Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa
File: 3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier: pBql1PSue60BNpc/hgezfefArOcwu8TTLHWzw6gk98s=
Subject key identifier: B4:8A:20:D1:C8:62:E5:5E:E3:5F:C2:EA:0A:73:F1:30:A4:BC:05:08
Certificate issuer: /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial: 6B319278A00E4882BA28DCC28FA876757FDBE59F
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa
Signing time: Wed 05 Mar 2025 18:59:36 +0000
ROA not before: Wed 05 Mar 2025 18:54:36 +0000
ROA not after: Wed 04 Mar 2026 18:59:36 +0000
asID: 270811
IP address blocks: 200.219.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:31:92:78:a0:0e:48:82:ba:28:dc:c2:8f:a8:76:75:7f:db:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Validity
Not Before: Mar 5 18:54:36 2025 GMT
Not After : Mar 4 18:59:36 2026 GMT
Subject: CN=B48A20D1C862E55EE35FC2EA0A73F130A4BC0508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c4:95:96:32:c3:9d:8c:7c:1e:7b:18:cd:68:
66:e8:9f:84:e9:68:89:8f:39:27:ae:0f:61:93:ce:
3f:ee:02:00:76:59:a9:0e:4c:a8:01:83:e8:9a:6d:
e9:38:a8:15:6b:00:bb:e0:9e:91:cf:c6:b7:81:41:
73:b4:74:ad:f8:76:6e:58:de:bc:28:05:6c:d3:d5:
ff:1a:0e:c9:82:9e:3c:2c:1f:dd:0f:87:a1:4a:1a:
b3:57:ae:d3:25:2e:d5:ee:77:45:e5:46:e2:7e:db:
d5:e4:47:41:e2:d5:f7:58:47:1b:bf:59:06:2a:ac:
b1:94:22:12:9b:84:73:6c:e5:8e:88:cd:f3:6e:79:
aa:10:fa:89:af:f1:74:f9:fd:17:e5:bc:5f:ae:f4:
57:99:3c:ce:ce:09:0a:b7:7d:8d:69:8f:79:24:a9:
2b:46:b5:b8:f0:10:6b:ea:9f:8f:a4:24:e4:38:50:
ec:e7:18:0b:27:3f:a8:f2:4b:5c:ca:fb:34:28:47:
8e:d4:51:a0:19:2b:fd:65:d8:fb:de:2b:5c:f0:30:
d9:85:f2:df:3a:31:5b:7c:a4:ab:d3:a6:f8:ec:9f:
31:63:ca:f9:aa:9a:31:c0:23:2b:cc:bd:97:f2:f4:
ac:f4:d6:9d:ba:2a:b1:b5:9f:94:2e:21:cb:bb:ec:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:20:D1:C8:62:E5:5E:E3:5F:C2:EA:0A:73:F1:30:A4:BC:05:08
X509v3 Authority Key Identifier:
keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:39:49:22:44:ab:9d:06:3d:cf:bd:02:89:b2:9c:91:c6:5e:
51:df:c6:15:91:03:89:51:95:5b:4b:b6:70:9b:45:0b:e5:e3:
ae:f6:b4:f7:f9:48:21:1a:d2:45:a6:1e:7d:f3:57:00:d8:ce:
b8:0b:b6:e9:ef:d5:92:4e:22:ef:12:1b:9c:0c:05:94:df:9a:
69:fe:2a:bf:1c:9f:1f:ee:8f:91:26:3e:af:f0:40:45:40:b7:
25:d4:fe:60:0e:4a:19:15:bd:63:38:37:a4:b8:61:82:d9:7b:
5a:6b:6c:95:87:eb:65:bd:b4:8c:10:34:c4:9c:10:96:5d:da:
4b:9d:b1:e2:8e:a7:72:b8:95:ce:90:3b:b6:ae:58:be:1c:f9:
f7:ab:48:ba:77:2d:4d:ca:e7:95:83:47:fc:fb:8a:1e:63:ae:
a2:b8:d6:fa:17:1c:3f:f5:eb:b5:aa:0f:e2:d0:27:0e:3d:fd:
2d:99:d7:57:db:3e:96:59:64:1f:3b:b2:c0:73:a9:3d:7f:30:
74:cc:d6:ac:af:98:a4:91:fc:c5:9c:36:5e:69:c3:d5:67:b9:
e0:8a:eb:0d:a0:af:df:37:2d:e4:b1:36:fa:d3:6e:6d:95:84:
21:86:77:79:7d:3b:37:8c:09:28:fa:7a:a8:98:14:8c:24:1b:
2b:a6:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:57 2025 by rpki-client