Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
File: 3230302e3235352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: dZFmIizjp0lorf310xhqbHkgA9KCYd+6P9RA3GoEKoM=
Subject key identifier: B8:E6:5A:92:62:63:7D:4A:79:92:BD:A0:E8:E3:CF:19:65:F5:16:E5
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 3120EA790057335EAF4834EB941574D14AA5C420
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:02 +0000
ROA not before: Wed 05 Mar 2025 18:55:02 +0000
ROA not after: Wed 04 Mar 2026 19:00:02 +0000
asID: 4230
IP address blocks: 200.255.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:20:ea:79:00:57:33:5e:af:48:34:eb:94:15:74:d1:4a:a5:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:02 2025 GMT
Not After : Mar 4 19:00:02 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:0a:c3:72:6f:6e:ad:85:5c:ed:60:4f:5d:
ab:6a:e7:f9:a7:35:07:79:23:d6:b1:0e:85:8f:56:
ba:0f:67:8c:20:16:1c:50:f9:0f:43:27:8e:46:a7:
36:45:24:9c:dd:97:91:ee:3d:05:a8:11:d0:25:50:
c6:97:a7:a8:b8:ef:5c:51:14:22:96:cd:8c:59:e9:
d0:e7:1d:fb:b2:7b:40:c7:04:45:79:56:25:ec:6c:
3c:05:6d:bd:a3:c2:5b:07:2b:82:fd:5d:d6:d6:d9:
22:00:8c:22:f3:5b:60:87:a3:10:ca:52:3e:34:92:
af:19:06:ef:ce:b0:2d:bd:58:31:55:c3:0b:4e:bd:
03:45:fc:63:04:5d:2a:4f:e6:92:7c:6b:9f:a3:3d:
38:f3:0e:31:ce:f0:04:b0:a3:06:d6:9f:57:2c:dd:
49:a6:cd:48:24:6b:97:39:73:d4:4c:31:1b:7d:a0:
a1:f3:55:84:a9:11:b0:9c:6d:f9:18:da:17:45:70:
46:d2:09:2d:c5:d7:01:41:6c:14:23:72:6c:d3:b4:
eb:e3:fb:54:0d:bb:4b:c1:6f:db:a4:5e:25:ef:fd:
5e:e7:93:82:65:60:21:9d:e4:69:71:ac:ad:ef:22:
a8:f3:f0:5b:8b:99:5b:36:2b:70:64:8b:c2:f6:d9:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:5A:92:62:63:7D:4A:79:92:BD:A0:E8:E3:CF:19:65:F5:16:E5
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:7f:56:b9:9f:e7:49:73:5c:69:ba:d0:a6:22:02:c5:35:6d:
be:e1:03:9d:44:22:93:a5:7a:db:40:6a:3d:04:e7:b1:2e:f0:
22:e7:a4:c1:ba:45:d3:bf:c4:37:cd:cc:80:51:d0:07:01:b0:
e7:68:01:c3:2a:db:64:dc:26:e7:cb:4b:67:48:79:29:38:f9:
4e:f3:c1:1d:dd:d0:a6:b5:39:ae:60:e4:12:89:d1:59:41:18:
51:44:4d:0a:0c:2d:08:1d:30:f5:71:b0:f2:6c:f0:21:08:bf:
66:ee:2c:f5:25:6e:82:37:78:2b:c5:a0:a4:5d:8b:7e:a8:5a:
62:9e:b7:52:bf:56:ed:ed:95:7c:5e:56:f2:a9:2e:2c:05:6a:
f5:da:7b:f2:db:cd:b7:29:00:ab:ea:a4:42:dc:60:f8:9a:4d:
d8:ee:d4:db:83:96:23:ad:37:70:96:0f:c5:48:de:a6:ce:92:
6c:7f:ca:d8:7a:60:d9:7c:c2:8d:cb:2d:3d:0f:d1:5d:b6:18:
72:ac:55:90:54:64:e2:84:5e:7f:0f:db:e9:0f:53:45:ed:06:
32:b0:f1:fa:93:f0:df:90:9f:c8:aa:20:32:8f:41:03:79:de:
72:13:e4:55:23:93:b6:78:dd:89:53:29:a8:22:ce:fa:94:f7:
2a:6f:4a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:03 2025 by rpki-client