Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa
File: 3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier: EM6kxzvOx3sh6NtuESxPWEjs1iTPzvMFkqagWYoBAcY=
Subject key identifier: B3:A9:7F:07:C4:99:15:34:50:61:CD:81:EA:5D:5F:E2:88:5F:7C:5F
Certificate issuer: /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial: 10597AC823C22DAA384435D24058BC7157066154
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa
Signing time: Mon 14 Oct 2024 14:24:37 +0000
ROA not before: Mon 14 Oct 2024 14:19:37 +0000
ROA not after: Mon 13 Oct 2025 14:24:37 +0000
asID: 52631
IP address blocks: 200.229.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:59:7a:c8:23:c2:2d:aa:38:44:35:d2:40:58:bc:71:57:06:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Validity
Not Before: Oct 14 14:19:37 2024 GMT
Not After : Oct 13 14:24:37 2025 GMT
Subject: CN=B3A97F07C49915345061CD81EA5D5FE2885F7C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:86:58:cd:0c:ff:36:6c:4a:e4:2b:fb:fb:
21:e0:d4:a9:52:aa:f5:d6:eb:cf:97:b4:ec:59:ca:
01:08:f3:15:2f:4f:8b:bf:b7:ce:b9:61:b1:1f:f2:
14:fc:56:cb:77:15:8f:f2:47:18:9a:ed:25:65:a1:
2b:9e:41:79:d1:a9:f9:39:71:e1:bd:32:b0:ee:8b:
99:16:60:c1:f5:4b:99:47:7a:3f:2f:4b:0d:b0:b0:
23:90:85:0e:10:3b:98:e9:3e:46:72:8a:30:1a:3e:
b1:78:63:ee:a7:9b:02:9d:7b:de:03:bc:ad:13:a9:
56:41:b5:31:41:f4:bf:df:11:e0:99:cc:05:47:f6:
3a:df:8f:66:2b:e0:53:38:e3:df:ac:bc:e2:2a:41:
ca:a6:65:cb:e0:c6:79:99:7c:10:be:3b:93:ab:ea:
c3:b9:ae:d1:61:f4:1d:9e:2a:86:2a:80:c8:9a:17:
f0:a4:45:22:b8:d4:57:e8:25:28:ac:d9:21:72:95:
e0:b2:dc:bb:6d:2e:fe:af:f4:79:51:75:35:f9:08:
62:c7:f3:60:06:4c:f6:c6:95:9c:c8:92:32:0b:6c:
b8:af:fc:fb:87:42:eb:74:b8:55:ca:66:2a:cd:59:
a7:41:df:ca:4a:ce:0f:17:bb:4c:5b:a3:04:10:5e:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:7F:07:C4:99:15:34:50:61:CD:81:EA:5D:5F:E2:88:5F:7C:5F
X509v3 Authority Key Identifier:
keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.245.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a3:0d:61:85:cf:fd:8b:7c:5c:03:6d:21:8a:ce:7f:b4:45:
dc:69:9e:b3:d7:d9:4a:58:2f:74:4c:e4:7a:15:22:8a:1b:d2:
54:be:d1:83:e9:72:5f:f0:fc:54:7a:8b:b2:43:9f:ab:64:de:
28:39:0c:31:30:46:af:e6:ac:34:ca:68:27:3f:41:04:d4:b1:
d9:fd:3b:15:ee:2a:3a:45:bf:32:42:b9:de:dd:b0:db:ca:21:
ea:41:5d:a9:45:21:61:25:7d:76:d8:3d:18:f3:9f:66:50:a0:
6e:77:43:b2:8f:b0:bf:03:a8:98:a6:30:64:17:c8:cc:91:c4:
fe:11:a4:9d:11:0d:c3:34:00:a4:d0:34:19:d3:1c:95:1b:92:
b4:89:8d:0e:ae:2e:b5:bf:15:8c:dc:2f:d2:09:c5:db:cb:ab:
c3:01:67:59:c2:39:d1:e0:94:c3:b9:ba:7b:f3:a4:49:59:cf:
5a:17:86:9c:30:fc:d9:37:92:e0:a7:35:28:fd:77:6a:27:88:
d4:33:3e:72:d3:82:78:11:62:d6:3a:cb:10:b2:bb:f7:bd:18:
77:f3:94:4d:6a:ca:d4:d0:97:9f:73:75:9c:28:05:eb:67:93:
18:6b:f0:8d:2d:08:6a:68:75:c6:fb:16:e3:13:ae:12:46:11:
0a:ae:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:27 2025 by rpki-client