Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier: uIeNlfEbULdMnhbusbeKmvM+INGwFsWv3lnfp23R5bY=
Subject key identifier: 24:A3:32:77:2B:B6:9E:39:46:97:03:0D:87:45:A9:5A:F3:74:C0:B0
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 768FDAE62D1E11220DB3CEF95DAF18A6F9D95FC9
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:01 +0000
ROA not before: Mon 17 Mar 2025 14:42:01 +0000
ROA not after: Mon 16 Mar 2026 14:47:01 +0000
asID: 11432
IP address blocks: 200.194.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8f:da:e6:2d:1e:11:22:0d:b3:ce:f9:5d:af:18:a6:f9:d9:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:01 2025 GMT
Not After : Mar 16 14:47:01 2026 GMT
Subject: CN=24A332772BB69E394697030D8745A95AF374C0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:3a:d4:0c:a2:14:f8:83:60:5f:e2:e5:d5:
76:00:7a:01:0e:f4:28:8c:b1:e4:85:51:be:63:f1:
b8:6c:87:5b:c3:64:67:d8:82:8c:37:8b:9e:4a:9c:
e3:9c:75:5c:7e:50:2b:1e:bd:8a:01:ab:dd:29:df:
18:15:a2:06:36:9a:dc:19:ce:df:98:54:d1:c5:2b:
b8:2f:7e:b5:f6:24:97:ef:7c:29:43:70:ee:65:90:
fd:92:e0:b8:4a:ff:b9:30:1f:56:47:ee:2e:da:3b:
0a:d2:7d:33:59:04:b9:34:46:7f:d1:b5:93:db:fb:
75:04:8e:e2:d8:6c:ed:6b:e6:b2:74:e0:78:9c:8e:
23:cd:89:1e:05:b1:21:1a:da:bd:ec:9c:d9:27:34:
ec:87:37:31:ca:ec:10:86:61:49:c0:24:32:af:09:
c9:c0:29:d6:a8:05:4f:50:23:9b:82:8d:cc:cd:9b:
a5:32:29:cb:d6:39:bb:a3:5e:8a:d8:c6:e5:16:51:
58:7d:8f:e6:6c:31:bf:4c:7c:27:d1:7a:a5:57:ef:
36:7e:31:c2:c7:b4:b2:f5:8a:bb:22:3d:48:e9:0a:
dd:a7:4e:b6:f6:23:29:eb:d6:30:12:23:a6:43:76:
38:58:98:0d:27:66:c2:40:da:7e:16:86:1f:45:80:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:32:77:2B:B6:9E:39:46:97:03:0D:87:45:A9:5A:F3:74:C0:B0
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
41:d1:a5:9c:63:e9:38:3c:ce:b0:63:4e:4e:3e:97:77:ab:da:
e7:e5:7a:e2:60:38:18:23:b7:30:68:b3:98:c2:f0:c1:7d:92:
7a:ef:a4:69:0b:cf:b2:6f:69:0d:ca:a4:fe:c8:62:e2:3e:a4:
68:0c:41:56:71:6d:79:5c:87:b4:ac:b1:b3:d3:0e:21:4b:0a:
8d:be:7c:ca:31:0d:f9:ad:be:8e:6e:e9:06:ad:98:31:c1:85:
72:5f:bb:81:5f:9d:3e:79:95:9f:de:5d:1f:82:99:8a:b3:d7:
e6:79:cf:ac:f2:d5:48:63:1a:04:92:83:bb:94:0a:f3:4b:f2:
e6:fc:67:57:97:79:36:3c:82:3b:37:4b:d9:b8:cf:58:14:53:
c9:4a:26:ad:ff:ab:f6:e6:d5:ba:35:3e:fa:04:ca:af:a4:17:
07:2d:06:9a:80:29:7c:b3:3a:4c:32:6d:16:11:1a:7b:8e:b0:
a0:2c:aa:5a:4f:74:92:3e:f3:91:ee:8a:ce:2b:29:49:be:7a:
4b:36:18:50:e7:0c:11:fe:35:e1:95:42:88:cf:15:70:9d:dc:
bc:ac:d7:07:11:a3:17:f8:a2:94:fd:de:63:96:6f:04:53:d5:
b8:ae:e7:36:d5:33:3c:d8:4b:20:d9:3a:58:a1:af:b5:98:97:
3b:63:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:40:58 2025 by rpki-client