Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31392e36342e302f32302d3234203d3e203130383831.roa
File: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (raw, json)
Hash identifier: /gc+Hp8hFYY6cpjhxSaE5ZKs/x/81jP9mgHggoODu6Y=
Subject key identifier: DD:28:65:DC:8A:24:23:25:72:BF:88:7D:D8:57:00:0B:27:27:89:71
Certificate issuer: /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial: 5C0A761BFB83E6A53A6ED788016516630946D11D
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31392e36342e302f32302d3234203d3e203130383831.roa
Signing time: Thu 06 Mar 2025 15:13:43 +0000
ROA not before: Thu 06 Mar 2025 15:08:43 +0000
ROA not after: Thu 05 Mar 2026 15:13:43 +0000
asID: 10881
IP address blocks: 200.19.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0a:76:1b:fb:83:e6:a5:3a:6e:d7:88:01:65:16:63:09:46:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Validity
Not Before: Mar 6 15:08:43 2025 GMT
Not After : Mar 5 15:13:43 2026 GMT
Subject: CN=DD2865DC8A24232572BF887DD857000B27278971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:17:04:e1:0d:e0:cd:88:60:73:06:f9:e6:
ec:0a:7f:54:27:40:82:66:39:de:a2:8c:e5:8d:ab:
ca:08:1e:05:4c:8d:56:44:7f:b6:a2:75:77:97:20:
1f:6a:bb:a5:89:25:ff:43:18:ed:04:ec:99:30:5b:
6e:59:79:6a:73:51:cd:91:67:66:6a:98:b9:1f:44:
ea:3d:4d:b0:98:08:67:41:25:c6:2f:8b:31:26:7a:
72:cf:d4:15:76:6c:a8:68:d7:5c:45:bc:e7:5d:11:
f7:56:e3:a1:91:28:97:44:f7:c7:a8:78:61:df:c0:
5f:9d:12:50:58:43:e7:3f:95:5e:eb:2c:f1:6d:e7:
86:71:33:f7:ad:f8:a3:ab:b9:7a:84:66:9a:a4:48:
41:9f:e0:f4:63:5b:8d:5b:0a:cf:ad:84:e3:9f:88:
79:6a:0b:5e:9a:40:52:5a:4d:c5:f9:15:67:5c:67:
e8:81:ca:4e:94:a3:43:39:da:08:d2:5b:44:9d:39:
cf:26:a3:7a:c7:64:f3:59:f9:ba:d6:1f:34:76:9f:
3f:96:ea:c8:ea:1a:09:81:1b:0a:d4:60:2a:6c:d3:
9d:3a:5b:a7:6f:cc:f1:0f:e6:79:18:28:3f:85:0a:
38:33:1f:24:59:66:0c:b9:9a:0f:8c:53:62:a8:94:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:65:DC:8A:24:23:25:72:BF:88:7D:D8:57:00:0B:27:27:89:71
X509v3 Authority Key Identifier:
keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31392e36342e302f32302d3234203d3e203130383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.19.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:c8:84:9d:43:81:04:5c:86:23:28:da:6b:15:91:c4:01:e1:
b9:04:37:c3:a1:47:a8:f7:68:da:33:0d:6a:68:74:01:3f:d7:
4b:03:e7:a5:1e:8d:46:67:c3:04:c7:23:db:b8:10:80:06:60:
47:b3:02:63:1e:de:b2:d6:58:7e:bf:1b:f1:a2:d2:1f:ce:9e:
be:11:b1:8b:28:d3:35:76:4a:9d:6f:e5:5b:c9:bf:46:46:0f:
84:2a:9b:5f:38:6d:ca:9c:d6:16:30:4d:82:d7:e4:cd:43:ef:
ee:47:95:57:a8:9a:a0:ad:53:63:52:5d:01:19:96:e7:b9:c4:
52:0a:e3:5c:c8:7b:bb:24:7e:a3:7c:ea:fd:bf:5f:8e:f3:a4:
39:17:13:96:d0:76:fa:9f:a1:b1:e0:21:f8:cd:7b:72:db:c9:
eb:e7:13:6f:9a:11:42:e3:b7:79:39:3b:1f:55:eb:42:ba:cd:
99:b7:76:23:61:34:d6:ab:a0:21:a1:3b:a1:64:a1:7d:c1:28:
61:80:7a:17:fe:55:7e:10:e8:b3:b3:a0:f4:b0:a8:84:de:da:
38:1d:b1:70:1e:9c:d6:81:7d:86:d8:9d:81:0c:9e:78:e7:56:
e3:f6:6d:ed:3c:8a:d6:56:cc:98:8f:d2:3e:45:46:14:07:91:
2f:02:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:59 2025 by rpki-client