FDFBBE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:68:4c:8a:82:7a:9e:e7:a8:a7:26:4c:f2:
ca:45:72:2f:b0:c6:d2:a8:b0:e4:bc:1f:7f:76:a9:
c3:1a:67:a9:68:6c:6e:6b:0a:73:1a:cc:d1:95:25:
6e:db:03:cf:7a:a2:f0:9f:50:2e:3e:f5:6c:71:66:
16:a4:fb:70:16:fa:89:d1:32:f4:8d:34:62:8d:b3:
d7:9b:0e:5a:db:24:8c:a9:21:cd:57:bd:00:67:66:
21:2e:19:4b:50:d0:b2:49:9a:92:a3:a1:4a:74:0b:
ca:42:79:07:1c:c5:71:91:bb:94:7c:ee:2d:23:8a:
d9:c4:f2:11:8e:65:7c:6e:7f:d9:2c:18:33:22:e3:
93:46:4b:64:81:a6:1b:03:24:bc:4a:dd:c7:1f:d5:
ec:3a:30:96:6d:d1:c5:2c:c7:3a:75:7f:2f:f4:e4:
a2:9a:0d:7c:09:12:0a:6b:61:74:e4:1b:28:f5:2f:
41:c4:83:d6:14:b3:bb:83:d1:d4:1a:37:3a:ff:72:
ef:9f:25:82:61:fe:c1:0f:6c:d1:4e:7d:fb:17:17:
e0:46:a9:47:d3:f7:91:40:2a:f8:25:db:ae:b8:61:
b3:1f:4a:c9:f1:02:07:e6:89:34:64:40:68:cd:79:
6a:cc:71:ca:c3:c1:4d:cb:d7:ad:36:bb:fd:e7:54:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:72:0B:C5:44:36:5C:9F:D8:0D:83:AA:F1:76:DC:5F:DF:BB:E8
X509v3 Authority Key Identifier:
keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.220.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:42:b7:66:9b:87:55:ef:fe:72:4d:e2:e8:e7:72:fb:04:14:
01:f9:f5:5f:37:47:13:66:65:8e:f1:e6:6a:ab:89:a9:f4:ae:
5c:1a:75:71:58:89:c5:65:c3:27:50:f5:33:e5:e4:a6:33:77:
a0:39:c2:4b:18:21:a4:74:42:47:cc:f3:cb:b4:e5:0f:b4:9d:
81:48:9c:25:76:0f:00:5d:bf:e5:fe:df:c2:c9:b3:7b:4f:88:
55:b4:37:72:52:c3:44:32:97:32:ed:c1:eb:d9:ca:9e:e2:20:
f3:1b:ff:f2:e8:14:b8:0b:c0:e7:8e:f7:46:d4:ca:2a:6a:02:
26:86:1c:72:f8:54:59:39:e2:93:bf:17:8d:7f:c2:ac:3f:ef:
e5:90:f8:00:e0:ea:78:4c:e7:b0:bb:90:c3:4a:db:2b:e4:e0:
28:a9:07:36:9d:2c:ff:06:7a:53:b7:b1:94:a5:04:ae:7f:f3:
a6:0f:65:e1:4b:ed:c9:72:71:fe:2c:20:a7:c6:27:6c:03:eb:
8c:fd:e3:44:fc:70:76:ff:23:cb:df:b9:cb:1d:ed:59:bd:b8:
01:a3:96:0b:c4:ff:2e:62:e1:5f:35:b7:26:1e:e9:ba:15:b0:
f1:a3:e6:7d:35:ed:02:73:ec:dd:ae:4a:e0:20:6a:18:48:d1:
0b:b9:f8:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPL0Zz6ns3yCFH2Bn73yUTPcdEYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBMDkzNDRCQjgyMTU5QkYzMzkwRjc3MTNDQzcwRUI1
OEFFNDNERjAeFw0yNDAyMjUyMzI5NThaFw0yNTAyMjMyMzM0NThaMDMxMTAvBgNV
BAMTKDU0MzE3MjBCQzU0NDM2NUM5RkQ4MEQ4M0FBRjE3NkRDNUZERkJCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRGhMioJ6nueopyZM8spFci+w
xtKosOS8H392qcMaZ6lobG5rCnMazNGVJW7bA896ovCfUC4+9WxxZhak+3AW+onR
MvSNNGKNs9ebDlrbJIypIc1XvQBnZiEuGUtQ0LJJmpKjoUp0C8pCeQccxXGRu5R8
7i0jitnE8hGOZXxuf9ksGDMi45NGS2SBphsDJLxK3ccf1ew6MJZt0cUsxzp1fy/0
5KKaDXwJEgprYXTkGyj1L0HEg9YUs7uD0dQaNzr/cu+fJYJh/sEPbNFOffsXF+BG
qUfT95FAKvgl2664YbMfSsnxAgfmiTRkQGjNeWrMccrDwU3L1602u/3nVNdrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVDFyC8VENlyf2A2DqvF23F/fu+gwHwYDVR0j
BBgwFoAUZaCTRLuCFZvzOQ93E8xw61iuQ98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMC82NUEwOTM0NEJCODIxNTlCRjMzOTBGNzcxM0NDNzBFQjU4QUU0M0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QTA5MzQ0QkI4MjE1OUJG
MzM5MEY3NzEzQ0M3MEVCNThBRTQzREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzAv
MzIzMDMwMmUzMjMyMzAyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KwwDQYJKoZIhvcNAQELBQADggEBADpCt2ab
h1Xv/nJN4ujncvsEFAH59V83RxNmZY7x5mqrian0rlwadXFYicVlwydQ9TPl5KYz
d6A5wksYIaR0QkfM88u05Q+0nYFInCV2DwBdv+X+38LJs3tPiFW0N3JSw0QylzLt
wevZyp7iIPMb//LoFLgLwOeO90bUyipqAiaGHHL4VFk54pO/F41/wqw/7+WQ+ADg
6nhM57C7kMNK2yvk4CipBzadLP8GelO3sZSlBK5/86YPZeFL7clycf4sIKfGJ2wD
64z940T8cHb/I8vfucsd7Vm9uAGjlgvE/y5i4V81tyYe6boVsPGj5n017QJz7N2u
SuAgahhI0Qu5+F4=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org