Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
File: 3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier: greEiZy/JinYP+fHLEFadaIRR0XNE+wGuA9Yt1tIlyc=
Subject key identifier: C2:96:8D:E7:09:5D:BF:4C:EF:CD:25:36:2B:B0:16:47:DF:5D:5A:42
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 4FB52E8F88826D521D4DAE3D2F917895F942E809
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
Signing time: Fri 07 Feb 2025 16:58:03 +0000
ROA not before: Fri 07 Feb 2025 16:53:03 +0000
ROA not after: Fri 06 Feb 2026 16:58:03 +0000
asID: 271670
IP address blocks: 200.150.252.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b5:2e:8f:88:82:6d:52:1d:4d:ae:3d:2f:91:78:95:f9:42:e8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Feb 7 16:53:03 2025 GMT
Not After : Feb 6 16:58:03 2026 GMT
Subject: CN=C2968DE7095DBF4CEFCD25362BB01647DF5D5A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:d5:cf:df:cd:ee:90:fd:f4:9d:b8:a8:3a:
29:85:68:3f:d6:4b:be:e1:53:d4:70:88:90:22:08:
cf:93:42:4a:95:92:f8:2c:49:7b:60:f6:d3:e0:24:
9a:18:65:43:04:b8:83:9e:8b:0e:18:f1:81:37:40:
d4:8a:94:23:54:6b:5d:a0:f2:38:5d:35:46:1c:d9:
95:02:d2:e0:35:c5:fa:8d:8e:fe:25:76:da:02:ad:
00:cd:0b:da:0b:1f:0a:f8:ae:97:73:d6:1b:a7:1b:
6f:71:eb:b4:68:ea:8e:21:9b:61:81:de:9c:f9:56:
ee:47:19:fc:f3:e4:09:1f:c4:54:62:55:fb:30:c0:
2d:b4:c3:ea:a9:a8:db:2c:d6:55:0e:5f:e2:ac:1b:
6a:29:24:7b:d8:7c:2c:22:39:7d:4d:38:d1:31:d6:
12:85:63:30:5f:f9:cd:22:0a:8e:fb:51:79:08:b6:
df:92:56:bf:b0:32:0f:9e:32:d7:ae:ad:7e:6f:73:
22:ed:e8:73:6f:b5:21:f8:b5:2d:10:6a:b6:70:71:
68:70:73:38:83:1c:3c:8d:44:f6:fe:71:ba:d9:3d:
78:d7:7e:ea:71:17:bf:d3:d1:aa:29:b7:66:73:87:
1b:91:39:c3:4b:c2:59:d1:bc:e7:87:cc:7f:08:fe:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:8D:E7:09:5D:BF:4C:EF:CD:25:36:2B:B0:16:47:DF:5D:5A:42
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.252.0/24
Signature Algorithm: sha256WithRSAEncryption
17:25:11:7c:6d:57:b4:53:d9:8f:aa:25:06:1a:5a:85:ac:13:
7f:b8:1a:cb:eb:29:ea:f7:ef:5e:75:89:2d:14:5e:db:d9:fd:
3e:ab:4c:78:2c:fd:ee:78:48:fe:82:6b:3f:5e:29:a6:0a:80:
63:3a:83:08:4b:09:a4:07:dd:4b:c1:2c:a4:c5:9c:63:df:1d:
d7:04:7e:77:2c:48:92:08:bb:ac:18:e7:67:5e:a2:29:aa:c3:
59:59:58:aa:d7:b7:61:88:1a:59:35:5e:79:23:ad:3b:1f:d0:
b2:a2:f5:73:4f:22:14:cd:da:4a:4e:42:69:f0:ca:47:1f:3f:
9c:85:34:b7:a4:88:b2:ca:32:fb:17:8c:5e:6e:8c:d7:39:83:
df:6a:e6:e3:ba:4e:71:63:a8:0a:ca:36:fc:4c:dd:a8:5c:4d:
78:84:20:b4:69:de:fe:21:9d:6e:27:dd:3f:ec:1a:91:9c:ff:
f5:78:35:86:f8:30:3e:b2:be:b1:bd:42:1e:83:d1:cd:74:36:
ac:75:c6:50:f0:20:82:b2:f8:49:65:39:87:4a:84:89:c0:7f:
67:18:d3:16:ce:07:31:dd:23:8b:a6:75:d7:10:92:f2:36:33:
dd:54:45:65:0a:62:bd:77:df:27:73:12:c2:66:dd:e7:b5:a9:
6d:3d:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:08:19 2025 by rpki-client