Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
File: 3230302e35332e31322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: I1hcrSW3HgIgjMPMuiR0x8o38xiczh4tI117RN8UWEY=
Subject key identifier: 5A:B9:AB:F1:BE:A6:2C:C6:EB:93:75:04:65:50:1C:1E:CB:DF:BB:28
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 4EDF15396558EDEF71873E2D89CD779937CDA208
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
Signing time: Fri 12 Jan 2024 00:00:01 +0000
ROA not before: Thu 11 Jan 2024 23:55:01 +0000
ROA not after: Fri 10 Jan 2025 00:00:01 +0000
asID: 52977
IP address blocks: 200.53.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:df:15:39:65:58:ed:ef:71:87:3e:2d:89:cd:77:99:37:cd:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 11 23:55:01 2024 GMT
Not After : Jan 10 00:00:01 2025 GMT
Subject: CN=5AB9ABF1BEA62CC6EB93750465501C1ECBDFBB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:0c:4f:e6:bf:2b:ae:8f:2a:b7:c9:7d:7c:
ce:c6:b7:0d:ed:74:f3:5a:04:d8:cc:0e:45:be:78:
c5:3b:09:89:df:1f:af:bf:79:ce:2c:a4:51:7a:08:
79:25:4b:72:a9:1f:94:76:ed:f9:f4:15:e2:f0:55:
43:46:ec:22:4a:c0:f5:05:ab:15:9c:7c:26:60:85:
22:62:ae:f8:4f:29:fa:d8:48:33:62:47:c8:cd:12:
be:6a:1f:0a:00:2a:44:26:13:87:44:38:5d:62:20:
1d:bb:bf:3d:4c:f0:5f:76:cc:76:ae:79:74:8c:c7:
da:4a:49:9c:38:7b:d1:a1:79:fb:16:9a:a2:52:08:
26:06:6a:21:f1:07:49:4a:0d:c8:ab:78:30:69:37:
7b:07:b1:69:8b:6c:3e:b7:52:56:f3:57:a0:d0:4d:
76:0b:0f:d5:56:1b:b0:df:61:b5:b2:76:87:48:ca:
8d:72:fd:ea:0e:fd:cf:df:1e:7f:9e:6c:e5:a8:8a:
a1:c8:e6:11:03:55:c3:fc:07:c1:b2:94:e1:29:c6:
b3:5c:13:4d:bf:b5:95:bb:1c:d5:9e:b0:02:48:c9:
ac:37:71:06:52:7f:11:8a:fd:19:e7:79:f9:d3:83:
dd:3b:c2:a1:46:e5:5e:b8:0d:a7:37:ec:a9:9b:ca:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:AB:F1:BE:A6:2C:C6:EB:93:75:04:65:50:1C:1E:CB:DF:BB:28
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:39:ee:54:1f:73:7f:42:cf:2f:f8:27:67:55:b3:c1:46:98:
e3:1e:a6:09:db:8e:35:8c:58:6b:6a:0c:19:be:3c:2d:67:96:
02:94:22:05:67:25:2c:26:80:2c:0a:ba:08:f9:8d:7f:f9:f7:
b8:e4:20:1e:ac:bf:7f:d0:b3:99:be:dd:69:91:83:54:de:30:
5c:b7:f6:72:75:58:38:dd:5f:be:05:11:32:ad:e3:b9:fe:90:
c8:14:de:78:d0:c9:ca:92:56:1a:08:99:32:a1:8c:b5:ca:4c:
4f:59:de:ca:e2:2d:b8:10:35:46:78:09:3d:04:96:91:b2:b6:
cb:65:d2:2b:df:2e:97:47:76:e9:7c:06:6c:27:0d:91:8e:ca:
1c:04:b4:b9:32:f5:3f:c3:0c:8c:13:51:d7:d8:fd:d3:e2:bc:
ce:f9:84:7e:00:69:47:7e:0c:10:24:79:e8:2f:1b:ce:72:fb:
2e:7c:dc:a7:1b:50:53:1b:b6:b9:ca:20:f2:61:12:67:28:dd:
be:d9:1e:b0:60:6b:f1:4d:0c:cc:b1:c2:38:ee:5d:30:1d:44:
4d:85:0b:b8:e5:e3:5d:8b:4c:7e:f8:78:78:57:3f:c1:a1:26:
fc:c6:0f:7a:9c:96:be:db:27:31:6c:dd:58:1a:7e:2d:4c:2c:
f8:bc:a7:c0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTt8VOWVY7e9xhz4tic13mTfNoggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yNDAxMTEyMzU1MDFaFw0yNTAxMTAwMDAwMDFaMDMxMTAvBgNV
BAMTKDVBQjlBQkYxQkVBNjJDQzZFQjkzNzUwNDY1NTAxQzFFQ0JERkJCMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BAxP5r8rro8qt8l9fM7Gtw3t
dPNaBNjMDkW+eMU7CYnfH6+/ec4spFF6CHklS3KpH5R27fn0FeLwVUNG7CJKwPUF
qxWcfCZghSJirvhPKfrYSDNiR8jNEr5qHwoAKkQmE4dEOF1iIB27vz1M8F92zHau
eXSMx9pKSZw4e9GhefsWmqJSCCYGaiHxB0lKDcireDBpN3sHsWmLbD63UlbzV6DQ
TXYLD9VWG7DfYbWydodIyo1y/eoO/c/fHn+ebOWoiqHI5hEDVcP8B8GylOEpxrNc
E02/tZW7HNWesAJIyaw3cQZSfxGK/RnnefnTg907wqFG5V64Dac37KmbymMbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWrmr8b6mLMbrk3UEZVAcHsvfuygwHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzIzMDMwMmUzNTMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsg1DDANBgkqhkiG9w0BAQsFAAOCAQEAuznuVB9zf0LP
L/gnZ1WzwUaY4x6mCduONYxYa2oMGb48LWeWApQiBWclLCaALAq6CPmNf/n3uOQg
Hqy/f9Czmb7daZGDVN4wXLf2cnVYON1fvgURMq3juf6QyBTeeNDJypJWGgiZMqGM
tcpMT1neyuItuBA1RngJPQSWkbK2y2XSK98ul0d26XwGbCcNkY7KHAS0uTL1P8MM
jBNR19j90+K8zvmEfgBpR34MECR56C8bznL7LnzcpxtQUxu2ucog8mESZyjdvtke
sGBr8U0MzLHCOO5dMB1ETYULuOXjXYtMfvh4eFc/waEm/MYPepyWvtsnMWzdWBp+
LUws+LynwA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:44:54 2025 by rpki-client