Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
File: 3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa (raw, json)
Hash identifier: KCnBWO/reTyMoydswB81IiCpxpsdQe1XaLHJQQ9ut2c=
Subject key identifier: 64:EF:D2:FF:4F:33:0C:08:21:A1:85:19:FC:16:E5:01:8C:E5:9B:5B
Certificate issuer: /CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Certificate serial: 01694C9E4E541D2EC0F959F7895A0C4D31C68584
Authority key identifier: BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
Signing time: Fri 31 Jan 2025 15:34:05 +0000
ROA not before: Fri 31 Jan 2025 15:29:05 +0000
ROA not after: Fri 30 Jan 2026 15:34:05 +0000
asID: 270758
IP address blocks: 200.39.144.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:69:4c:9e:4e:54:1d:2e:c0:f9:59:f7:89:5a:0c:4d:31:c6:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Validity
Not Before: Jan 31 15:29:05 2025 GMT
Not After : Jan 30 15:34:05 2026 GMT
Subject: CN=64EFD2FF4F330C0821A18519FC16E5018CE59B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:34:32:5b:fe:04:7d:db:e6:a1:72:44:69:
64:60:0b:20:72:85:26:62:c5:92:68:85:b3:60:c5:
36:2d:81:8b:65:42:00:04:ec:12:bb:dd:73:de:19:
a5:b5:6e:2b:fe:f1:3e:81:b5:f0:81:f8:a2:d2:40:
d3:66:16:b0:ff:4b:cc:9a:3f:1c:1c:60:34:2c:55:
0e:35:5f:5d:3d:ef:05:64:2b:11:35:c0:64:0b:d2:
bd:9d:65:dc:24:45:f5:a5:54:fe:0d:8f:1a:45:9f:
7d:4e:03:af:46:81:37:89:7f:2b:da:ad:37:f3:49:
c9:7b:a7:b1:ce:0f:67:51:41:de:1b:a8:25:08:67:
45:c6:6d:c8:4a:ec:be:2a:a7:d5:f1:50:8f:d8:cc:
52:b3:c4:80:d5:5e:a3:81:1a:e2:e5:b7:b8:49:b1:
22:5e:fc:b2:9c:d3:87:6d:91:60:02:e0:62:6a:ba:
e5:3d:4e:82:97:f7:cd:0b:c3:50:62:c4:67:29:81:
9a:f2:1f:8d:fa:63:af:34:12:ea:cb:3e:67:78:f8:
ac:f7:a0:06:3b:cf:a9:1b:a9:ae:64:95:83:4e:b3:
3c:02:da:ff:1b:90:ac:55:57:e6:a8:9d:09:6a:9b:
1e:39:1c:f8:80:e4:ae:15:4c:d7:6b:5a:54:4f:20:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:D2:FF:4F:33:0C:08:21:A1:85:19:FC:16:E5:01:8C:E5:9B:5B
X509v3 Authority Key Identifier:
keyid:BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:38:61:9b:59:57:fd:bb:6c:e8:5b:58:5d:6a:31:29:dd:45:
8f:f4:4c:37:07:71:43:58:5c:ee:c9:6e:24:49:8d:d1:87:e5:
24:52:2b:7c:c6:4f:93:58:ab:92:9d:66:34:6c:12:a9:c4:c5:
de:71:90:3c:74:3c:74:4d:0a:cc:6a:20:7b:9a:b6:e7:36:19:
0d:3a:ad:24:75:f4:ad:b7:85:2c:3d:a1:f8:b4:ad:af:3b:41:
89:d9:c2:26:76:8e:8e:3f:ba:72:87:8a:b9:1f:4c:28:55:d2:
27:4a:de:2e:92:49:7f:9f:fa:70:f6:17:e2:1e:89:59:0e:60:
06:6d:65:6f:ca:1f:a5:93:9e:c1:bb:43:7a:e6:da:e5:1f:50:
f1:98:10:c3:df:cd:9e:72:1f:ff:fd:b5:d9:cc:af:c9:f4:b6:
91:a4:b5:0d:08:65:f1:94:e3:f2:df:9e:01:8a:f5:23:52:21:
36:94:ac:89:70:5a:a7:2b:fb:79:2c:1c:fa:21:e3:66:bc:7d:
d5:04:b0:e2:2d:10:94:4a:52:76:45:3f:ba:bb:8c:31:74:59:
91:1a:d7:f0:98:ec:15:09:52:91:21:a9:a6:87:22:8b:45:a9:
4a:c9:48:38:f5:2a:73:94:45:47:8c:ae:d0:d2:95:29:f3:5d:
25:25:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:08:31 2025 by rpki-client