Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa
File: 3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier: 9DZtYbONVOPQQ7R4wz1x4Q1DZxu3MphDI5gLo4z8gz8=
Subject key identifier: 3F:3A:10:FD:3C:E8:D0:B4:FD:A2:26:3D:86:31:C7:8C:14:39:A2:ED
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 42F5A6EA12E859565FDDF336D49B3150E84A06EF
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa
Signing time: Fri 07 Feb 2025 16:58:09 +0000
ROA not before: Fri 07 Feb 2025 16:53:09 +0000
ROA not after: Fri 06 Feb 2026 16:58:09 +0000
asID: 271670
IP address blocks: 200.150.253.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f5:a6:ea:12:e8:59:56:5f:dd:f3:36:d4:9b:31:50:e8:4a:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Feb 7 16:53:09 2025 GMT
Not After : Feb 6 16:58:09 2026 GMT
Subject: CN=3F3A10FD3CE8D0B4FDA2263D8631C78C1439A2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:24:43:7b:7d:ab:a8:8b:4d:ca:86:f2:44:
e8:20:d0:cf:b0:3b:1e:0a:54:f9:12:06:5e:99:cb:
95:d3:8c:7d:cd:e5:b0:f2:33:3b:e0:bc:72:6f:0d:
b6:8d:e4:5a:45:e8:f1:6d:ed:ff:64:dd:1b:c2:58:
fe:6c:6a:e9:81:84:a5:cc:90:65:6f:75:0d:62:7d:
b2:b9:54:6f:3f:5d:31:bd:7b:73:6c:16:a1:1f:af:
d2:4b:0f:55:3a:18:f1:7b:64:a8:8a:a3:4d:be:e9:
dd:a5:9b:aa:6d:8c:5c:e8:54:8e:2c:ac:e9:09:61:
2a:9b:f0:34:df:92:9b:27:84:92:16:ac:86:31:9c:
ec:59:99:c5:05:b7:df:de:c2:86:4e:31:1b:14:50:
0b:2b:ef:29:68:51:0f:70:73:b1:bd:da:ec:a6:9a:
3c:93:1e:a1:fd:9c:07:11:8d:a5:22:e2:27:49:57:
54:26:b5:07:86:42:d3:04:7d:0c:7c:80:67:a7:3b:
fa:c1:05:22:a4:ec:38:65:33:c4:aa:43:b8:99:e8:
07:fc:34:36:40:8b:73:75:12:de:cc:4e:23:cd:e5:
bb:b1:5e:a2:0b:95:7b:7d:cb:48:0a:49:d7:4a:cc:
f9:27:c5:c3:7e:a3:4a:5a:02:aa:02:02:55:33:47:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:10:FD:3C:E8:D0:B4:FD:A2:26:3D:86:31:C7:8C:14:39:A2:ED
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.253.0/24
Signature Algorithm: sha256WithRSAEncryption
38:93:92:42:a6:18:9f:4f:ff:ad:9a:07:c6:50:84:a1:19:68:
0d:08:e4:2c:50:d5:05:3a:f9:9d:3a:c2:8a:ab:f4:c5:f3:94:
bc:59:c3:79:bb:68:7d:e1:39:61:17:40:11:5f:97:b8:db:6c:
84:98:16:29:48:46:69:41:3b:e9:bb:6d:89:b3:2b:f7:3b:f3:
8d:82:7f:c4:a5:a5:c6:86:72:70:69:1f:bc:83:38:8d:bf:1b:
2f:7c:96:43:92:d9:77:49:be:de:0d:a6:8b:7c:80:8d:94:0f:
5b:be:4f:cc:a7:44:f2:33:7d:ed:81:18:be:2b:e8:48:14:6b:
85:b0:07:0e:f6:aa:1b:e9:1d:57:a5:5f:d0:70:68:d8:79:ca:
c5:e3:03:e4:6b:00:54:cc:c7:e6:c7:df:78:0a:9b:4e:8a:3e:
b4:d0:82:70:1c:25:a3:6a:82:f2:28:28:93:ac:99:dd:d7:c1:
8d:7b:22:ec:fe:37:de:bb:87:da:a3:06:82:b2:54:ff:d1:fc:
9d:7b:a7:a9:2b:cb:55:86:d6:d2:3e:f5:6d:ba:80:71:62:45:
dd:8d:91:2e:74:bb:f3:f9:24:95:d8:58:40:20:bf:d9:f5:72:
5c:06:88:d5:17:71:f2:b0:87:d6:a6:c8:1f:a4:3d:74:be:ea:
2d:dd:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:19:16 2025 by rpki-client