Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
File: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (raw, json)
Hash identifier: /4/admKkpygH8OoU1xl8OLpVfDa9vSOalsoWsc6eXeQ=
Subject key identifier: 84:8E:90:DE:84:8C:86:53:82:5B:FA:72:97:19:CB:84:2F:6C:87:93
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 569911AC20CBB755E87327D9D415A4AC3538439A
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:01 +0000
ROA not before: Mon 17 Mar 2025 14:42:01 +0000
ROA not after: Mon 16 Mar 2026 14:47:01 +0000
asID: 11432
IP address blocks: 200.201.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:99:11:ac:20:cb:b7:55:e8:73:27:d9:d4:15:a4:ac:35:38:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:01 2025 GMT
Not After : Mar 16 14:47:01 2026 GMT
Subject: CN=848E90DE848C8653825BFA729719CB842F6C8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:44:e6:ea:06:43:61:c5:59:6c:ad:54:77:
b5:8d:d2:76:5d:09:93:be:96:33:ae:4f:28:44:f5:
e8:2f:27:45:e1:91:26:b6:3e:cd:47:bd:e6:37:fc:
cc:c2:0f:11:ce:19:cf:e7:a6:5a:2f:0c:3f:ec:cd:
36:34:a7:20:4a:e5:0f:6e:a0:98:09:07:eb:89:ce:
2d:e2:7c:cc:27:c1:1e:7f:1e:70:0d:c9:61:31:cb:
9f:d2:88:e1:85:90:99:92:2a:cc:95:b9:5f:03:35:
3b:10:1d:d0:be:e6:4b:42:42:38:c2:2f:be:80:be:
d0:d4:76:ac:cd:22:4f:bc:16:50:38:92:58:a3:f8:
fc:ce:aa:3e:86:29:eb:19:6f:f4:2f:5f:1e:2e:22:
01:8b:94:fe:b4:c0:4f:99:c6:41:b0:de:3a:28:f0:
f0:08:15:f5:d2:69:c9:7f:85:83:7e:8c:85:6f:62:
cc:83:26:32:6f:1a:6d:8c:cc:18:7a:c3:a1:45:71:
34:a1:d8:87:e2:02:71:04:af:00:02:2c:14:2e:35:
ae:7e:e7:6d:fc:43:b9:7c:57:9c:23:0b:25:cb:2f:
6b:fa:a8:9c:2a:b8:6d:21:14:bf:b8:81:9e:07:6d:
24:a7:03:63:4f:4b:bb:cd:1d:6b:8b:fd:7f:61:8f:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8E:90:DE:84:8C:86:53:82:5B:FA:72:97:19:CB:84:2F:6C:87:93
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.201.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:d3:16:45:37:8c:c3:03:57:05:36:08:57:4d:56:c9:ea:a3:
2e:30:25:00:0a:80:f2:3c:d1:57:2c:9d:2d:8e:8a:2f:19:23:
0c:4d:92:2c:e7:68:ca:38:9a:12:45:ef:65:8b:08:24:19:49:
37:65:f2:50:16:30:ed:eb:f0:f5:67:cc:be:5e:ee:21:51:5b:
27:f3:d1:51:c9:6c:e6:84:5f:c5:ba:2f:20:6c:dc:2f:ed:8b:
7a:94:3b:cf:6d:22:c5:5b:f2:39:47:2d:ea:98:af:ea:37:92:
88:09:68:46:50:29:c6:cf:23:c4:72:d4:73:c0:f0:f1:c6:95:
ed:9b:fc:69:df:88:7b:0c:ca:04:7b:d9:3c:f2:f6:54:32:98:
17:20:42:62:4f:43:3a:7c:d3:1d:be:e1:9f:94:1e:f1:39:cf:
6c:91:b6:18:cf:d6:27:95:25:9e:5d:0a:88:42:0d:cc:6b:89:
99:fb:95:c5:d1:69:9f:1f:2f:c9:b9:30:16:3f:51:ec:99:5b:
85:d6:04:75:43:ad:65:11:f3:6d:c2:04:8a:9e:40:f5:9f:c2:
06:8a:c8:39:44:3e:7f:a9:6b:21:52:e0:c0:98:5b:7c:07:ce:
ab:65:96:32:a2:2e:f9:8c:c5:30:1b:14:a1:b5:d8:1f:2d:be:
30:db:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:56:31 2025 by rpki-client