Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
File: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier: ujKoXOKc8Jy70SOeAs5K2N1XxUNX37jnxnP6wRkUixA=
Subject key identifier: 4B:9F:D9:4D:89:16:CF:48:EE:42:D0:54:98:43:06:13:92:06:A4:E8
Certificate issuer: /CN=87AE99ED75888247248D5B8495AEF61EE8970759
Certificate serial: 6E9C2B473FE8858A445D4EC06F5B9FEBE75AA62A
Authority key identifier: 87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
Signing time: Tue 03 Sep 2024 08:04:54 +0000
ROA not before: Tue 03 Sep 2024 07:59:54 +0000
ROA not after: Tue 02 Sep 2025 08:04:54 +0000
asID: 271200
IP address blocks: 200.71.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9c:2b:47:3f:e8:85:8a:44:5d:4e:c0:6f:5b:9f:eb:e7:5a:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87AE99ED75888247248D5B8495AEF61EE8970759
Validity
Not Before: Sep 3 07:59:54 2024 GMT
Not After : Sep 2 08:04:54 2025 GMT
Subject: CN=4B9FD94D8916CF48EE42D054984306139206A4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:33:a5:72:09:75:4b:9c:46:a9:77:dd:c8:
33:2d:90:b4:9c:ab:c7:7e:41:9f:aa:a1:a0:78:73:
e3:76:a5:52:e4:19:c8:a4:10:2e:d0:f2:59:84:e0:
18:de:c8:dc:0e:5c:7e:ff:94:b3:14:39:23:d0:2a:
d4:fa:fd:c3:6d:9c:02:14:78:2a:10:20:8c:9c:6b:
d5:81:19:cf:7e:06:99:1e:15:3c:1c:04:89:0c:11:
a7:c4:20:94:ad:f8:60:14:c6:d5:9a:4c:02:3f:59:
d3:4d:ed:55:04:ad:12:96:cf:97:90:0a:67:bc:af:
f2:da:58:2e:13:03:d8:e2:23:eb:ed:7f:a8:3e:1e:
bf:10:c0:ac:0a:88:32:0d:6a:66:88:da:fb:6d:d7:
3a:a1:fd:e8:ae:3a:a7:69:d9:34:12:69:05:c5:d5:
3d:29:81:fe:99:c0:ab:70:a6:ad:85:a6:0c:2f:5f:
5c:2b:1c:87:da:1c:61:43:41:a6:96:10:32:ab:f1:
f9:58:8b:38:3c:00:72:3a:49:27:bf:a4:b8:67:72:
82:5f:e3:0e:08:54:aa:cb:fd:43:0b:14:27:84:63:
f5:bb:6f:49:94:93:d6:14:9b:f2:70:1b:7d:6d:0d:
4d:7b:50:db:b4:70:5f:1e:22:cf:1a:3e:ec:f5:5e:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:D9:4D:89:16:CF:48:EE:42:D0:54:98:43:06:13:92:06:A4:E8
X509v3 Authority Key Identifier:
keyid:87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/87AE99ED75888247248D5B8495AEF61EE8970759.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.82.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bb:fe:2f:ac:02:e6:03:20:78:56:89:0c:14:84:38:ce:3a:
5a:07:f8:fe:54:71:ed:d8:5b:f9:80:01:72:1d:19:04:43:8a:
87:c2:59:f4:0f:06:72:5e:cf:7d:17:46:dc:5a:91:d9:92:68:
a5:b7:49:65:95:05:7f:8b:5f:0a:66:45:0f:a6:9e:76:d4:57:
78:09:27:70:67:a2:67:0c:9f:9d:33:aa:fd:30:45:75:20:ad:
4b:8e:8f:01:d2:16:3f:b6:a9:f5:c9:15:ea:a6:f2:1e:76:6f:
a1:04:db:2b:99:5a:89:4f:65:1d:05:82:b1:08:0a:aa:0c:91:
12:69:f9:82:53:bd:f7:69:f7:0a:da:c3:88:62:24:25:23:b6:
bf:37:cf:0e:4a:3a:0d:01:81:1a:7a:dd:09:13:c8:53:05:8c:
e9:2c:0a:a7:f1:96:76:8c:26:51:b7:12:a9:52:e1:3a:fd:27:
da:66:5d:89:1b:81:f1:e2:0d:9d:4d:44:e6:1d:b5:8b:c2:f2:
a5:18:02:bc:b5:b2:97:47:95:31:ff:f0:32:a1:15:26:49:71:
8d:83:b4:e9:0c:fa:02:fb:f4:00:57:14:bc:e8:a8:5d:13:f8:
eb:c4:47:b5:ab:a9:3a:72:a9:2f:e7:af:83:bd:f3:57:2a:38:
82:9f:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:44 2025 by rpki-client