Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa
File: 3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa (raw, json)
Hash identifier: qxxXMIkyCjeDjzM/XAFIUvR+L63ubRREo+lq5Ej19dc=
Subject key identifier: 1D:27:DB:F2:AB:8E:B3:2B:39:F1:B6:54:31:28:96:4C:56:58:53:79
Certificate issuer: /CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
Certificate serial: 3AD49262CE49477267A219620C8252B131B2B786
Authority key identifier: 0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa
Signing time: Wed 21 May 2025 19:42:24 +0000
ROA not before: Wed 21 May 2025 19:37:24 +0000
ROA not after: Wed 20 May 2026 19:42:24 +0000
asID: 61774
IP address blocks: 200.225.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:92:62:ce:49:47:72:67:a2:19:62:0c:82:52:b1:31:b2:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
Validity
Not Before: May 21 19:37:24 2025 GMT
Not After : May 20 19:42:24 2026 GMT
Subject: CN=1D27DBF2AB8EB32B39F1B6543128964C56585379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:6f:98:07:e9:bd:3d:7d:5e:fe:aa:b9:73:
ef:4c:30:e2:32:04:56:3a:e2:02:4d:e5:3a:28:a3:
6e:3e:07:39:8b:19:27:ea:35:0b:91:33:aa:86:73:
ae:0c:1c:05:ce:33:7f:2a:c3:12:fa:e6:e1:6a:d9:
dc:06:db:ca:58:19:5b:96:74:03:ea:b4:b2:36:00:
67:c8:8b:7f:a9:61:b5:ad:54:b7:fb:7f:43:e0:0e:
28:78:90:ae:46:ec:36:b5:c0:c6:8f:da:e4:57:c2:
88:1f:e2:0e:d1:99:44:b7:c1:82:6e:db:1b:75:87:
b0:89:20:30:73:2e:e5:18:7d:4e:aa:a8:08:fc:2c:
de:f5:33:6e:17:9c:8f:0e:e2:03:df:dc:c2:2b:30:
62:f0:5d:52:90:37:5a:a7:0c:ff:06:58:a2:ae:32:
f7:c3:da:e7:b3:4e:64:e9:76:06:aa:84:86:ec:5b:
ba:c7:a4:66:82:12:ab:20:e3:17:2e:8a:0c:74:ec:
e5:b7:6b:49:d9:e5:04:ad:53:b9:f5:29:cc:5c:e8:
0a:e4:c8:ad:35:0d:6f:6d:69:0b:c7:9f:78:fc:19:
fe:0c:0e:7f:e2:c9:e2:a1:83:53:4e:64:b9:16:eb:
3d:62:ed:0e:ee:61:3c:83:4a:2d:79:55:82:2b:a1:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:DB:F2:AB:8E:B3:2B:39:F1:B6:54:31:28:96:4C:56:58:53:79
X509v3 Authority Key Identifier:
keyid:0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c2:16:ad:da:b2:ae:f0:36:19:ea:66:d4:63:84:58:08:0a:
a9:01:dd:63:e0:80:21:cb:fd:c5:ac:2e:56:27:fc:80:23:56:
43:e9:3f:02:72:e4:dc:85:69:05:f1:e4:18:aa:29:50:2a:66:
e6:c9:6b:dd:6f:cf:e9:33:2e:03:1e:95:d0:d2:05:f5:5b:b7:
9b:dc:78:94:e0:e3:b8:1c:6f:f0:a5:f0:df:15:6a:31:61:5b:
52:6a:d4:77:42:65:7c:f6:fd:f4:ce:13:e9:13:5f:cc:38:8d:
06:4d:59:56:3c:59:50:22:2d:38:26:c6:36:df:d5:97:e1:ae:
ba:87:2b:08:c2:a3:61:54:8a:40:ec:61:18:6c:74:6d:7c:d7:
4a:b7:9f:db:e4:f5:60:2b:d0:6c:e6:c2:aa:4e:e7:91:25:08:
ec:83:96:f4:bb:73:96:62:e8:80:ce:f5:80:35:f3:5f:ce:0c:
63:b5:b2:28:81:88:47:b0:5f:f4:89:25:f0:05:10:25:d3:c9:
a8:79:33:87:d3:aa:23:0f:93:98:6f:55:24:af:48:8b:aa:d1:
49:02:24:26:c0:b9:2f:94:34:ce:e1:49:7d:e9:a6:05:f9:dd:
4c:4e:1b:c8:85:3d:31:67:cf:06:76:b4:ec:00:53:f9:10:4d:
aa:60:12:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOtSSYs5JR3JnohliDIJSsTGyt4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM2QkY4QTNCMTU0QTM1NzlEQTAyMkNDRTQyQTBFNzMx
MUYxMzMyODAeFw0yNTA1MjExOTM3MjRaFw0yNjA1MjAxOTQyMjRaMDMxMTAvBgNV
BAMTKDFEMjdEQkYyQUI4RUIzMkIzOUYxQjY1NDMxMjg5NjRDNTY1ODUzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkm+YB+m9PX1e/qq5c+9MMOIy
BFY64gJN5Tooo24+BzmLGSfqNQuRM6qGc64MHAXOM38qwxL65uFq2dwG28pYGVuW
dAPqtLI2AGfIi3+pYbWtVLf7f0PgDih4kK5G7Da1wMaP2uRXwogf4g7RmUS3wYJu
2xt1h7CJIDBzLuUYfU6qqAj8LN71M24XnI8O4gPf3MIrMGLwXVKQN1qnDP8GWKKu
MvfD2uezTmTpdgaqhIbsW7rHpGaCEqsg4xcuigx07OW3a0nZ5QStU7n1Kcxc6Ark
yK01DW9taQvHn3j8Gf4MDn/iyeKhg1NOZLkW6z1i7Q7uYTyDSi15VYIroZ4DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHSfb8quOsys58bZUMSiWTFZYU3kwHwYDVR0j
BBgwFoAUDGv4o7FUo1edoCLM5CoOcxHxMygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZvcExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5
SGovMC8wQzZCRjhBM0IxNTRBMzU3OURBMDIyQ0NFNDJBMEU3MzExRjEzMzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDNkJGOEEzQjE1NEEzNTc5
REEwMjJDQ0U0MkEwRTczMTFGMTMzMjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlmb3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzAv
MzIzMDMwMmUzMjMyMzUyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI4YgwDQYJKoZIhvcNAQELBQADggEBAInCFq3a
sq7wNhnqZtRjhFgICqkB3WPggCHL/cWsLlYn/IAjVkPpPwJy5NyFaQXx5BiqKVAq
ZubJa91vz+kzLgMeldDSBfVbt5vceJTg47gcb/Cl8N8VajFhW1Jq1HdCZXz2/fTO
E+kTX8w4jQZNWVY8WVAiLTgmxjbf1ZfhrrqHKwjCo2FUikDsYRhsdG1810q3n9vk
9WAr0GzmwqpO55ElCOyDlvS7c5Zi6IDO9YA181/ODGO1siiBiEewX/SJJfAFECXT
yah5M4fTqiMPk5hvVSSvSIuq0UkCJCbAuS+UNM7hSX3ppgX53UxOG8iFPTFnzwZ2
tOwAU/kQTapgEgg=
-----END CERTIFICATE-----
Generated at Sat Jun 21 09:28:27 2025 by rpki-client