Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa
File: 3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier: h24duhdkC1jVokZQqje5tQZNlfKVHb183bpKOsqDzqc=
Subject key identifier: 7F:11:A1:EA:89:1B:16:35:27:A3:CD:AA:7E:71:A1:ED:07:FC:B7:9F
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 50A84B09CA7CF73562479E194D1C03BB7B664495
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:00 +0000
ROA not before: Wed 11 Jun 2025 16:55:00 +0000
ROA not after: Wed 10 Jun 2026 17:00:00 +0000
asID: 61778
IP address blocks: 200.229.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a8:4b:09:ca:7c:f7:35:62:47:9e:19:4d:1c:03:bb:7b:66:44:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:00 2025 GMT
Not After : Jun 10 17:00:00 2026 GMT
Subject: CN=7F11A1EA891B163527A3CDAA7E71A1ED07FCB79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:20:f7:af:b4:a9:73:d2:82:a9:1c:74:05:c8:
f4:16:cf:ab:0b:ad:63:2a:3e:72:67:3c:c0:4d:fe:
cc:85:6a:96:ff:cf:b3:df:c6:65:ab:4d:6c:36:91:
c1:de:cc:d4:c0:ad:80:6b:96:5e:38:56:80:5b:8c:
6f:2d:97:af:14:a8:e8:5c:ba:fd:a0:82:76:73:f9:
df:22:fd:11:da:2d:00:77:96:28:dd:ac:47:8c:14:
29:5f:bb:be:8b:2b:2a:eb:7c:09:60:45:5f:84:65:
1b:84:27:14:db:09:fb:d8:e5:88:80:d5:ce:8c:e1:
ad:ed:ea:e0:04:53:4c:82:aa:01:0d:9a:f7:50:d6:
57:72:f4:2c:02:f6:0b:85:79:80:70:d5:1e:9c:b5:
16:7f:d6:c6:39:5c:58:ba:b1:8a:1f:79:aa:a7:69:
d6:6a:a0:6b:a2:ae:73:1f:cb:89:91:84:d1:04:49:
f4:5b:92:3f:5d:73:0a:5e:7f:4f:38:f2:68:59:4d:
0d:ce:95:b1:03:dc:43:67:2e:bb:d4:a8:77:63:1b:
65:69:ca:80:18:29:24:7f:a2:42:47:12:52:63:07:
99:99:b0:fa:fd:67:77:3c:82:86:5a:3f:28:72:66:
98:f2:fc:fa:93:69:50:08:98:91:47:7e:d1:cd:08:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:A1:EA:89:1B:16:35:27:A3:CD:AA:7E:71:A1:ED:07:FC:B7:9F
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.210.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2b:97:d2:fb:4e:24:de:e2:e0:67:4e:8f:4d:47:f5:90:b7:
fa:44:2e:36:03:07:ae:00:df:36:40:b0:ce:c2:db:34:4e:05:
be:6b:95:ee:e6:0d:12:0b:ca:5d:27:b6:85:ff:b9:50:53:a4:
23:f9:11:8e:e6:03:7f:36:99:88:37:b2:cb:9c:60:42:3f:44:
98:71:5e:f0:58:3e:b2:f9:d1:2a:cb:43:81:16:04:f8:da:59:
76:8b:52:11:84:a7:11:43:4c:4e:66:09:79:13:a5:1a:67:44:
6a:4b:16:d5:8d:d7:37:64:ff:58:9c:39:b8:04:d4:08:29:f8:
4a:80:0b:02:58:10:22:23:fa:f3:65:7a:75:6c:a5:89:78:cc:
b2:18:d1:c0:f6:ff:63:4e:fe:57:a7:8b:63:eb:e3:f7:f6:9a:
2c:68:4d:52:e2:3e:db:d8:9d:69:bf:6d:75:f4:e7:42:5d:9e:
69:50:43:b8:43:bb:99:94:d6:eb:f9:20:14:67:4b:72:ef:2e:
03:47:62:f3:c1:e3:3d:10:c3:df:0d:ac:ea:d5:0c:c7:1d:d9:
d9:ea:eb:62:21:29:72:1e:80:e2:7a:28:75:e0:ca:60:bb:79:
f6:a6:55:55:25:e6:71:36:6c:e7:4e:1f:4e:15:20:a6:33:7e:
ff:e9:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:55:50 2025 by rpki-client