Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa
File: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (raw, json)
Hash identifier: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=
Subject key identifier: CD:8D:60:16:EF:39:1F:6E:05:CA:1F:C9:9B:F7:0D:CC:8D:04:53:45
Certificate issuer: /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial: 7E5A2C33F84083E7403C6579F2992F36F1D2D7DB
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa
Signing time: Thu 20 Mar 2025 13:14:45 +0000
ROA not before: Thu 20 Mar 2025 13:09:45 +0000
ROA not after: Thu 19 Mar 2026 13:14:45 +0000
asID: 264971
IP address blocks: 200.219.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5a:2c:33:f8:40:83:e7:40:3c:65:79:f2:99:2f:36:f1:d2:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Validity
Not Before: Mar 20 13:09:45 2025 GMT
Not After : Mar 19 13:14:45 2026 GMT
Subject: CN=CD8D6016EF391F6E05CA1FC99BF70DCC8D045345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:fd:f4:19:ee:c4:8f:85:b4:15:88:66:71:
a8:6d:f0:79:20:e6:42:67:71:5d:e8:8c:c4:d7:5d:
3f:cc:4b:3f:5e:37:d3:ba:b5:b6:42:9a:ad:36:88:
52:61:90:1d:d6:e0:c7:75:b6:9a:09:b1:fd:b5:36:
9a:9f:a2:65:b9:50:b8:ab:06:2d:23:7b:29:6d:36:
62:1a:f7:c5:6e:0b:8a:de:05:3c:20:27:61:45:10:
69:83:97:0b:25:9c:9c:21:30:e7:ee:97:fd:8a:ba:
21:ea:7e:80:9c:d3:93:c1:ca:51:98:9f:b6:15:32:
0f:c8:db:08:8d:fc:3b:7b:14:d0:54:c2:16:d3:6a:
5f:a8:f2:1f:2a:85:b3:5e:0f:18:3e:77:79:30:dd:
33:ef:12:65:d4:92:f7:20:ca:a0:5e:2a:7a:d9:9d:
9d:a2:e5:ec:ef:7d:14:39:cf:8e:a8:64:b4:ef:3f:
8b:07:e1:ab:f1:a3:2b:44:a1:eb:b8:4e:b1:ff:ee:
0e:10:e4:99:f8:05:d5:6c:f8:80:5c:2a:a4:43:c3:
48:fe:8f:f1:4b:eb:5a:64:ad:fb:0c:ac:c0:82:a9:
f5:e1:f2:49:05:93:04:7f:62:14:ea:30:e7:14:19:
6b:1d:7b:f5:54:5b:79:99:48:b0:75:bd:0d:04:63:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:60:16:EF:39:1F:6E:05:CA:1F:C9:9B:F7:0D:CC:8D:04:53:45
X509v3 Authority Key Identifier:
keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.149.0/24
Signature Algorithm: sha256WithRSAEncryption
43:07:fc:07:0a:9c:60:eb:4e:1c:83:95:41:f5:65:c8:dd:57:
1b:99:ae:dc:6b:5c:49:3e:a7:5b:cd:97:68:52:cd:c2:4e:07:
be:af:39:96:33:ec:14:32:4c:3c:22:32:26:b0:bf:37:7f:f7:
8c:2e:9a:9c:e3:c2:14:b6:2c:1f:e1:fb:6b:34:18:79:e5:41:
e7:1c:6d:1c:2d:c9:cf:86:ce:ec:fd:8e:40:03:04:6e:6d:e7:
c7:a8:00:71:03:5d:12:5f:2c:18:09:43:6d:88:dd:cf:0a:cf:
77:91:9c:76:40:68:b3:ee:cc:78:6a:bb:ee:5e:ff:05:0c:9c:
69:6d:d9:0b:01:50:f3:12:21:8f:80:78:f7:73:23:5c:46:03:
55:86:51:66:55:10:30:e2:f5:18:d9:ff:ea:87:19:21:8b:8f:
9b:79:51:d3:66:2e:77:27:a0:87:df:a9:00:ac:27:ab:e3:4e:
c7:17:a8:f3:28:71:7f:d9:cf:69:42:df:1d:18:dd:67:98:63:
30:3a:b9:4c:43:8f:41:4e:19:ad:3a:d1:f2:37:6c:ba:33:83:
2a:00:35:18:e6:d0:0e:04:2e:da:01:5d:57:10:5e:f0:04:c1:
8e:44:d9:45:56:8a:24:81:29:9e:10:b8:c2:cd:ad:c7:cf:24:
59:82:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:46 2025 by rpki-client