Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3230302e3136392e302e302f32302d3234203d3e203231353734.roa
File: 3230302e3136392e302e302f32302d3234203d3e203231353734.roa (raw, json)
Hash identifier: wYoKSGd8Z3XPsYLksDLxPAsXWOToG3AL8DLmw4bTlRc=
Subject key identifier: 3C:68:3D:D7:FD:12:50:36:1B:21:9F:44:39:CB:63:72:20:05:34:18
Certificate issuer: /CN=BD88CE604EA701BD2303A3A26D97C728956C0781
Certificate serial: 339C782FD8B6EE4D5708665DC4641CEA4B818A3F
Authority key identifier: BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3230302e3136392e302e302f32302d3234203d3e203231353734.roa
Signing time: Tue 07 May 2024 18:17:03 +0000
ROA not before: Tue 07 May 2024 18:12:03 +0000
ROA not after: Tue 06 May 2025 18:17:03 +0000
asID: 21574
IP address blocks: 200.169.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9c:78:2f:d8:b6:ee:4d:57:08:66:5d:c4:64:1c:ea:4b:81:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD88CE604EA701BD2303A3A26D97C728956C0781
Validity
Not Before: May 7 18:12:03 2024 GMT
Not After : May 6 18:17:03 2025 GMT
Subject: CN=3C683DD7FD1250361B219F4439CB637220053418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:5e:09:f0:49:d5:df:34:d7:57:15:c4:44:
bb:fb:ad:a3:04:d6:50:69:db:9d:98:70:7c:d0:7f:
fb:a3:80:a7:e8:e1:1f:b9:c4:6b:45:ce:3d:2f:b1:
f0:ac:99:74:c6:89:35:6c:bb:13:46:f9:5b:9d:8a:
ca:f2:a2:a3:cc:f4:30:c0:7e:90:ab:94:4b:99:66:
7c:41:5a:2d:41:2d:42:0c:21:12:6c:d7:c5:3b:2e:
f7:0d:09:0e:35:33:e4:70:49:73:e5:5a:fd:92:44:
94:fb:fe:a0:b9:cd:47:ea:82:0e:4a:2c:95:d5:f2:
67:a6:67:8e:49:ab:90:07:4a:40:24:4d:ef:e1:4e:
82:66:cc:ed:2d:72:fc:00:4a:17:06:06:8b:a9:2d:
c5:1c:d0:d8:81:d4:dc:91:d4:e2:f7:4c:77:33:b9:
78:4b:32:69:4f:ce:ae:88:bc:9a:0d:1b:09:55:8f:
14:5d:0f:a6:e3:3e:74:c1:78:e7:8c:f0:21:e9:69:
29:23:36:ec:a6:45:36:d7:f7:37:65:b1:a7:31:8f:
c6:c8:0d:10:44:a1:01:5e:60:92:05:78:78:13:ba:
df:d6:c5:45:4f:6a:75:9e:6a:a0:11:26:6f:1d:04:
43:46:1d:bb:98:1d:6f:d4:dc:4f:da:92:bc:b7:cf:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:3D:D7:FD:12:50:36:1B:21:9F:44:39:CB:63:72:20:05:34:18
X509v3 Authority Key Identifier:
keyid:BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/BD88CE604EA701BD2303A3A26D97C728956C0781.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3230302e3136392e302e302f32302d3234203d3e203231353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.169.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:14:96:59:9b:ea:37:00:b9:c6:6a:f9:b0:6f:fe:c1:d5:78:
e9:ae:e1:4f:0f:f7:22:7c:44:f8:f7:5a:88:5c:db:e5:7a:9d:
