Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
File: 3230302e39342e3234302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: dtfdKTdSpBQeeZnPL0jbItCDCul7s8WmjOEy3n4f3co=
Subject key identifier: 07:FD:E4:7C:FD:A4:E4:B5:82:62:34:8B:0C:00:7A:C0:D3:00:FB:1F
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 6C7F9645629F83B96BD6E95D54DB78C98876665A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 200.94.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7f:96:45:62:9f:83:b9:6b:d6:e9:5d:54:db:78:c9:88:76:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=07FDE47CFDA4E4B58262348B0C007AC0D300FB1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:be:65:3c:41:b0:9d:90:c1:0f:c5:a1:3f:
1c:14:94:88:8d:20:52:92:7e:39:9c:6b:90:00:dc:
a4:a2:3c:b7:8d:6a:a0:b2:dd:43:7b:b6:9a:a6:b9:
8e:34:46:93:3c:ba:80:79:ce:b9:dd:a6:91:6b:4b:
1e:e3:1d:72:66:2c:00:af:d4:f9:1f:f2:53:a9:84:
41:fe:4c:84:fa:0d:70:db:ee:8c:c6:7a:69:6b:e9:
da:81:54:9e:b9:e1:fd:95:00:9d:0f:90:61:3d:64:
e8:bd:4a:31:d0:bb:a4:2b:9a:f0:83:b2:0c:20:9a:
95:24:53:59:c7:7f:72:cd:f4:d7:0a:17:96:65:0a:
00:75:f7:8c:8e:da:c8:ea:32:05:86:a6:7e:7b:23:
77:c4:af:13:af:d7:d5:2a:6e:05:64:64:be:d6:05:
10:c2:b9:71:e6:08:63:bd:05:08:55:4a:fa:02:ff:
73:1d:33:3d:6d:af:53:9a:d9:b2:df:d2:bd:7e:b7:
e7:c5:91:2f:af:0f:68:be:f2:1e:d9:30:84:46:ba:
fa:8e:24:18:13:27:43:d1:b5:14:a4:69:d6:7e:6c:
dd:d9:12:63:a1:a6:ac:fe:84:e6:27:f6:0f:7c:1c:
20:e2:df:75:4a:7e:45:08:c1:7a:81:79:cf:e7:6a:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:E4:7C:FD:A4:E4:B5:82:62:34:8B:0C:00:7A:C0:D3:00:FB:1F
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.94.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:82:79:f0:dc:54:e8:d4:9a:c5:72:d4:c9:a7:70:ef:0e:d4:
83:39:56:d2:1d:69:f0:b5:23:03:2c:20:13:80:52:48:fd:45:
d9:53:a7:83:64:6f:d0:99:35:54:7f:5c:d4:16:18:c4:29:c9:
94:fa:62:2f:ba:9f:9b:96:21:83:21:75:f0:ab:7e:13:23:05:
b1:25:28:71:17:b6:59:a8:0c:0f:79:53:dc:fb:60:4a:06:9d:
4f:0c:a0:52:b4:25:f3:46:1f:3b:29:dd:24:94:fc:48:aa:2b:
5f:f6:6a:4e:48:e6:d1:8b:d2:25:69:21:17:b2:dd:6e:e7:a9:
cf:01:9d:4c:c0:3b:81:cc:e5:8e:54:a2:06:50:39:41:ec:82:
b9:64:1c:30:39:18:1d:04:d4:e5:7b:4d:b1:a7:64:15:00:f3:
e1:00:dd:53:e6:82:0d:c0:d6:d2:e6:5f:ec:68:71:9a:de:25:
1e:34:44:19:17:ae:70:94:05:49:6d:fd:69:1f:b4:53:c2:3e:
f4:53:f6:bd:f7:8e:5e:ac:a2:0a:b9:1b:34:85:49:48:25:6d:
47:41:4e:5e:34:35:57:62:02:62:87:49:57:44:c0:bf:19:34:
89:bd:53:26:52:ca:f4:6f:5d:46:ab:25:6b:db:92:1f:8b:c1:
aa:6f:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:53:09 2025 by rpki-client