Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
File: 3230302e35332e31352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: AXcJQDNpXrEIsNMX28Zfy5uXAyD+bsgc9WooBqf1BGc=
Subject key identifier: 3B:0C:0C:49:7D:A8:A6:18:06:7E:55:4E:64:BF:E1:50:22:DF:9A:6B
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 70C4209DC19F08065D7D109E3C83CDD604ED81D7
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:03 +0000
ROA not before: Wed 05 Mar 2025 18:55:03 +0000
ROA not after: Wed 04 Mar 2026 19:00:03 +0000
asID: 52977
IP address blocks: 200.53.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c4:20:9d:c1:9f:08:06:5d:7d:10:9e:3c:83:cd:d6:04:ed:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:03 2025 GMT
Not After : Mar 4 19:00:03 2026 GMT
Subject: CN=3B0C0C497DA8A618067E554E64BFE15022DF9A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:f2:5c:62:d1:a3:69:65:a6:1f:c7:24:54:
83:cf:1d:58:0a:26:7c:7b:09:2c:c2:1e:07:05:ae:
2b:01:bb:b3:7b:13:a9:1b:a2:33:54:6b:4a:08:12:
2e:9c:19:55:c2:d8:d0:e7:f2:ab:01:d9:fc:da:fa:
6c:b2:e7:81:46:ca:5c:61:85:52:75:2a:12:df:8f:
11:92:76:ff:55:0f:e1:f2:51:34:9e:11:a6:96:89:
44:07:f3:ac:c8:0a:30:b4:ed:d4:1a:aa:2e:8a:71:
e0:a9:d5:22:db:c7:ad:52:73:2a:41:89:28:ec:77:
7c:84:66:a8:a4:7f:f0:39:56:65:b7:82:dc:59:a5:
8c:ae:b8:f5:9a:ba:37:2a:90:8c:d9:75:c6:5f:8b:
c7:9f:9f:3f:16:00:51:fb:d8:e1:3f:82:82:a2:a6:
88:0e:de:2a:fd:63:54:8f:37:86:93:ee:6f:31:75:
46:a2:e6:99:11:61:3c:ed:d5:5f:ef:74:16:51:0b:
8e:99:6e:a9:33:5f:21:a4:d2:39:40:b4:bf:55:3f:
6e:9b:5a:9c:0a:47:5c:4e:99:d0:81:a2:31:33:29:
c7:07:b8:c8:a9:af:8f:44:96:c2:32:24:a3:7e:10:
0e:d5:15:ff:b5:61:46:2c:20:53:ba:27:b9:12:6c:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:0C:49:7D:A8:A6:18:06:7E:55:4E:64:BF:E1:50:22:DF:9A:6B
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.15.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ff:8f:c0:90:e7:56:ee:32:6e:30:71:06:4c:17:07:5b:13:
a2:0c:5b:d0:d1:09:49:7f:7b:8c:cc:ff:4c:b3:af:3b:43:96:
70:fd:9f:94:cf:33:bd:db:59:b3:c8:3d:f3:f6:e1:29:22:e1:
19:6d:93:0f:e0:e7:7d:81:e1:91:aa:8f:52:2c:30:12:f9:c7:
3a:86:5c:29:f8:05:7b:50:04:e3:3d:20:3c:21:0e:a5:76:b3:
fa:cd:a9:85:48:6b:26:cb:be:06:9c:6c:52:4c:5d:29:e3:cd:
05:d2:2f:be:31:b5:86:d7:e6:76:ee:cb:d1:21:3f:64:51:72:
96:4b:f0:09:9d:c8:65:87:dc:a7:3e:b1:8b:ee:a5:20:dd:07:
0c:ff:f6:2e:c2:6f:78:fd:bc:48:cd:da:29:08:c8:72:0d:f5:
6b:c9:da:6e:f5:a5:58:dd:d1:a2:fd:cc:c9:a5:87:e8:10:c3:
15:e9:5b:d6:75:d7:d3:1a:84:c4:17:c6:3e:ed:78:6d:8c:f7:
ea:2f:03:a2:e7:21:71:4f:29:a3:b8:df:ae:35:b6:b8:f9:43:
bb:e4:72:57:b1:29:fe:27:c2:0e:c2:b2:2f:3f:90:1e:5d:07:
8f:57:72:89:58:b9:8b:39:ce:ca:bc:ed:60:e1:e2:e4:c0:ec:
f1:60:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:06 2025 by rpki-client