Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
File: 3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier: UyFdwAgsBjccSpLKdXEaTK69h1lV2LQcZGUBr+y3zU0=
Subject key identifier: CB:56:43:8D:06:29:4F:2D:8E:D4:2D:10:1B:FA:2C:99:71:81:48:9C
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 44629BA1F9E095A5F9620269CF3DD29BAF45119B
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
Signing time: Tue 07 Jan 2025 13:28:19 +0000
ROA not before: Tue 07 Jan 2025 13:23:19 +0000
ROA not after: Tue 06 Jan 2026 13:28:19 +0000
asID: 271670
IP address blocks: 200.150.252.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:62:9b:a1:f9:e0:95:a5:f9:62:02:69:cf:3d:d2:9b:af:45:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Jan 7 13:23:19 2025 GMT
Not After : Jan 6 13:28:19 2026 GMT
Subject: CN=CB56438D06294F2D8ED42D101BFA2C997181489C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:b8:77:ee:67:bb:0f:e8:3c:08:12:83:7e:
fc:d8:da:a7:f9:58:c4:04:2f:c9:26:73:7a:f6:41:
89:4a:0c:d3:b7:80:50:fe:4d:5d:eb:ab:f7:f2:d1:
0b:5f:e6:09:ef:99:3e:69:05:e4:70:d6:8f:f0:ba:
eb:f4:43:92:28:32:ca:94:28:0b:1e:62:8e:19:a4:
2e:81:0f:c6:10:32:95:94:bc:87:87:11:6d:1f:f3:
8d:e4:2b:50:34:68:7b:f7:ee:ca:33:ee:b1:bb:00:
60:d1:3d:9c:8d:94:fe:59:68:00:da:41:82:24:0d:
33:3b:6b:72:35:5f:53:54:7d:eb:f4:c6:69:b5:aa:
c7:7f:0f:cf:35:f3:dd:d1:19:63:64:6f:eb:56:88:
e7:52:01:42:5e:63:43:0a:ea:c6:cb:dd:09:d8:fe:
91:5d:e5:56:1e:41:e7:70:03:a9:a6:b7:d5:94:32:
d1:bd:47:c1:b4:eb:e0:98:e0:aa:a1:dd:60:2d:6b:
a6:10:06:09:20:01:65:1a:7b:c9:68:de:49:1f:90:
88:8d:13:c4:09:7e:17:8a:8d:cb:04:41:4b:dc:06:
6d:dc:bd:6c:4b:af:43:ad:56:c1:c3:ee:23:ed:f6:
f7:ef:28:ad:52:6e:bc:19:69:35:3d:af:f1:49:af:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:43:8D:06:29:4F:2D:8E:D4:2D:10:1B:FA:2C:99:71:81:48:9C
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.252.0/24
Signature Algorithm: sha256WithRSAEncryption
98:76:35:db:9e:40:84:9d:6a:b0:2c:9a:de:ff:9c:3e:5c:a7:
2b:0d:ea:56:76:bb:1d:88:a7:7f:ef:29:34:13:be:57:7b:7f:
48:02:62:ed:f6:40:10:e7:3f:27:cc:14:61:21:9d:7a:a4:80:
c5:7a:4a:0b:c8:90:93:af:fe:4f:fc:88:68:2d:cf:30:4b:e4:
85:d6:13:38:ca:28:a5:db:eb:1b:76:2c:db:05:89:19:3e:1a:
a9:af:b2:a7:f1:e9:57:d7:ca:d9:ce:91:2d:8e:1f:5b:67:63:
91:d1:05:97:0e:1d:dd:69:40:36:75:8e:58:0b:1c:02:6d:7f:
57:e8:e4:4b:87:10:f3:54:e2:d2:0f:45:f2:24:ca:26:44:f0:
b4:01:c5:32:9b:67:d5:f8:b0:77:53:6c:35:f1:2f:89:9d:f9:
81:eb:79:f4:cb:3e:cc:01:0d:a8:3d:08:2c:91:ec:58:95:2e:
4d:52:9e:f0:3b:ec:94:bc:d4:e1:6c:da:e2:52:72:c9:a2:1b:
6c:d6:d0:ce:80:42:31:d9:ae:98:ae:7c:01:dc:f7:41:c4:6c:
1a:f6:00:42:23:96:c1:7f:f5:18:cc:2f:21:0f:ca:68:50:9b:
ed:43:2f:85:1e:dd:7b:0e:2b:6d:e8:91:87:b3:15:02:84:a8:
96:4f:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:12:33 2025 by rpki-client