Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
File: 3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (raw, json)
Hash identifier: lziwOnpBrjk2cj9P2yfilUVcyll8jBoqkHVDjEV54ls=
Subject key identifier: F3:BE:4F:DB:1D:0C:25:24:EA:21:FD:59:0F:10:CE:62:A8:4D:90:1A
Certificate issuer: /CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
Certificate serial: D8CC256BFB8A9C93C11BB2FCCE3FAED14C18FA
Authority key identifier: 1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
Signing time: Mon 04 Mar 2024 21:27:33 +0000
ROA not before: Mon 04 Mar 2024 21:22:33 +0000
ROA not after: Mon 03 Mar 2025 21:27:33 +0000
asID: 271017
IP address blocks: 200.219.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:cc:25:6b:fb:8a:9c:93:c1:1b:b2:fc:ce:3f:ae:d1:4c:18:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
Validity
Not Before: Mar 4 21:22:33 2024 GMT
Not After : Mar 3 21:27:33 2025 GMT
Subject: CN=F3BE4FDB1D0C2524EA21FD590F10CE62A84D901A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:79:1b:f8:49:03:21:90:b3:af:65:a0:17:
9e:d3:15:be:87:7d:92:27:a0:59:8a:5e:0c:60:16:
fa:ef:59:c5:97:8b:0a:13:18:e5:96:b6:ae:93:8e:
64:0f:78:cd:c3:87:51:f6:5e:94:72:e2:7b:3f:bb:
a4:5e:58:b5:66:b3:b4:8a:9b:dd:14:53:76:74:5d:
12:6f:6e:a8:0c:5b:69:1d:10:98:0a:32:4a:f9:c3:
cd:37:46:d3:15:76:7b:ba:ea:3e:f6:fa:42:ad:7d:
ba:c3:ed:65:2d:bf:dd:72:67:0f:39:f2:ed:d7:46:
ab:8b:26:3f:97:b3:72:d6:6a:e6:09:0a:81:a2:c4:
af:c2:c6:89:fb:eb:df:4c:19:e5:27:90:89:cf:dc:
ae:53:fb:ac:4f:7e:d2:cf:ef:1f:92:94:7d:f7:f9:
e5:4d:68:39:5a:a5:ac:21:59:8f:7b:aa:23:f2:52:
0c:53:fc:22:30:81:7f:17:6e:a4:f8:8f:a3:54:d7:
2c:7a:4c:a7:43:a1:21:97:d2:2f:1c:8b:5a:9b:0c:
d7:f3:6d:a1:cb:ec:23:a6:c8:6b:57:7a:6a:2a:65:
60:a2:62:7b:f1:13:b9:1c:00:17:19:33:34:d3:07:
38:ce:ca:59:b4:90:e2:11:05:28:42:2c:55:91:0c:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:4F:DB:1D:0C:25:24:EA:21:FD:59:0F:10:CE:62:A8:4D:90:1A
X509v3 Authority Key Identifier:
keyid:1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.0.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:5c:3f:49:6b:0e:98:0d:bd:f0:b4:80:50:d2:98:ad:8a:be:
a5:3e:d2:d7:25:40:46:e1:28:c2:74:dd:41:6c:8d:f3:e7:e1:
12:dd:5f:5f:87:c9:c2:f9:7e:e4:b7:3c:98:91:56:fc:78:6c:
a0:a7:c9:70:a3:15:d8:eb:a9:f4:52:4a:71:94:b7:f9:11:67:
ab:18:a8:63:af:f7:e9:b5:e8:c1:49:8d:cc:0c:31:f7:ab:46:
64:1c:a9:15:08:98:1a:d7:3b:90:b4:5e:68:3b:bb:c6:e5:a0:
3b:d6:5a:80:66:f3:b6:57:d5:b8:80:97:e2:f2:96:b4:e9:27:
d1:06:e4:3a:2b:1d:1c:1c:c9:7f:2c:78:4a:0d:31:85:f2:1c:
de:46:ce:e4:7c:96:ec:bf:70:c0:a7:bc:77:1c:fa:43:7a:b9:
76:06:60:6f:7b:7a:6b:86:33:0f:e4:99:eb:9e:cd:70:31:07:
9e:37:e6:42:b8:cb:37:de:7a:cd:dc:a8:ff:b9:2c:de:02:b5:
53:1a:f3:9f:82:00:b4:89:58:0e:b8:36:00:0f:6d:eb:2b:6e:
83:28:9e:d4:03:e0:06:5d:b3:92:b1:8a:ef:0b:15:22:fd:26:
01:de:09:d0:ba:60:09:c1:47:7a:a2:92:e0:4c:32:31:64:8d:
3b:7d:8e:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUANjMJWv7ipyTwRuy/M4/rtFMGPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4NTJENEI4Nzc1RTIwQzhGMjQ5NEI1QUQ4NTAxQTFE
M0YyMzVFQzAeFw0yNDAzMDQyMTIyMzNaFw0yNTAzMDMyMTI3MzNaMDMxMTAvBgNV
BAMTKEYzQkU0RkRCMUQwQzI1MjRFQTIxRkQ1OTBGMTBDRTYyQTg0RDkwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCHkb+EkDIZCzr2WgF57TFb6H
fZInoFmKXgxgFvrvWcWXiwoTGOWWtq6TjmQPeM3Dh1H2XpRy4ns/u6ReWLVms7SK
m90UU3Z0XRJvbqgMW2kdEJgKMkr5w803RtMVdnu66j72+kKtfbrD7WUtv91yZw85
8u3XRquLJj+Xs3LWauYJCoGixK/Cxon7699MGeUnkInP3K5T+6xPftLP7x+SlH33
+eVNaDlapawhWY97qiPyUgxT/CIwgX8XbqT4j6NU1yx6TKdDoSGX0i8ci1qbDNfz
baHL7COmyGtXemoqZWCiYnvxE7kcABcZMzTTBzjOylm0kOIRBShCLFWRDH+NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU875P2x0MJSTqIf1ZDxDOYqhNkBowHwYDVR0j
BBgwFoAUHoUtS4d14gyPJJS1rYUBodPyNewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0
WjgvMC8xRTg1MkQ0Qjg3NzVFMjBDOEYyNDk0QjVBRDg1MDFBMUQzRjIzNUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFODUyRDRCODc3NUUyMEM4
RjI0OTRCNUFEODUwMUExRDNGMjM1RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyY1VlcmFmaHRYWXNiV3JaRGc4QlRGZzljNFZFZjZxb1JTazNwN0xHdFo4LzAv
MzIzMDMwMmUzMjMxMzkyZTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByNsAMA0GCSqGSIb3DQEBCwUAA4IBAQDQXD9Jaw6Y
Db3wtIBQ0pitir6lPtLXJUBG4SjCdN1BbI3z5+ES3V9fh8nC+X7ktzyYkVb8eGyg
p8lwoxXY66n0UkpxlLf5EWerGKhjr/fptejBSY3MDDH3q0ZkHKkVCJga1zuQtF5o
O7vG5aA71lqAZvO2V9W4gJfi8pa06SfRBuQ6Kx0cHMl/LHhKDTGF8hzeRs7kfJbs
v3DAp7x3HPpDerl2BmBve3prhjMP5Jnrns1wMQeeN+ZCuMs33nrN3Kj/uSzeArVT
GvOfggC0iVgOuDYAD23rK26DKJ7UA+AGXbOSsYrvCxUi/SYB3gnQumAJwUd6opLg
TDIxZI07fY40
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:20:57 2025 by rpki-client