Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa
File: 3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa (raw, json)
Hash identifier: xDGByOBXJLWGj8BUeAsYBdgxL7hLMfjtnTtCTAxe6js=
Subject key identifier: A4:E7:5B:5E:46:B8:2F:B3:4A:09:43:18:E3:E0:E7:8E:22:B8:E5:AA
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 1921C9CFE621FBBF56AA70592B653D1C65640761
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:00 +0000
ROA not before: Wed 11 Jun 2025 16:55:00 +0000
ROA not after: Wed 10 Jun 2026 17:00:00 +0000
asID: 61778
IP address blocks: 200.229.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:21:c9:cf:e6:21:fb:bf:56:aa:70:59:2b:65:3d:1c:65:64:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:00 2025 GMT
Not After : Jun 10 17:00:00 2026 GMT
Subject: CN=A4E75B5E46B82FB34A094318E3E0E78E22B8E5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:6d:90:73:b3:40:35:90:c0:c1:55:cb:c9:
4d:59:8c:5c:92:f0:8d:62:7d:81:6e:05:d4:05:39:
43:76:e9:47:98:62:17:9f:23:ef:d6:eb:76:5a:e5:
93:ce:69:30:f8:bb:77:c6:a5:f2:3a:ae:7f:f5:81:
cb:da:3c:da:02:d1:56:59:ff:86:47:e3:ff:b7:f8:
5f:8d:21:50:7d:63:c1:fd:16:f7:ae:b4:43:6f:6e:
dd:22:81:bf:85:cb:9e:f5:37:3f:9b:0e:d0:24:81:
7a:68:af:c9:7a:40:8c:7a:68:53:16:8f:ed:98:b8:
6d:c2:f6:70:5d:d6:98:ec:04:64:eb:a4:5f:37:b5:
b6:21:0b:08:88:6a:ee:5f:a5:1c:98:11:a6:c2:f9:
dc:6a:22:69:c5:b8:c7:c1:32:9c:bf:af:5a:3a:87:
32:fd:18:16:72:99:31:3a:33:b2:92:b7:39:06:0e:
ce:a2:4a:f0:dc:c5:66:f8:4a:d2:98:b9:89:bd:b9:
82:2b:65:90:1c:2c:ea:f4:2f:9f:15:da:d5:93:6c:
6d:5f:c5:83:a0:4b:6b:64:0e:54:9a:a7:23:63:17:
a8:ac:ad:32:e1:d3:b9:86:58:10:f6:cb:c7:db:9f:
10:15:ea:c1:52:22:c0:a1:90:46:1d:d8:f1:c5:c8:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:5B:5E:46:B8:2F:B3:4A:09:43:18:E3:E0:E7:8E:22:B8:E5:AA
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:2a:c6:67:1d:84:cb:85:e7:c2:7b:c6:4a:1c:84:67:cc:db:
62:2b:45:a7:1b:43:f1:9c:20:74:ab:95:07:9b:f0:51:89:0c:
b9:90:1e:f7:4e:5e:59:94:f9:ed:4f:9c:b3:a6:26:37:bd:f7:
25:7d:e0:f9:ab:c2:36:cb:fa:a0:99:ef:2c:c8:56:d9:c3:47:
5e:46:32:e4:b7:a8:d4:3a:4d:3a:9e:0c:31:be:f7:0e:47:fa:
2a:91:bc:c2:4d:47:39:99:83:77:a0:80:30:99:e5:e3:9b:91:
86:4d:e1:03:21:c7:68:43:97:76:52:24:77:9a:5f:bc:e5:5e:
b6:2f:8b:09:67:19:df:c5:be:12:55:8a:ec:44:45:dd:bd:aa:
89:e7:7c:5b:42:be:a4:e4:5b:d1:b8:29:71:7f:cc:d9:55:9e:
00:78:c3:cf:b7:3e:e9:1a:40:a8:7b:f4:ef:fd:86:c3:00:42:
a4:a7:50:17:9e:e8:dc:90:9c:4b:c4:5d:31:f5:22:44:c5:a1:
0c:fd:9f:67:40:e6:c1:3a:c2:f6:18:3a:9c:3a:f5:3f:d2:41:
70:d9:6f:38:c6:81:c8:8e:86:37:79:59:f5:e7:e1:cb:c0:8c:
aa:49:0b:97:d8:74:4c:3e:fe:8b:09:34:cb:f9:c9:f0:96:34:
10:19:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:37:15 2025 by rpki-client