Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
File: 3230302e35332e31322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: znUtDwtjagCdHSpk3p32DyVOLXJXGCMupdQzLwUhFnA=
Subject key identifier: 89:8D:13:CE:E9:48:9C:E3:2A:87:0E:48:CD:B2:E3:4A:BB:D8:21:9E
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 5C8010D3BD9CF76D1FFE7F74880555606E580BD5
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 52977
IP address blocks: 200.53.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:80:10:d3:bd:9c:f7:6d:1f:fe:7f:74:88:05:55:60:6e:58:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=898D13CEE9489CE32A870E48CDB2E34ABBD8219E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:e3:95:fd:b6:23:b5:d4:88:d4:5a:2b:09:
9e:2f:e3:14:2c:0a:b0:38:20:fd:2b:75:52:dc:62:
90:7c:90:ff:e6:62:64:f0:cc:44:e9:c3:37:97:0f:
fc:2d:80:50:39:c7:ee:67:87:d3:0b:bc:de:52:70:
0d:4e:89:e7:37:3c:cf:38:b6:37:55:c9:7e:7b:21:
b1:2d:0e:51:83:4f:06:e4:03:7a:97:b0:66:bc:ac:
a7:30:85:88:de:9f:3c:60:08:df:09:1b:43:78:7c:
98:10:15:37:de:f2:84:65:86:6b:8b:74:c5:bc:4f:
ce:c0:37:92:b9:24:44:ff:30:69:7e:34:6d:13:e4:
da:dd:62:43:31:d2:d7:4e:f6:77:01:b3:66:87:74:
3f:4e:98:56:91:c6:b2:17:7a:a2:67:2f:8a:06:c6:
0b:3b:1a:b7:90:35:de:30:6e:f0:e3:3c:9f:95:21:
cf:4b:28:4a:73:6a:03:70:4d:25:74:a1:3c:31:1b:
3d:c0:19:27:7a:fb:47:f4:fe:24:76:2f:42:e9:8b:
a2:48:10:49:9b:b2:72:31:62:ca:fc:6a:3c:50:3f:
4e:c3:b2:50:3a:8a:87:07:50:f5:71:06:98:b0:4c:
45:1a:9a:18:78:39:a8:2e:44:bc:56:e9:ef:2e:c4:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:13:CE:E9:48:9C:E3:2A:87:0E:48:CD:B2:E3:4A:BB:D8:21:9E
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:e1:55:7e:38:d9:c5:03:5f:be:26:1f:c7:32:6a:8d:f5:77:
a8:c8:ae:fc:eb:a0:3d:f1:3b:36:13:3e:a3:61:66:cd:8d:7f:
da:f0:40:5b:8e:b8:4f:56:cd:81:4a:43:94:38:cd:0e:86:ac:
43:cf:19:aa:57:83:e0:a7:3f:21:58:ab:5b:ea:d3:20:68:20:
93:a2:c5:24:d8:26:35:eb:b4:84:16:71:e7:5a:99:94:3c:b5:
7d:08:e0:86:3c:32:91:ea:e8:da:72:ee:1b:e4:16:90:8c:67:
84:ba:66:5e:39:37:09:92:2e:bc:a7:d6:7b:22:a6:ea:29:89:
dd:24:eb:b8:ea:a5:b2:81:fa:aa:5e:9d:75:47:1d:7b:f2:4b:
8f:02:cd:fb:54:bb:7f:ef:7d:74:f7:03:d1:63:ee:09:4b:05:
37:03:c6:59:99:9f:3b:e8:0b:87:bf:ca:32:84:82:c6:0f:30:
e7:5b:4e:ff:e6:11:92:b2:77:b8:eb:c1:4e:7f:3a:3a:3c:32:
67:c8:87:58:72:48:e2:82:d3:8a:a5:d1:93:51:8c:0a:c6:29:
c5:24:1b:f9:af:5b:ab:50:91:4b:f6:bd:36:e6:34:97:a6:44:
e9:de:59:1f:7b:0e:82:25:bf:eb:d1:54:e2:7c:f7:c0:08:fd:
41:b4:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:36 2025 by rpki-client