Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3332203d3e20323731323030.roa
File: 3230302e37312e38322e302f32332d3332203d3e20323731323030.roa (raw, json)
Hash identifier: nkXKJbExXiR81toR4fV08iWBmC7KrgZVE7CiTeZQB7o=
Subject key identifier: B8:D4:96:1B:AA:58:39:9C:9F:6C:B9:A1:2F:37:0D:19:DF:0E:6F:AD
Certificate issuer: /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial: 58EDA7B9CC727285BFB846394805DF28DB8D0BB3
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3332203d3e20323731323030.roa
Signing time: Mon 21 Oct 2024 06:33:15 +0000
ROA not before: Mon 21 Oct 2024 06:28:15 +0000
ROA not after: Mon 20 Oct 2025 06:33:15 +0000
asID: 271200
IP address blocks: 200.71.82.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ed:a7:b9:cc:72:72:85:bf:b8:46:39:48:05:df:28:db:8d:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Validity
Not Before: Oct 21 06:28:15 2024 GMT
Not After : Oct 20 06:33:15 2025 GMT
Subject: CN=B8D4961BAA58399C9F6CB9A12F370D19DF0E6FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:da:59:6a:bb:73:36:1f:3f:6c:6f:41:a6:
53:13:81:9d:f3:5b:c0:b6:6d:4e:02:93:8f:be:d5:
0b:8e:e9:08:a0:4f:42:7e:e5:06:da:73:39:19:14:
bb:39:2e:50:c7:7e:ef:a3:04:31:26:0b:42:40:a5:
71:82:48:ef:04:f2:4d:11:f7:95:00:ca:4b:c6:59:
8a:b8:17:18:fd:16:07:bd:c9:6f:ae:12:bb:fa:ed:
b8:77:a6:22:bf:cb:30:4f:6c:85:e2:25:28:63:d6:
07:b6:08:c0:b1:cb:d4:45:12:95:1a:ee:90:64:64:
3f:f0:8a:e7:d6:ce:b7:ea:93:bc:8c:ff:c8:dd:9a:
ae:e6:9e:c7:ad:e4:c9:1d:7c:48:42:9f:ab:f5:e1:
65:f7:77:9a:64:85:eb:13:b1:ff:41:5f:35:9a:83:
7b:3a:27:96:86:1a:fd:18:a0:30:9e:43:fa:2e:e3:
4e:2a:fd:72:24:a9:4e:ff:82:cf:a7:c1:c5:0e:f1:
87:80:88:9c:f7:db:93:cc:30:4b:63:c8:b7:9c:d6:
c6:6e:6e:40:fa:d1:bf:f7:6a:9a:c3:9f:4c:e1:21:
bb:da:ad:44:02:49:4b:83:2e:73:7a:7b:4e:ba:31:
ad:62:54:3c:c9:42:05:bd:60:21:4b:3f:0b:f2:01:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:96:1B:AA:58:39:9C:9F:6C:B9:A1:2F:37:0D:19:DF:0E:6F:AD
X509v3 Authority Key Identifier:
keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3332203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.82.0/23
Signature Algorithm: sha256WithRSAEncryption
72:16:81:23:2c:48:5f:48:77:23:f4:b6:c2:f5:8a:89:d4:c5:
b1:4c:aa:ca:48:75:6f:9d:05:30:21:2e:6e:f3:c5:f7:8c:d7:
47:d3:ff:8f:dd:bf:ca:cb:99:3e:50:6f:c5:dc:5f:0a:15:dd:
18:5f:20:40:c3:dd:53:33:2c:bc:ec:b0:01:71:4d:e2:38:01:
27:47:46:35:ec:7a:cf:bb:98:25:ba:de:20:ff:df:02:a0:fe:
93:0b:8e:a0:ee:61:e9:6f:04:fd:b6:8b:e6:27:08:27:55:2d:
22:99:42:92:50:49:a7:d3:43:c4:15:83:55:4e:b7:ad:79:3e:
5f:84:6f:0d:af:51:ee:4d:93:bb:1e:94:86:a1:4d:e2:b8:93:
ae:72:51:68:f9:f6:aa:d0:91:ee:0b:c2:ab:93:33:f1:19:5b:
9c:5a:ca:53:8e:ef:33:85:e1:f3:5c:d7:1e:03:db:d3:6a:ea:
05:c4:9f:44:eb:fe:54:74:7f:98:4b:18:d8:91:d6:9f:e3:fb:
8d:b4:4e:eb:a9:f7:6b:10:8e:93:d4:74:98:da:bc:68:75:d7:
da:0a:f3:44:01:15:ee:75:7a:c3:76:91:89:38:53:d1:d6:bd:
6e:72:b9:23:20:2b:33:94:82:a4:81:1e:98:b0:14:dd:87:3e:
34:fe:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:39 2025 by rpki-client