Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa
File: 3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa (raw, json)
Hash identifier: RsgF5cFO2/9j985MNd1AxgPjrFrD48WgquKiem/oVkE=
Subject key identifier: 47:04:A1:4E:9B:51:1A:46:81:56:81:A1:94:F7:B5:1F:AD:1E:06:15
Certificate issuer: /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial: 09DFD7EBC7A8063BA55B9A1419A49A7CB9E514AB
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa
Signing time: Wed 05 Mar 2025 18:59:37 +0000
ROA not before: Wed 05 Mar 2025 18:54:37 +0000
ROA not after: Wed 04 Mar 2026 18:59:37 +0000
asID: 270811
IP address blocks: 200.219.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:df:d7:eb:c7:a8:06:3b:a5:5b:9a:14:19:a4:9a:7c:b9:e5:14:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Validity
Not Before: Mar 5 18:54:37 2025 GMT
Not After : Mar 4 18:59:37 2026 GMT
Subject: CN=4704A14E9B511A46815681A194F7B51FAD1E0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:d0:9d:ad:ec:1e:fd:54:c8:71:78:f0:29:
36:54:9b:a7:ac:2c:1d:bd:a1:99:bb:61:ff:ac:7a:
94:b8:39:6f:61:af:fb:72:3d:e1:11:57:05:60:af:
37:93:d8:af:d7:4b:1e:11:c0:6f:54:18:04:6e:2a:
e2:77:9c:89:b9:2a:d9:60:54:74:d4:e2:d9:87:13:
dc:ef:e8:45:43:02:9e:96:6d:77:fd:5b:2c:4f:36:
79:a2:e8:5c:cf:7e:03:c1:ee:b8:1f:dd:f3:4d:e9:
ee:f8:13:9e:89:5a:45:f1:0c:e4:91:91:33:1d:a4:
12:f8:e8:cb:76:06:41:9d:12:46:82:bf:ed:b7:e2:
a5:ea:49:98:95:84:21:1f:f7:04:86:76:66:79:41:
19:06:3d:aa:d0:7e:bb:19:c4:5a:50:fd:8a:8e:03:
e0:2a:bd:1c:6d:95:3c:54:9d:80:49:7f:66:b2:34:
9d:de:b0:82:f1:e7:26:7d:3b:28:ab:ff:af:60:e9:
08:06:ca:10:f6:5b:fb:72:14:0d:41:e6:3a:1c:63:
83:42:0c:fa:09:2d:87:53:00:da:33:df:e0:23:e8:
ac:1f:40:7b:db:63:fc:ad:78:73:20:f4:c0:3f:b9:
31:83:74:bf:83:20:de:41:ea:06:6d:e3:40:fb:e7:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:A1:4E:9B:51:1A:46:81:56:81:A1:94:F7:B5:1F:AD:1E:06:15
X509v3 Authority Key Identifier:
keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:cc:c6:65:ba:48:46:7e:d6:f0:9c:85:e1:8b:fa:90:cf:e3:
44:03:34:60:2f:fd:b3:84:b9:bf:36:01:57:fe:c4:4e:7a:80:
9d:3b:4f:01:03:93:64:b8:4d:af:51:79:ca:e8:fc:88:e7:26:
aa:bb:4f:01:d3:bd:ec:2f:a3:fd:2b:60:5b:57:db:44:df:c0:
52:e9:78:1b:b2:bd:bb:6d:7a:33:42:e3:41:f4:20:7b:ab:a7:
37:4c:0e:ea:b2:ce:8a:a0:e2:10:7c:d7:55:e6:5c:03:b0:a6:
35:bd:86:41:4d:88:ba:2f:a4:55:85:4b:22:4b:ca:90:7d:0b:
db:b0:e9:ef:14:f9:bd:8e:df:56:f4:93:13:5c:2a:a1:79:4f:
71:16:4e:40:34:7e:93:21:90:b6:ba:df:b8:d3:c5:98:45:00:
7e:6a:93:09:bf:28:8b:48:bb:3d:13:94:f8:c5:7a:5a:41:80:
fd:59:1a:fe:08:ba:aa:c4:46:64:81:04:a1:31:9c:b9:b2:b1:
8d:31:ec:12:b1:27:80:92:93:f7:41:9f:52:f5:f3:ce:55:6b:
9f:8b:61:b3:e5:a7:14:e7:ee:4f:8c:c5:50:c0:eb:57:e8:21:
5e:4f:5c:93:ac:99:01:c5:89:20:48:ea:18:2a:f6:e9:f4:d5:
dd:56:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:45 2025 by rpki-client