Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa
File: 3230302e35332e382e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: +w4RkpNi9SBjqEsla9c4sc+Y3tpbK7xcBQCCPstHqr8=
Subject key identifier: BB:86:00:E3:51:96:AE:3F:D1:F0:C3:88:E0:95:47:61:23:DF:03:0E
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 4D1222D1FA8A791B6903B4F4353AB4BBF81B2394
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:55:04 +0000
ROA not after: Wed 04 Mar 2026 19:00:04 +0000
asID: 52977
IP address blocks: 200.53.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:12:22:d1:fa:8a:79:1b:69:03:b4:f4:35:3a:b4:bb:f8:1b:23:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:04 2025 GMT
Not After : Mar 4 19:00:04 2026 GMT
Subject: CN=BB8600E35196AE3FD1F0C388E095476123DF030E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:65:96:f0:d9:e0:ef:90:bd:a2:38:bd:cd:
92:3c:6e:ae:6c:9a:aa:4b:ac:cf:98:51:ab:ae:74:
b7:7a:af:5b:32:51:6b:3d:5c:9f:ea:db:f3:4e:b2:
ae:45:70:95:5c:09:a2:2e:8c:ff:3d:44:a8:8c:e4:
2c:4a:2c:03:89:09:f3:bc:1b:04:eb:1a:88:b9:78:
49:19:50:2f:92:64:79:9e:c0:0d:63:be:36:2c:b2:
a9:0a:5f:85:0a:1d:8c:35:52:71:57:bc:02:82:e9:
cf:e1:3f:54:7c:49:67:39:10:73:ee:35:81:ba:93:
72:21:db:51:5c:8b:d2:3f:f1:57:1a:76:5c:b6:28:
e1:64:39:9a:30:98:0e:f9:9b:5d:e7:df:f0:eb:5c:
6e:dc:8d:01:34:b3:d3:fb:f5:f1:d1:29:d2:0a:b6:
7e:50:ce:88:4f:e2:77:23:dc:21:59:f0:70:0e:1a:
6c:45:d8:83:68:57:42:37:97:7f:6a:76:09:82:b1:
8b:e1:19:d3:e4:ed:5d:84:9c:c9:50:30:24:e1:f7:
eb:fa:99:fd:8e:ed:c7:05:c4:1c:dc:90:41:b0:d2:
53:72:03:0a:66:c4:f9:27:7e:8e:44:50:ec:67:ef:
43:ba:35:45:65:af:28:6b:66:e2:df:83:ab:6b:ca:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:00:E3:51:96:AE:3F:D1:F0:C3:88:E0:95:47:61:23:DF:03:0E
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:13:aa:bd:c4:a6:a2:ab:30:73:01:e6:d3:2f:92:94:df:4c:
c0:a6:12:8a:5b:da:82:6b:0a:d2:c1:9f:9b:e0:05:7f:e3:6f:
13:8c:de:b5:24:0b:6d:3a:da:cc:00:aa:38:c5:e8:d4:4a:e8:
62:57:f8:8f:b2:44:a5:d6:62:97:df:bc:d8:1a:58:8c:37:c8:
2d:b4:9e:d9:f0:f6:25:2d:06:88:52:41:c5:19:1f:64:b6:28:
14:f1:72:06:46:6a:15:b5:89:f2:bb:d0:a3:e1:ab:cf:1b:60:
63:06:fe:b5:3f:c7:b5:fe:c9:07:e7:f2:e2:12:c7:3e:80:c3:
c2:4d:c1:ad:f0:a0:f3:d9:ee:4b:93:63:a9:7a:1e:64:c6:1e:
69:4d:69:17:0c:b7:f3:8d:9b:9b:d5:58:26:a9:2f:a2:2e:6b:
a5:bb:f9:7b:0e:52:ff:de:44:e0:39:34:cb:4e:8e:38:d4:54:
d0:f5:a2:5b:e7:27:78:71:e8:01:ba:bd:65:ec:9f:b2:09:45:
83:0f:c8:3e:ac:74:9b:5e:54:0c:2c:e9:82:0e:8d:bb:4f:33:
7d:3d:a6:6e:55:2a:c8:38:61:4e:53:61:0e:3d:54:0c:5f:53:
4a:36:d6:63:ea:5f:0b:4d:bd:58:1b:53:d5:78:d6:56:aa:6e:
e4:04:f1:cc
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTRIi0fqKeRtpA7T0NTq0u/gbI5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMDMxMTAvBgNV
BAMTKEJCODYwMEUzNTE5NkFFM0ZEMUYwQzM4OEUwOTU0NzYxMjNERjAzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkGWW8Nng75C9oji9zZI8bq5s
mqpLrM+YUauudLd6r1syUWs9XJ/q2/NOsq5FcJVcCaIujP89RKiM5CxKLAOJCfO8
GwTrGoi5eEkZUC+SZHmewA1jvjYssqkKX4UKHYw1UnFXvAKC6c/hP1R8SWc5EHPu
NYG6k3Ih21Fci9I/8Vcadly2KOFkOZowmA75m13n3/DrXG7cjQE0s9P79fHRKdIK
tn5QzohP4ncj3CFZ8HAOGmxF2INoV0I3l39qdgmCsYvhGdPk7V2EnMlQMCTh9+v6
mf2O7ccFxBzckEGw0lNyAwpmxPknfo5EUOxn70O6NUVlryhrZuLfg6trytsvAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUu4YA41GWrj/R8MOI4JVHYSPfAw4wHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALINQgwDQYJKoZIhvcNAQELBQADggEBAH4Tqr3EpqKrMHMB
5tMvkpTfTMCmEopb2oJrCtLBn5vgBX/jbxOM3rUkC2062swAqjjF6NRK6GJX+I+y
RKXWYpffvNgaWIw3yC20ntnw9iUtBohSQcUZH2S2KBTxcgZGahW1ifK70KPhq88b
YGMG/rU/x7X+yQfn8uISxz6Aw8JNwa3woPPZ7kuTY6l6HmTGHmlNaRcMt/ONm5vV
WCapL6Iua6W7+XsOUv/eROA5NMtOjjjUVND1olvnJ3hx6AG6vWXsn7IJRYMPyD6s
dJteVAws6YIOjbtPM309pm5VKsg4YU5TYQ49VAxfU0o21mPqXwtNvVgbU9V41laq
buQE8cw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:53 2025 by rpki-client