Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
File: 3230302e35332e31302e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier: S0+DIpDAjgIx11pGVbFrgKO9dejXq0uqQuOujmDF0BQ=
Subject key identifier: 08:85:89:2D:58:DF:D6:D5:27:C5:ED:C1:A9:97:24:15:CE:F7:51:A4
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 7ED8746AAED6E34616364F9912043A886DCAF692
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 52977
IP address blocks: 200.53.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d8:74:6a:ae:d6:e3:46:16:36:4f:99:12:04:3a:88:6d:ca:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=0885892D58DFD6D527C5EDC1A9972415CEF751A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:be:c9:1f:10:91:26:4d:d8:83:4f:a6:8e:
2e:e6:10:73:54:cd:6d:bf:92:a1:f5:bd:61:f5:d8:
6e:6d:28:72:20:3d:a4:88:68:1b:f6:55:84:fe:5d:
fb:59:e8:a7:08:e3:dd:1c:bc:27:c9:77:fd:7d:83:
4f:f2:9c:4b:4c:99:b5:70:af:31:42:73:78:e2:c3:
db:2f:fe:81:4e:ad:be:73:52:fd:6e:60:d0:56:9a:
a4:cf:a3:42:00:3d:6f:28:33:b6:39:67:c5:ca:ec:
32:a4:a8:d8:c4:39:df:b3:c9:af:a6:1f:f6:ac:0c:
bc:fd:d6:35:f4:4e:9b:81:c2:b2:6a:39:81:9e:f5:
83:80:fe:e0:98:71:ee:e1:3b:4e:85:16:85:92:9a:
9b:e2:b7:ac:93:b3:42:c0:6c:33:f4:95:90:88:b2:
8a:a3:c5:4e:a8:72:76:62:27:6d:66:27:1a:f4:e2:
2c:ec:49:ef:15:82:63:2a:ed:11:50:c7:94:dc:d4:
ec:93:fe:7f:d5:58:fb:a0:55:3b:2e:b7:83:3a:3c:
80:8e:36:d3:eb:d6:92:a2:6f:63:d7:02:57:ad:4b:
f1:0b:c2:17:51:d8:b2:ac:da:42:68:0d:b7:74:b5:
b5:8b:7e:6d:2e:4a:49:ff:68:64:5b:f0:3e:07:9c:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:89:2D:58:DF:D6:D5:27:C5:ED:C1:A9:97:24:15:CE:F7:51:A4
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.10.0/23
Signature Algorithm: sha256WithRSAEncryption
70:d9:c4:7e:c0:82:74:fe:ec:01:96:8c:7c:b2:78:47:63:cd:
cb:fd:ff:65:26:a6:bf:b8:6b:47:6b:a6:a6:5e:d3:40:e8:4f:
06:c7:d6:1a:ec:71:db:5c:e5:e0:fe:0b:5d:b2:41:fe:25:f7:
44:52:ed:29:cf:e7:0d:91:89:46:6b:9d:f0:2c:8c:e0:1d:88:
b5:96:e8:95:49:ce:b3:a4:80:c2:93:17:32:d3:02:dd:3a:3b:
7d:6c:45:a5:bb:2e:c4:42:b6:03:de:7b:29:91:f4:94:40:05:
53:87:4b:b6:30:f7:19:71:84:0b:b8:fd:8a:25:94:b9:22:68:
6f:88:bb:25:f0:6c:29:ad:d2:86:1b:b6:f0:6f:a3:1a:0f:0e:
30:89:ef:41:e5:43:64:d1:1e:94:ed:ff:3f:4c:00:b5:8f:f4:
50:e0:eb:5a:16:0a:1e:e8:02:c4:c7:53:0e:84:67:8e:3d:89:
cb:b6:23:24:54:4a:10:09:56:d6:35:e3:1c:fd:da:8e:df:e3:
ec:95:8a:77:8d:1b:5f:ff:4a:eb:2e:2a:22:cf:6e:c9:13:24:
68:c5:01:df:63:c6:63:a9:3b:08:0f:bc:3a:a0:b3:14:38:33:
2c:87:b5:67:6e:86:70:e9:61:7c:10:9f:09:46:f5:a7:be:3d:
97:ed:ab:7d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfth0aq7W40YWNk+ZEgQ6iG3K9pIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKDA4ODU4OTJENThERkQ2RDUyN0M1RURDMUE5OTcyNDE1Q0VGNzUxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGL7JHxCRJk3Yg0+mji7mEHNU
zW2/kqH1vWH12G5tKHIgPaSIaBv2VYT+XftZ6KcI490cvCfJd/19g0/ynEtMmbVw
rzFCc3jiw9sv/oFOrb5zUv1uYNBWmqTPo0IAPW8oM7Y5Z8XK7DKkqNjEOd+zya+m
H/asDLz91jX0TpuBwrJqOYGe9YOA/uCYce7hO06FFoWSmpvit6yTs0LAbDP0lZCI
soqjxU6ocnZiJ21mJxr04izsSe8VgmMq7RFQx5Tc1OyT/n/VWPugVTsut4M6PICO
NtPr1pKib2PXAletS/ELwhdR2LKs2kJoDbd0tbWLfm0uSkn/aGRb8D4HnKLlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCIWJLVjf1tUnxe3BqZckFc73UaQwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcg1CjANBgkqhkiG9w0BAQsFAAOCAQEAcNnEfsCCdP7s
AZaMfLJ4R2PNy/3/ZSamv7hrR2umpl7TQOhPBsfWGuxx21zl4P4LXbJB/iX3RFLt
Kc/nDZGJRmud8CyM4B2ItZbolUnOs6SAwpMXMtMC3To7fWxFpbsuxEK2A957KZH0
lEAFU4dLtjD3GXGEC7j9iiWUuSJob4i7JfBsKa3Shhu28G+jGg8OMInvQeVDZNEe
lO3/P0wAtY/0UODrWhYKHugCxMdTDoRnjj2Jy7YjJFRKEAlW1jXjHP3ajt/j7JWK
d40bX/9K6y4qIs9uyRMkaMUB32PGY6k7CA+8OqCzFDgzLIe1Z26GcOlhfBCfCUb1
p749l+2rfQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:53 2025 by rpki-client