Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
File: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier: /RWkHQT5mG6JIzACs3pu1bM3c6PzA8UDjMGipOS+3hY=
Subject key identifier: D7:74:A8:5E:27:F2:62:EA:9C:43:BD:2B:28:84:2A:69:A1:B7:9D:15
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 3CC2D2ACAD2F920A9B42C5A87C434E4B9482620D
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:00 +0000
ROA not before: Mon 17 Mar 2025 14:42:00 +0000
ROA not after: Mon 16 Mar 2026 14:47:00 +0000
asID: 11432
IP address blocks: 200.170.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c2:d2:ac:ad:2f:92:0a:9b:42:c5:a8:7c:43:4e:4b:94:82:62:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:00 2025 GMT
Not After : Mar 16 14:47:00 2026 GMT
Subject: CN=D774A85E27F262EA9C43BD2B28842A69A1B79D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:79:bc:59:93:a4:38:da:99:a2:1f:ea:41:
7b:a6:40:83:eb:69:99:bd:de:ec:3e:40:25:d1:f8:
3d:ed:03:9e:28:bf:aa:a1:4a:9e:a6:59:d3:16:fd:
b5:6a:8b:a6:47:75:e9:84:53:ea:b8:e0:2b:89:5b:
24:b8:33:fc:0f:67:51:b6:d6:20:4b:79:5b:8b:4c:
d6:52:be:9e:29:1c:3e:c0:2e:b8:83:81:17:23:3b:
d1:0c:9d:ab:b4:e6:3b:32:51:3f:0a:cf:30:e6:f8:
ae:21:5c:9c:c6:e6:ef:94:34:62:76:57:6e:21:46:
84:c8:9d:5a:a2:52:bc:c3:99:ad:7d:54:a2:e5:ae:
42:cf:08:ba:59:24:90:30:54:f1:cb:4f:47:1e:45:
d0:47:d5:80:2a:f7:61:4c:b8:a1:e9:8f:fb:31:74:
51:da:53:72:2f:28:87:c7:ed:c1:85:9c:f6:a7:0e:
d0:9e:36:81:21:18:dc:e1:29:ae:af:81:f8:9a:15:
6b:9a:e7:1d:4f:5a:77:65:23:a4:9d:46:4e:0e:74:
ac:45:20:7d:39:89:09:35:41:75:f6:e1:20:0c:03:
73:25:1e:98:47:89:5a:46:4b:55:c4:28:87:8d:06:
c7:eb:64:63:ee:55:bf:5d:4b:20:02:83:1d:31:db:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:A8:5E:27:F2:62:EA:9C:43:BD:2B:28:84:2A:69:A1:B7:9D:15
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.170.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:74:6c:99:77:a7:10:bf:b6:65:58:72:ad:18:dc:e4:cf:73:
8e:6b:86:3e:ab:c5:92:46:8a:ef:5d:86:a5:98:58:7d:50:14:
46:bc:81:f2:47:d2:0c:57:3f:f6:cc:fe:20:25:7c:e8:a9:e2:
dc:85:94:8f:00:cf:31:e1:06:15:e8:76:e3:0e:15:88:8b:01:
ee:8c:9b:6f:bc:42:64:dd:6e:f5:ce:43:26:a7:a7:63:bf:57:
9d:da:d7:5b:66:f7:9b:62:cf:46:37:7e:64:c2:97:40:73:5b:
2c:d4:18:28:54:30:ba:44:22:16:7e:1c:4b:16:9d:f4:6e:35:
41:22:c5:ff:d4:5a:88:a2:23:19:54:91:65:fc:55:7d:74:42:
ad:bc:0c:65:a1:63:aa:7e:6f:bb:9d:96:e6:e9:58:13:83:a5:
d6:9e:ad:64:21:2e:00:06:73:fc:ff:fa:f4:6d:06:4b:21:20:
ab:01:28:79:f0:06:4e:b7:69:b0:58:7e:a8:6e:15:05:76:ec:
4a:43:bc:73:2c:26:55:e7:cf:3b:12:99:d0:75:4c:b1:88:9c:
73:f2:ea:03:a7:04:0b:56:4f:b7:dd:1c:f2:2b:89:30:dd:1f:
b1:d8:5f:d6:16:4d:de:46:ef:d8:f0:7f:ea:c5:da:a3:10:18:
61:b5:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:34:37 2025 by rpki-client