Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa
File: 3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier: EtYjiIo1lhpMcGX2PJTOj6erGt+6zNWTPL+Tj0Fvm6k=
Subject key identifier: 94:CC:F1:49:46:49:D2:B6:E9:56:1F:06:D1:99:4D:E0:57:81:F5:E9
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 7D425DBF91E25FD4615800E5801ED4F39AC2B1F4
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:00 +0000
ROA not before: Wed 11 Jun 2025 16:55:00 +0000
ROA not after: Wed 10 Jun 2026 17:00:00 +0000
asID: 61778
IP address blocks: 200.229.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:42:5d:bf:91:e2:5f:d4:61:58:00:e5:80:1e:d4:f3:9a:c2:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:00 2025 GMT
Not After : Jun 10 17:00:00 2026 GMT
Subject: CN=94CCF1494649D2B6E9561F06D1994DE05781F5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:55:7a:94:ff:b6:f3:ec:f1:2b:82:84:64:
7d:8a:d6:5e:05:4a:ea:bb:43:54:be:19:cf:2c:1b:
7f:03:08:6b:74:53:a8:ee:60:b7:fd:e1:e8:a6:d3:
3f:06:2d:85:3e:56:7c:56:f4:19:ff:5b:85:dc:07:
93:78:3e:46:99:38:37:17:80:1f:dc:0b:c5:e8:30:
d8:a2:04:26:a6:4e:5f:09:aa:a7:91:46:89:68:ec:
1e:44:5e:9f:18:44:db:b6:61:73:2b:64:34:d4:95:
ba:dc:b7:b7:4a:95:14:d5:91:24:04:23:d1:62:93:
c0:22:99:50:a2:ed:f8:a9:93:30:99:f0:b5:a3:8f:
47:9e:0a:ce:6b:da:02:5f:2d:71:80:6d:ef:8e:ca:
24:9b:51:1b:df:36:88:5a:c9:78:1e:eb:f7:52:71:
fb:98:d2:4b:31:14:c6:a1:99:4d:71:30:cf:02:37:
f1:a4:07:8a:19:9b:ea:3b:8d:b7:0d:ff:ce:a7:f4:
47:31:cf:a3:e5:79:9d:be:75:55:1a:71:c7:1c:28:
10:c0:6c:d3:89:74:37:d7:14:85:72:5b:d3:19:1b:
76:bf:1b:e1:6e:be:a9:ac:c4:88:94:99:26:de:0e:
d4:b5:b9:3a:2f:04:11:3a:7f:b5:cb:33:e0:e5:c9:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:F1:49:46:49:D2:B6:E9:56:1F:06:D1:99:4D:E0:57:81:F5:E9
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.208.0/24
Signature Algorithm: sha256WithRSAEncryption
33:46:0b:69:b5:d4:82:46:bc:5a:53:9b:0a:78:99:ef:f9:74:
d0:35:7d:37:70:a4:78:0c:e6:1a:d0:0c:c4:89:2a:45:4b:dc:
e9:f9:ee:2e:c1:b5:40:0b:dd:ac:4a:a3:68:5c:86:54:8e:ff:
69:8c:d2:d3:ea:08:d9:d2:ad:15:95:30:c6:28:1e:0f:77:03:
33:94:a7:81:b6:a8:26:d9:98:88:c4:a4:d0:ad:e0:b8:92:f8:
c6:4a:6b:64:35:a4:fb:15:31:ac:8e:40:7a:a0:aa:26:e5:5f:
a0:5d:fc:30:a0:6d:1b:e2:5a:c1:2e:68:45:45:ff:91:ae:65:
07:57:74:ed:79:85:b2:07:01:93:f9:e0:27:d8:59:b8:e6:a0:
00:7b:40:be:33:ce:7e:9e:73:47:cb:e6:cf:f1:a9:8d:f7:9f:
37:7c:cb:ff:f8:f8:9f:ba:7b:82:e5:2c:71:07:ac:58:ce:6d:
0c:3d:99:0a:24:23:3c:0b:8f:30:22:54:b2:ec:52:9f:d2:d2:
06:01:82:32:77:4a:c8:ee:7b:83:aa:c1:bc:e3:96:31:63:8c:
10:7c:11:f6:c2:a7:b1:46:72:e7:66:7d:64:49:bb:8b:1b:0d:
02:7d:7e:22:aa:61:d7:ae:09:a8:a7:74:7e:92:1f:da:df:3a:
86:8e:4f:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfUJdv5HiX9RhWADlgB7U85rCsfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ5Njg2MENFRDQ2RTgyODYwNDk4REQ5NDY2MDFEMTY4
MTQ3OTIwQjAeFw0yNTA2MTExNjU1MDBaFw0yNjA2MTAxNzAwMDBaMDMxMTAvBgNV
BAMTKDk0Q0NGMTQ5NDY0OUQyQjZFOTU2MUYwNkQxOTk0REUwNTc4MUY1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1lV6lP+28+zxK4KEZH2K1l4F
Suq7Q1S+Gc8sG38DCGt0U6juYLf94eim0z8GLYU+VnxW9Bn/W4XcB5N4PkaZODcX
gB/cC8XoMNiiBCamTl8JqqeRRolo7B5EXp8YRNu2YXMrZDTUlbrct7dKlRTVkSQE
I9Fik8AimVCi7fipkzCZ8LWjj0eeCs5r2gJfLXGAbe+OyiSbURvfNohayXge6/dS
cfuY0ksxFMahmU1xMM8CN/GkB4oZm+o7jbcN/86n9Ecxz6PleZ2+dVUaccccKBDA
bNOJdDfXFIVyW9MZG3a/G+FuvqmsxIiUmSbeDtS1uTovBBE6f7XLM+DlyWSPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlMzxSUZJ0rbpVh8G0ZlN4FeB9ekwHwYDVR0j
BBgwFoAUNJaGDO1G6ChgSY3ZRmAdFoFHkgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndxcHdHZnE3NUZ1Ylk2ZnpFblZSaDF2QU5VRXh3dkxCcFpjRDd0d0Jp
VFMvMC8zNDk2ODYwQ0VENDZFODI4NjA0OThERDk0NjYwMUQxNjgxNDc5MjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OTY4NjBDRUQ0NkU4Mjg2
MDQ5OEREOTQ2NjAxRDE2ODE0NzkyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3cXB3R2ZxNzVGdWJZNmZ6RW5WUmgxdkFOVUV4d3ZMQnBaY0Q3dHdCaVRTLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5dAwDQYJKoZIhvcNAQELBQADggEBADNGC2m1
1IJGvFpTmwp4me/5dNA1fTdwpHgM5hrQDMSJKkVL3On57i7BtUAL3axKo2hchlSO
/2mM0tPqCNnSrRWVMMYoHg93AzOUp4G2qCbZmIjEpNCt4LiS+MZKa2Q1pPsVMayO
QHqgqiblX6Bd/DCgbRviWsEuaEVF/5GuZQdXdO15hbIHAZP54CfYWbjmoAB7QL4z
zn6ec0fL5s/xqY33nzd8y//4+J+6e4LlLHEHrFjObQw9mQokIzwLjzAiVLLsUp/S
0gYBgjJ3Ssjue4OqwbzjljFjjBB8EfbCp7FGcudmfWRJu4sbDQJ9fiKqYdeuCain
dH6SH9rfOoaOTxo=
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:28:17 2025 by rpki-client