Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
File: 3230302e35332e31312e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: g13TJL4lNNprEkk+TWrlr7ba24AmrIfiaZ3F9Fzuefk=
Subject key identifier: CB:09:7C:33:BB:F4:70:FB:D9:8E:E7:92:20:BE:FD:87:2D:84:93:FC
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 74CEDB977C4A0F44A3C45D9A4AD3224051A374F0
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 52977
IP address blocks: 200.53.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ce:db:97:7c:4a:0f:44:a3:c4:5d:9a:4a:d3:22:40:51:a3:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject: CN=CB097C33BBF470FBD98EE79220BEFD872D8493FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:b6:fc:82:75:b0:59:90:79:30:4c:39:c8:
0f:04:52:67:16:5b:ef:dc:9c:dd:54:43:99:62:fb:
04:fa:dd:f8:25:ff:89:cc:40:4f:84:96:6c:89:13:
8d:57:0d:a5:77:08:f2:d8:9d:60:23:c5:c6:cb:47:
7d:56:02:fa:94:aa:2e:e4:1e:1c:f1:dc:52:e2:bb:
9e:61:20:2f:7c:dc:85:b3:d8:dd:22:b3:58:b4:ac:
78:e2:82:b2:cb:4e:c7:90:6f:00:6f:dc:98:3b:e3:
08:0b:05:e1:04:84:cb:aa:72:19:29:bd:88:cf:1a:
08:08:46:44:ac:81:c2:72:60:96:36:57:2f:a5:3f:
a1:f5:6e:9f:1f:72:e2:c9:89:f6:60:c8:f4:45:20:
42:cf:90:43:1f:cb:34:35:f2:f9:af:0f:3b:6d:ee:
df:f0:b1:d2:77:55:ae:4e:0a:10:75:44:55:bb:3d:
10:53:cc:aa:cf:3e:62:60:e3:fc:4f:1c:ac:ea:a0:
fc:9b:a1:1b:38:e8:71:46:75:60:3e:1a:47:37:fd:
c2:ee:63:fc:44:2f:8c:2d:9f:ba:ec:6e:36:8e:27:
38:d3:90:b8:6a:9f:eb:67:e2:0f:df:a6:a5:19:64:
69:ad:45:95:c4:f7:6b:f3:63:9c:6b:72:25:4d:b9:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:7C:33:BB:F4:70:FB:D9:8E:E7:92:20:BE:FD:87:2D:84:93:FC
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:82:68:32:63:54:ee:75:ea:ff:30:0c:98:6e:9e:84:16:c3:
93:32:6a:54:43:2a:62:b1:5a:17:6b:14:13:f5:57:8b:3a:2a:
55:45:45:da:4d:ee:8f:65:16:c5:84:4e:d2:44:6a:b0:37:cc:
57:5b:e2:9a:36:a4:0a:6c:98:97:56:f4:b3:76:70:ef:7e:67:
4b:8f:84:19:ef:90:16:ad:18:27:f5:3b:e9:09:80:c8:d7:09:
7f:ff:aa:df:59:96:60:e2:84:ce:d7:7a:11:a0:5b:17:d6:fd:
c6:c7:26:1a:f0:19:ea:60:5d:0c:fd:5a:b0:a4:ea:85:01:ea:
0f:eb:99:98:7e:65:95:62:55:2f:62:3a:d7:20:13:07:37:c1:
c0:7f:51:cb:af:23:74:5e:97:41:5b:19:62:48:fc:d8:2f:4b:
73:26:0d:21:df:cb:ac:f2:50:6c:cb:b6:0f:16:52:e9:9c:bc:
c2:0c:85:15:2c:5a:7d:46:f5:14:6f:16:74:fe:33:c6:41:88:
23:64:82:34:ad:67:49:1b:b7:ca:3a:34:bd:06:cf:0e:ee:87:
d8:09:27:4d:fa:58:9e:02:56:c9:8c:1f:7e:a8:f3:08:0d:97:
aa:93:b8:d9:5a:fd:6e:ca:3c:18:1d:24:9d:7b:72:a7:b6:0d:
16:1c:90:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdM7bl3xKD0SjxF2aStMiQFGjdPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMDMxMTAvBgNV
BAMTKENCMDk3QzMzQkJGNDcwRkJEOThFRTc5MjIwQkVGRDg3MkQ4NDkzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKALb8gnWwWZB5MEw5yA8EUmcW
W+/cnN1UQ5li+wT63fgl/4nMQE+ElmyJE41XDaV3CPLYnWAjxcbLR31WAvqUqi7k
Hhzx3FLiu55hIC983IWz2N0is1i0rHjigrLLTseQbwBv3Jg74wgLBeEEhMuqchkp
vYjPGggIRkSsgcJyYJY2Vy+lP6H1bp8fcuLJifZgyPRFIELPkEMfyzQ18vmvDztt
7t/wsdJ3Va5OChB1RFW7PRBTzKrPPmJg4/xPHKzqoPyboRs46HFGdWA+Gkc3/cLu
Y/xEL4wtn7rsbjaOJzjTkLhqn+tn4g/fpqUZZGmtRZXE92vzY5xrciVNudz/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUywl8M7v0cPvZjueSIL79hy2Ek/wwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMg1CzANBgkqhkiG9w0BAQsFAAOCAQEAC4JoMmNU7nXq
/zAMmG6ehBbDkzJqVEMqYrFaF2sUE/VXizoqVUVF2k3uj2UWxYRO0kRqsDfMV1vi
mjakCmyYl1b0s3Zw735nS4+EGe+QFq0YJ/U76QmAyNcJf/+q31mWYOKEztd6EaBb
F9b9xscmGvAZ6mBdDP1asKTqhQHqD+uZmH5llWJVL2I61yATBzfBwH9Ry68jdF6X
QVsZYkj82C9LcyYNId/LrPJQbMu2DxZS6Zy8wgyFFSxafUb1FG8WdP4zxkGII2SC
NK1nSRu3yjo0vQbPDu6H2AknTfpYngJWyYwffqjzCA2XqpO42Vr9bso8GB0knXty
p7YNFhyQZA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:40 2025 by rpki-client