Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
File: 3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier: p1FemiXd0q1swahn+UXbSzfPX405j+ZbaYxaOHIEubM=
Subject key identifier: 7B:47:A4:D2:42:1A:F3:D2:B1:E3:E0:AB:C5:04:F0:A9:D1:67:9C:5C
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 1C36B58BE7296D996A31AEAB153F51BFAEC96A0B
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
Signing time: Fri 07 Feb 2025 16:58:19 +0000
ROA not before: Fri 07 Feb 2025 16:53:19 +0000
ROA not after: Fri 06 Feb 2026 16:58:19 +0000
asID: 271670
IP address blocks: 200.150.255.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:36:b5:8b:e7:29:6d:99:6a:31:ae:ab:15:3f:51:bf:ae:c9:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Feb 7 16:53:19 2025 GMT
Not After : Feb 6 16:58:19 2026 GMT
Subject: CN=7B47A4D2421AF3D2B1E3E0ABC504F0A9D1679C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:74:13:ca:cb:01:8d:d9:35:db:65:37:2f:
0b:0c:47:fe:bb:f0:28:1c:79:a5:5f:8c:7e:f8:9a:
37:79:02:32:ab:13:ce:12:d6:af:6f:a8:3e:a5:6d:
fb:c0:27:1b:52:54:83:a5:2d:ce:a4:55:21:4f:7c:
cb:8e:96:f4:25:28:69:92:60:26:82:71:97:f0:50:
4f:b2:6e:03:85:c2:e6:27:c1:47:67:0b:b4:1d:ec:
ae:32:22:81:25:da:49:20:72:ca:be:72:32:34:25:
fd:52:6a:97:3a:c1:de:49:28:11:23:66:df:cb:69:
aa:20:bc:a1:84:13:7c:d3:a4:55:a6:54:50:1e:4d:
43:0a:f1:ec:b6:f9:0f:97:5b:a5:43:54:21:67:a4:
f6:75:59:f9:2a:ec:1b:0a:79:78:85:5c:28:d0:fb:
78:29:3f:e0:f2:72:5d:3c:94:45:1d:23:dd:77:39:
01:af:6e:92:62:7c:3c:b3:3c:ad:8a:f2:72:e1:f8:
84:3b:e1:9a:88:12:3b:15:4c:eb:ef:c2:eb:3d:09:
71:80:98:b7:04:50:4a:b0:35:09:9d:56:b7:08:70:
8b:5b:af:36:ec:01:c5:cc:70:d4:64:cb:5a:87:12:
99:23:66:5a:bc:bb:0b:9c:5e:e6:d2:09:93:36:53:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:A4:D2:42:1A:F3:D2:B1:E3:E0:AB:C5:04:F0:A9:D1:67:9C:5C
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2e:56:1e:70:1b:ef:22:5f:27:35:51:83:1b:45:84:01:80:
ec:e1:80:e5:9c:d7:59:e5:87:73:37:d0:50:7d:60:33:03:f8:
02:2a:e2:2a:70:a9:f6:ed:3f:52:8c:6f:bb:26:78:ec:43:d9:
23:5b:9b:a9:34:28:54:36:46:eb:86:23:bd:6a:af:c1:4e:53:
e7:6c:c7:aa:5a:c4:df:7b:ee:4e:81:cd:1d:2c:3e:b5:b7:5c:
09:a1:4e:66:a0:7b:cc:8f:6a:bf:8d:f3:88:8c:3a:02:c8:3d:
7c:b0:a5:34:af:b6:d9:3d:a6:56:a7:70:6c:27:db:8b:ab:4d:
d0:e9:c8:46:db:75:0c:e7:32:84:ea:f3:c5:00:7f:9e:ae:81:
f8:8a:ef:ff:42:fb:c5:25:3b:36:af:d5:55:b1:f9:e9:69:4c:
ee:80:11:67:6d:12:46:0c:e9:7b:68:f8:22:50:93:60:7b:62:
d7:e1:67:5c:64:f7:4c:47:b5:2f:c2:30:96:6c:68:a1:94:29:
ac:0e:28:71:e2:12:f6:f7:1a:f6:b1:28:32:c7:19:29:dc:7c:
7f:12:9f:4b:be:eb:bf:39:dd:60:0e:3d:b4:dc:b6:44:d2:f8:
cc:5d:a4:5f:99:41:eb:0d:a8:4e:98:49:9f:d5:cb:38:a5:7e:
c0:08:94:33
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHDa1i+cpbZlqMa6rFT9Rv67JagswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCREYzOTU2NjY2OTU4ODQxQjY1QjE5NzVENUExQjcx
RDcyMEJDOTAeFw0yNTAyMDcxNjUzMTlaFw0yNjAyMDYxNjU4MTlaMDMxMTAvBgNV
BAMTKDdCNDdBNEQyNDIxQUYzRDJCMUUzRTBBQkM1MDRGMEE5RDE2NzlDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo/XQTyssBjdk122U3LwsMR/67
8CgceaVfjH74mjd5AjKrE84S1q9vqD6lbfvAJxtSVIOlLc6kVSFPfMuOlvQlKGmS
YCaCcZfwUE+ybgOFwuYnwUdnC7Qd7K4yIoEl2kkgcsq+cjI0Jf1Sapc6wd5JKBEj
Zt/LaaogvKGEE3zTpFWmVFAeTUMK8ey2+Q+XW6VDVCFnpPZ1Wfkq7BsKeXiFXCjQ
+3gpP+Dycl08lEUdI913OQGvbpJifDyzPK2K8nLh+IQ74ZqIEjsVTOvvwus9CXGA
mLcEUEqwNQmdVrcIcItbrzbsAcXMcNRky1qHEpkjZlq8uwucXubSCZM2U74XAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUe0ek0kIa89Kx4+CrxQTwqdFnnFwwHwYDVR0j
BBgwFoAU3b3zlWZmlYhBtlsZddWhtx1yC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dOYVVxdGJKU3Y4NnVlSmNydkc1SjlMeHp4ZHMzd2paOHhFRzhDRU5y
emgvMC9EREJERjM5NTY2NjY5NTg4NDFCNjVCMTk3NUQ1QTFCNzFENzIwQkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQkRGMzk1NjY2Njk1ODg0
MUI2NUIxOTc1RDVBMUI3MUQ3MjBCQzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXTmFVcXRiSlN2ODZ1ZUpjcnZHNUo5THh6eGRzM3dqWjh4RUc4Q0VOcnpoLzAv
MzIzMDMwMmUzMTM1MzAyZTMyMzUzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzczMTM2MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMiW/zANBgkqhkiG9w0BAQsFAAOCAQEAqS5W
HnAb7yJfJzVRgxtFhAGA7OGA5ZzXWeWHczfQUH1gMwP4AiriKnCp9u0/UoxvuyZ4
7EPZI1ubqTQoVDZG64YjvWqvwU5T52zHqlrE33vuToHNHSw+tbdcCaFOZqB7zI9q
v43ziIw6Asg9fLClNK+22T2mVqdwbCfbi6tN0OnIRtt1DOcyhOrzxQB/nq6B+Irv
/0L7xSU7Nq/VVbH56WlM7oARZ20SRgzpe2j4IlCTYHti1+FnXGT3TEe1L8Iwlmxo
oZQprA4oceIS9vca9rEoMscZKdx8fxKfS77rvzndYA49tNy2RNL4zF2kX5lB6w2o
TphJn9XLOKV+wAiUMw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:19:18 2025 by rpki-client