Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
File: 3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier: SxyI9UzX2pZiPU6CoZUOYOagCSsHF5ReqZRssgGUwhQ=
Subject key identifier: 3C:CB:68:36:D9:71:B6:AA:54:C3:3B:52:45:68:E9:DC:C7:23:D6:CC
Certificate issuer: /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial: 6B2B6F475465D5E4E94EBDAB7D3675B7FB66E090
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
Signing time: Wed 10 Apr 2024 13:48:42 +0000
ROA not before: Wed 10 Apr 2024 13:43:42 +0000
ROA not after: Wed 09 Apr 2025 13:48:42 +0000
asID: 270811
IP address blocks: 200.219.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2b:6f:47:54:65:d5:e4:e9:4e:bd:ab:7d:36:75:b7:fb:66:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Validity
Not Before: Apr 10 13:43:42 2024 GMT
Not After : Apr 9 13:48:42 2025 GMT
Subject: CN=3CCB6836D971B6AA54C33B524568E9DCC723D6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:06:46:8c:b2:76:b4:71:dd:aa:9c:4e:04:
1a:b7:d1:76:56:1f:da:a3:8d:e7:2b:e2:9f:da:bb:
61:1f:8d:7d:e5:0d:49:7c:e9:3e:75:10:aa:c6:6c:
b7:45:83:1c:1f:57:20:1a:49:54:30:66:ad:d5:2d:
b1:da:b3:7d:1f:96:59:a7:2e:20:24:aa:18:5c:f1:
51:26:07:08:e3:83:1e:5a:63:bb:cb:e3:88:ac:14:
11:a2:36:9f:bd:54:05:d8:06:db:55:79:46:f9:9b:
8b:07:8e:75:11:92:e2:3d:ad:b5:c2:a7:a5:26:b0:
48:39:79:3d:17:e9:5f:68:3e:04:6b:4a:d6:1a:f2:
2b:c5:76:44:ae:b0:48:55:08:38:33:d5:b1:68:85:
4e:39:00:af:41:6f:c4:42:fa:fd:dd:e1:95:e1:ad:
a4:5c:46:31:ff:a3:cc:61:b9:6d:f4:41:82:bb:f8:
1f:f5:61:e3:c4:9c:f6:3c:d9:50:0b:ed:3c:9d:d1:
4f:eb:13:e6:d4:ec:f6:6d:55:b1:00:9e:8a:57:98:
d5:ec:bb:ee:34:78:3b:7a:68:42:17:db:75:7c:91:
3b:9e:80:67:e2:91:e2:b9:5f:be:b6:7b:fd:b3:75:
ae:22:f3:03:fc:16:76:6e:d2:23:7c:de:3f:8b:17:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:68:36:D9:71:B6:AA:54:C3:3B:52:45:68:E9:DC:C7:23:D6:CC
X509v3 Authority Key Identifier:
keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.21.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a1:b7:23:3e:4f:b7:60:12:b9:75:bd:07:64:ef:ef:fa:53:
5b:17:d1:2e:c6:09:29:23:15:2a:9d:26:ba:b3:e6:fd:a6:db:
42:dd:bb:be:db:ac:87:14:9b:95:1c:de:47:5c:80:fa:0a:f5:
30:1d:5b:0a:bf:d6:b4:8d:27:40:27:cd:56:87:0f:ae:57:ab:
50:1f:23:ba:a5:0f:ed:7e:78:20:45:81:04:58:11:4a:a6:10:
fe:6a:04:bf:42:7c:5e:38:77:22:c2:08:55:4d:8b:e0:d8:4a:
a6:57:bf:35:cf:d5:2a:a6:37:ac:63:29:69:0f:6e:fd:6d:9e:
d8:51:21:9f:5f:54:0b:f8:be:88:2b:e7:ca:30:20:d5:4d:c1:
41:bd:ef:78:97:05:5c:f1:69:b9:37:76:16:77:6a:60:6c:37:
73:60:b4:7f:6c:c8:7a:b6:6b:f6:3b:09:a6:7f:0f:69:c2:c0:
15:db:8a:f2:a2:cf:17:48:6d:b7:80:65:13:41:80:d1:42:d5:
d1:a4:3e:64:7d:ac:ad:f7:d3:9b:21:12:ee:11:95:7a:7e:c8:
a4:14:2e:28:16:66:4d:33:fd:6d:f1:a2:6d:9f:35:92:28:aa:
4b:2e:58:70:81:b0:98:d1:70:25:77:2d:6f:b7:10:28:73:64:
18:f5:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:15 2025 by rpki-client