Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
File: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier: NdwY6xPFqmyu/2iliRJvXmyQxim/JqaYKy82T0vLqUc=
Subject key identifier: 0E:D1:37:2D:7F:87:DD:FF:7D:28:67:0A:75:31:9D:B6:FD:60:17:5F
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 6739A539BFF2C76CAAE32A0F8A606CF818839106
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:02 +0000
ROA not before: Mon 17 Mar 2025 14:42:02 +0000
ROA not after: Mon 16 Mar 2026 14:47:02 +0000
asID: 11432
IP address blocks: 200.155.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:39:a5:39:bf:f2:c7:6c:aa:e3:2a:0f:8a:60:6c:f8:18:83:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:02 2025 GMT
Not After : Mar 16 14:47:02 2026 GMT
Subject: CN=0ED1372D7F87DDFF7D28670A75319DB6FD60175F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:cd:21:94:15:aa:5b:49:00:80:04:c9:c2:
1d:10:4f:b1:15:d6:8b:7c:b8:99:59:8c:17:49:a1:
0a:6e:2e:9f:20:27:93:28:fd:c9:d8:99:7c:b5:b7:
54:50:e7:d5:63:32:2e:da:c8:2a:f4:62:84:e1:bf:
b8:fd:d7:82:01:3c:45:8e:8d:54:ea:0d:d5:7c:de:
dc:31:ba:31:14:94:7c:76:87:d0:a5:f0:be:05:3d:
11:8d:eb:6c:b2:17:d4:61:9c:ef:cb:99:3b:8e:a8:
a4:8b:cc:1c:ef:e6:74:34:dc:58:6a:7c:84:f3:d6:
1f:3b:9d:c3:0a:da:0c:5f:cd:65:83:94:a9:61:c5:
2a:40:3d:f9:23:ff:17:45:6a:39:74:48:ab:a1:29:
b2:bb:ff:6e:a8:78:13:59:6b:6d:bc:07:4a:a9:ae:
72:73:87:ea:ac:c9:5d:0f:f2:da:d6:a3:22:ea:6a:
d9:54:d4:91:54:d4:53:94:e3:bd:10:f2:98:58:08:
e5:dd:b4:f8:d4:86:33:d7:d0:96:89:c8:cf:bb:07:
d7:53:65:b6:15:4e:8c:a2:17:0f:af:89:89:ff:70:
3a:75:10:9e:58:07:e8:03:22:83:0b:50:4d:a0:db:
8c:fb:3a:2e:3c:40:0d:9c:2a:39:c7:18:51:88:02:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:37:2D:7F:87:DD:FF:7D:28:67:0A:75:31:9D:B6:FD:60:17:5F
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
Signature Algorithm: sha256WithRSAEncryption
36:3e:95:0f:71:f8:e1:bc:dd:a3:91:52:46:7d:85:4b:02:ca:
51:7e:65:e9:df:cb:85:ab:c0:36:18:c0:0c:ab:08:a7:d3:8f:
fa:81:bf:1c:40:7d:45:c4:a5:bc:86:b4:96:13:2e:e1:c6:fe:
00:9e:07:3d:ea:6f:c1:fc:35:4b:6d:e4:35:7d:82:e2:08:67:
15:46:87:4f:5c:05:5a:66:7f:6c:08:b8:91:72:37:0b:06:be:
07:18:54:ac:ef:80:9c:1b:62:46:4c:de:60:88:3b:b0:8e:92:
76:11:73:c7:ae:ed:da:2d:77:3d:14:7a:19:a6:66:22:ba:83:
62:73:77:1d:4d:99:d9:03:c8:bf:ca:59:16:0d:48:e3:5e:b7:
9f:3f:5f:1c:1d:09:f7:d6:31:81:1a:f0:e3:20:73:d0:c8:7a:
94:31:87:a8:3e:e4:43:c6:c5:7b:ff:e9:10:64:89:54:e2:82:
40:f6:c5:00:d7:a0:30:2e:fc:67:33:e1:e4:09:91:0c:1c:98:
bf:ef:b7:90:62:05:f1:7b:af:9e:c8:a5:20:c7:5d:f3:3c:59:
f6:e1:88:2c:df:82:e6:6c:27:34:d0:2c:9f:d9:1b:69:5e:34:
ab:4b:fb:53:19:d6:a7:ce:41:9c:2a:dd:40:a5:9b:17:9f:d3:
bc:01:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:53:52 2025 by rpki-client