Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa
File: 3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier: VKbOhAeILTs1R6Nsqg597azICWoB1UsHJczEgKSvQmc=
Subject key identifier: 30:ED:9E:EC:07:D6:7B:04:4C:09:81:5C:77:12:5D:55:44:7E:73:2A
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 268E236D56791E5E772722CCEA11FDA91134750D
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:01 +0000
ROA not before: Wed 11 Jun 2025 16:55:01 +0000
ROA not after: Wed 10 Jun 2026 17:00:01 +0000
asID: 61778
IP address blocks: 200.229.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8e:23:6d:56:79:1e:5e:77:27:22:cc:ea:11:fd:a9:11:34:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:01 2025 GMT
Not After : Jun 10 17:00:01 2026 GMT
Subject: CN=30ED9EEC07D67B044C09815C77125D55447E732A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:88:5c:cc:71:bb:09:53:3d:58:76:da:fc:
d7:8d:8e:fa:a5:47:a2:7a:a5:9d:29:ff:12:b6:9e:
97:1e:b4:0c:4f:41:60:83:65:ee:13:f1:5b:75:67:
0a:72:30:9e:1c:a6:98:63:68:86:bf:ca:07:20:e7:
84:f6:53:a7:9e:12:b8:43:cc:9b:4c:ed:15:5b:7f:
89:af:75:4e:c3:9a:e0:cc:3d:c3:96:a9:3d:37:fb:
80:8a:72:b9:00:06:69:a5:aa:e5:04:29:01:ce:db:
25:30:0b:6a:02:11:40:6f:5a:92:a7:93:57:17:b1:
3c:c8:f8:ad:aa:0b:45:b9:92:f6:c5:ab:bd:f6:88:
fd:24:ad:52:2c:c9:68:55:17:af:3c:8d:cd:6a:54:
7d:8f:e6:a5:fb:1b:e5:e2:37:6e:1f:ae:45:dd:65:
0d:58:45:70:66:ed:96:28:be:dc:40:08:d6:ff:d2:
09:cb:90:e4:75:f8:b4:ff:d5:9e:26:80:d0:ed:67:
77:1c:37:47:c4:dc:f2:ff:17:32:96:54:fd:ce:c9:
85:86:d4:c5:be:3f:9f:a0:44:17:9a:48:49:61:0b:
c6:f3:94:8b:36:cb:2c:fd:f5:9d:78:32:df:8a:62:
01:8c:50:fd:2d:fa:5c:02:d3:81:d1:63:a5:8b:cb:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:ED:9E:EC:07:D6:7B:04:4C:09:81:5C:77:12:5D:55:44:7E:73:2A
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9e:ed:7d:90:f5:51:bd:12:8b:7d:0f:89:c7:3e:e0:c2:1a:
0c:03:f5:a2:de:88:aa:7a:e2:a3:a8:01:0c:33:4f:16:2a:44:
27:72:2c:7b:58:8e:b4:3c:3f:c0:34:d8:a1:54:d5:89:23:08:
b2:69:24:db:94:dc:9a:11:62:20:ad:bb:33:94:65:b1:86:4d:
9b:ff:c3:12:2e:9c:b8:95:01:77:1a:4a:85:e8:b4:f7:6f:4a:
9b:f2:a7:69:0f:33:aa:6c:1c:86:5e:e6:c2:e8:72:74:5e:7e:
8e:8c:49:c5:fd:1c:3e:63:4a:38:ea:54:b3:77:ca:6a:9b:c6:
4d:4e:83:60:c7:e4:7d:6b:5c:cf:f9:71:3c:ea:60:16:93:72:
bc:2d:2d:16:d6:2b:10:b2:9f:a0:72:e4:3d:8f:ab:c2:03:31:
2a:fe:b0:f2:27:be:50:a2:df:a9:79:08:20:b5:e3:2e:a2:3c:
0f:da:8a:fc:41:57:2b:59:fe:95:31:51:9f:e7:19:56:20:a2:
67:48:74:ac:54:f8:d5:1a:64:8b:d5:d9:be:79:c2:d5:ce:76:
b6:33:e0:4e:a6:72:fe:a1:13:20:68:66:ef:47:6a:22:8e:1c:
2b:80:3b:46:92:dc:eb:dd:58:66:0b:44:5f:aa:b3:86:c4:f9:
41:10:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:49 2025 by rpki-client