4c:1f:56:c0:50:54:91:02:9e:9a:3d:c6:7f:70:fa:1f:6a:5d:
5e:96:a0:a1:86:77:73:7e:27:31:f6:64:98:72:08:c0:b8:31:
df:04:0e:1f:d8:7d:24:22:f2:07:67:23:83:81:fc:80:62:32:
e1:72:f3:64:56:45:4b:bb:f9:f0:33:b2:b8:af:89:97:75:b5:
f8:da:1e:b2:9f:4e:cc:2c:c3:ab:0c:a0:2c:4a:97:71:32:09:
f6:d6:aa:9e:95:58:0e:66:05:b5:28:b6:a7:f3:11:8b:c8:28:
fd:c4:74:e3:ef:89:c4:84:3c:19:8e:08:6f:e0:f1:a3:b5:d7:
90:af:4e:02:85:78:2a:0e:18:08:a7:a6:25:af:ce:b4:78:1b:
07:5e:14:54:9c:0b:dd:33:f3:0b:7d:34:d0:2d:33:17:fc:c4:
7e:07:8c:24:40:37:3a:14:b2:17:78:c7:6c:95:4b:3e:0e:fd:
e5:6f:69:ba:e0:21:5b:60:9f:9f:80:4f:b8:7e:ff:16:9c:3d:
8c:9a:5e:2b:f0:4c:fd:33:b4:15:2d:37:f8:00:3a:94:7c:67:
f5:03:24:51
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUM5x4L9i27k1XCGZdxGQc6kuBij8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4OENFNjA0RUE3MDFCRDIzMDNBM0EyNkQ5N0M3Mjg5
NTZDMDc4MTAeFw0yNDA1MDcxODEyMDNaFw0yNTA1MDYxODE3MDNaMDMxMTAvBgNV
BAMTKDNDNjgzREQ3RkQxMjUwMzYxQjIxOUY0NDM5Q0I2MzcyMjAwNTM0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOV4J8EnV3zTXVxXERLv7raME
1lBp252YcHzQf/ujgKfo4R+5xGtFzj0vsfCsmXTGiTVsuxNG+VudisryoqPM9DDA
fpCrlEuZZnxBWi1BLUIMIRJs18U7LvcNCQ41M+RwSXPlWv2SRJT7/qC5zUfqgg5K
LJXV8memZ45Jq5AHSkAkTe/hToJmzO0tcvwAShcGBoupLcUc0NiB1NyR1OL3THcz
uXhLMmlPzq6IvJoNGwlVjxRdD6bjPnTBeOeM8CHpaSkjNuymRTbX9zdlsacxj8bI
DRBEoQFeYJIFeHgTut/WxUVPanWeaqARJm8dBENGHbuYHW/U3E/akry3z7kzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPGg91/0SUDYbIZ9EOctjciAFNBgwHwYDVR0j
BBgwFoAUvYjOYE6nAb0jA6OibZfHKJVsB4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzF3ejNhbzRKcWJOOTNIcnFTWlo3SjRVTHlBRjFIV3dQWW1qZURjbmE3
OGYvMC9CRDg4Q0U2MDRFQTcwMUJEMjMwM0EzQTI2RDk3QzcyODk1NkMwNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEODhDRTYwNEVBNzAxQkQy
MzAzQTNBMjZEOTdDNzI4OTU2QzA3ODEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxd3ozYW80SnFiTjkzSHJxU1paN0o0VUx5QUYxSFd3UFltamVEY25hNzhmLzAv
MzIzMDMwMmUzMTM2MzkyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMTM1
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMipADANBgkqhkiG9w0BAQsFAAOCAQEAfhSWWZvqNwC5
xmr5sG/+wdV46a7hTw/3InxE+PdaiFzb5XqdTB9WwFBUkQKemj3Gf3D6H2pdXpag
oYZ3c34nMfZkmHIIwLgx3wQOH9h9JCLyB2cjg4H8gGIy4XLzZFZFS7v58DOyuK+J
l3W1+Noesp9OzCzDqwygLEqXcTIJ9taqnpVYDmYFtSi2p/MRi8go/cR04++JxIQ8
GY4Ib+Dxo7XXkK9OAoV4Kg4YCKemJa/OtHgbB14UVJwL3TPzC3000C0zF/zEfgeM
JEA3OhSyF3jHbJVLPg795W9puuAhW2Cfn4BPuH7/Fpw9jJpeK/BM/TO0FS03+AA6
lHxn9QMkUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:49 2025 by rpki-client