Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133352e302f32342d3234203d3e20323633323633.roa
File: 3230302e33332e3133352e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier: eH3lq7n962j4gQktedoEHdRi6OPzmdSmyPeVaxMgNvk=
Subject key identifier: 84:39:89:C0:D8:0A:23:40:63:52:5F:6F:0C:16:B3:8C:08:3A:70:2F
Certificate issuer: /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial: 75AA8AAC9594DEA6E4BA3CF64D8514BB73F2EA86
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133352e302f32342d3234203d3e20323633323633.roa
Signing time: Thu 06 Mar 2025 08:00:28 +0000
ROA not before: Thu 06 Mar 2025 07:55:28 +0000
ROA not after: Thu 05 Mar 2026 08:00:28 +0000
asID: 263263
IP address blocks: 200.33.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:aa:8a:ac:95:94:de:a6:e4:ba:3c:f6:4d:85:14:bb:73:f2:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Validity
Not Before: Mar 6 07:55:28 2025 GMT
Not After : Mar 5 08:00:28 2026 GMT
Subject: CN=843989C0D80A234063525F6F0C16B38C083A702F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:5e:5a:e3:a8:ff:1f:b2:dd:17:b7:de:3f:
fc:fc:ad:cd:8c:c5:ea:c5:9c:75:15:9c:f7:b2:36:
99:86:1d:4d:df:7c:8a:31:09:5e:97:f0:d2:c1:2b:
aa:6b:97:f2:70:bb:ce:2b:e6:60:41:ad:7c:b1:6f:
ab:00:3d:20:13:ab:65:67:97:91:c8:57:bd:51:30:
ba:32:09:6d:30:92:72:11:89:55:92:82:07:20:5a:
26:b7:c9:c8:0c:86:61:a3:c4:cb:b7:dc:56:9a:ae:
40:4b:07:62:16:6f:c8:7e:c9:34:7e:79:bd:58:a7:
a8:95:44:eb:3f:be:36:52:24:58:ea:1e:d6:32:2b:
94:7e:3d:e3:97:ac:e0:4d:43:7f:72:52:30:4c:33:
e0:ea:59:5c:30:ad:41:8c:13:45:b0:f6:24:c9:5e:
e4:50:69:1f:78:56:37:7c:05:d6:27:36:f1:cb:6f:
f8:31:1e:95:0d:3f:26:c6:61:c6:23:4d:ea:ad:a1:
57:90:aa:a6:c1:21:61:1a:91:b8:6c:37:5f:a5:3d:
dc:17:4d:eb:31:2a:a6:97:25:80:96:83:c4:79:e6:
6e:b8:ba:2f:e2:d0:c8:5c:7c:a2:c3:38:f5:94:6c:
c4:e7:63:76:02:fe:b1:7c:0c:f3:5b:17:f7:a9:d5:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:89:C0:D8:0A:23:40:63:52:5F:6F:0C:16:B3:8C:08:3A:70:2F
X509v3 Authority Key Identifier:
keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133352e302f32342d3234203d3e20323633323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a3:82:d2:30:06:b2:4a:e6:ea:45:dc:05:ed:e1:c1:64:10:
a9:21:15:82:09:e2:a4:f0:c9:e7:d9:79:dd:c9:43:c3:6d:69:
f8:e3:56:b4:1e:2d:c0:7d:ac:18:fb:9e:6c:c1:b1:75:d5:d3:
5b:3c:e1:77:58:db:e5:95:ef:32:e8:55:f0:d4:f8:03:46:e7:
42:09:8a:22:28:93:3e:83:53:5e:7a:1d:ad:f5:e9:8e:2e:a6:
35:1e:be:74:0d:f9:22:d1:ed:32:fd:7e:60:6e:f4:e3:09:fb:
32:30:4c:fe:ee:51:da:d9:61:68:5f:37:87:5c:cc:c4:68:7a:
3c:0b:6d:4b:ab:cb:48:0b:b1:a8:1c:ff:6d:cf:55:67:6f:a3:
37:d4:c7:d7:06:85:32:91:31:be:81:d3:35:53:71:92:f5:ad:
2f:36:54:eb:18:66:24:34:13:9a:cf:22:76:8d:1e:73:a7:84:
8d:9c:00:ce:a2:80:a8:2f:7c:d9:14:43:aa:49:21:24:09:ab:
c1:f8:81:9c:7c:7b:60:ec:31:f2:82:76:6b:ab:b6:ad:f7:ca:
37:7a:07:4a:ba:a7:e7:1e:78:50:a3:68:5e:95:6f:c5:39:e6:
7a:49:88:37:57:8d:f9:3d:b0:04:b9:0f:88:f3:b3:bf:94:78:
b1:e4:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:14:28 2025 by rpki-client