Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
File: 3230302e34392e32382e302f32322d3332203d3e203532383730.roa (raw, json)
Hash identifier: 1J833PsAwXVWs6X4E7z1Z6A1lqNL6a9+aq1kPAitNnw=
Subject key identifier: 99:21:67:D5:A4:A4:46:07:C2:57:11:E9:C1:84:10:51:58:55:9F:4B
Certificate issuer: /CN=07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252
Certificate serial: 3893C0FE7CCA912D6CF3C9642AD04644D9ED49D0
Authority key identifier: 07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
Signing time: Mon 17 Feb 2025 22:13:02 +0000
ROA not before: Mon 17 Feb 2025 22:08:02 +0000
ROA not after: Mon 16 Feb 2026 22:13:02 +0000
asID: 52870
IP address blocks: 200.49.28.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:93:c0:fe:7c:ca:91:2d:6c:f3:c9:64:2a:d0:46:44:d9:ed:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252
Validity
Not Before: Feb 17 22:08:02 2025 GMT
Not After : Feb 16 22:13:02 2026 GMT
Subject: CN=992167D5A4A44607C25711E9C184105158559F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:25:bb:1e:c9:3a:db:0d:20:1f:9a:d4:7d:
54:54:73:ec:e1:55:e8:ae:3b:52:e3:d3:27:1a:f2:
c3:67:0d:f1:4a:86:8f:c7:a0:cc:35:70:5c:ba:35:
0b:26:d9:e9:0a:21:21:52:92:9f:da:b3:e0:f6:27:
c0:d6:7f:19:6c:5e:9b:8f:68:44:dd:e9:6b:7d:50:
97:cf:e3:85:76:8b:6d:4e:99:ef:af:8a:ba:fc:6e:
1e:13:f1:16:e7:be:1f:0a:be:01:90:36:7a:e5:1f:
4d:81:1e:12:b7:31:ad:95:bd:4d:ae:db:ec:45:48:
7d:85:9f:a7:a3:50:d5:48:74:e2:98:d3:ef:d5:0e:
ec:48:e6:7a:f4:17:71:34:8d:76:f6:ba:6a:16:86:
4d:e6:42:aa:c5:f9:f9:24:57:e8:6b:29:35:e6:b1:
1d:26:bc:79:3c:67:19:a3:44:2a:cf:1a:6a:9c:42:
c5:7a:36:93:7c:c9:b8:e3:01:ad:bb:58:92:6a:00:
58:98:f3:14:ad:61:47:b0:1a:24:99:a5:49:56:97:
b9:e6:22:56:44:cb:a3:e4:d7:22:b4:d3:cc:b0:32:
a2:35:4f:f6:48:e5:91:4b:7d:c5:1c:3a:40:8b:26:
af:d9:33:73:e3:32:66:68:1a:8a:06:6c:16:7a:d6:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:21:67:D5:A4:A4:46:07:C2:57:11:E9:C1:84:10:51:58:55:9F:4B
X509v3 Authority Key Identifier:
keyid:07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.28.0/22
Signature Algorithm: sha256WithRSAEncryption
45:55:e3:f8:c6:41:ba:9e:de:95:8e:ae:de:b7:e6:b7:db:61:
4f:3a:36:af:57:13:66:8e:a5:d3:df:5e:2a:86:66:17:96:00:
f8:a1:9f:7f:45:92:11:4f:89:f0:fa:a0:9f:48:62:f4:0a:25:
fc:da:51:19:34:85:65:0e:a6:b9:1c:be:6e:88:a7:1a:9e:22:
6d:86:94:01:5c:00:5c:af:96:c3:33:f0:cc:a4:38:f4:e9:bf:
72:8f:5f:bc:b9:b0:54:fd:9f:78:fa:59:f5:33:98:e3:44:82:
f5:fc:a4:22:84:28:fe:5b:0b:c4:95:6d:5a:7c:42:0c:62:b1:
1a:51:f7:8f:f2:cd:08:bb:c7:31:07:da:fc:aa:76:0d:5e:a8:
49:f2:b3:16:d8:e8:b9:6d:fb:fb:35:cd:50:cc:03:80:0c:b4:
77:53:d6:4d:95:70:49:b5:71:71:1c:9f:4b:18:81:d4:06:50:
0d:47:59:13:fd:9b:50:4e:c6:c6:73:77:64:9a:26:a4:7c:d0:
e2:c8:38:39:9f:10:15:64:f9:05:58:b2:7d:f5:47:a6:04:e5:
c0:ad:49:22:08:db:7c:6c:82:ce:b2:ee:d6:7f:44:33:84:de:
60:33:d0:c4:6a:ae:4f:a0:7c:72:d9:88:c1:c0:2c:55:2d:70:
38:1a:3b:e2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOJPA/nzKkS1s88lkKtBGRNntSdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdERDlERkE4RjYwNERCOEM3MkJDQ0E4RTI5MkU5QzlD
MkQ1RjI1MjAeFw0yNTAyMTcyMjA4MDJaFw0yNjAyMTYyMjEzMDJaMDMxMTAvBgNV
BAMTKDk5MjE2N0Q1QTRBNDQ2MDdDMjU3MTFFOUMxODQxMDUxNTg1NTlGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1yW7Hsk62w0gH5rUfVRUc+zh
VeiuO1Lj0yca8sNnDfFKho/HoMw1cFy6NQsm2ekKISFSkp/as+D2J8DWfxlsXpuP
aETd6Wt9UJfP44V2i21Ome+virr8bh4T8Rbnvh8KvgGQNnrlH02BHhK3Ma2VvU2u
2+xFSH2Fn6ejUNVIdOKY0+/VDuxI5nr0F3E0jXb2umoWhk3mQqrF+fkkV+hrKTXm
sR0mvHk8ZxmjRCrPGmqcQsV6NpN8ybjjAa27WJJqAFiY8xStYUewGiSZpUlWl7nm
IlZEy6Pk1yK008ywMqI1T/ZI5ZFLfcUcOkCLJq/ZM3PjMmZoGooGbBZ61goLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmSFn1aSkRgfCVxHpwYQQUVhVn0swHwYDVR0j
BBgwFoAUB92d+o9gTbjHK8yo4pLpycLV8lIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdyd0dBeXhja1NZaDdIZVM3SEtNdmpXSGtXUDNFUmRROTFOZHh5ZnB4
ZjQvMC8wN0REOURGQThGNjA0REI4QzcyQkNDQThFMjkyRTlDOUMyRDVGMjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3REQ5REZBOEY2MDREQjhD
NzJCQ0NBOEUyOTJFOUM5QzJENUYyNTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3cndHQXl4Y2tTWWg3SGVTN0hLTXZqV0hrV1AzRVJkUTkxTmR4eWZweGY0LzAv
MzIzMDMwMmUzNDM5MmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzMjM4
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgxHDANBgkqhkiG9w0BAQsFAAOCAQEARVXj+MZBup7e
lY6u3rfmt9thTzo2r1cTZo6l099eKoZmF5YA+KGff0WSEU+J8Pqgn0hi9Aol/NpR
GTSFZQ6muRy+boinGp4ibYaUAVwAXK+WwzPwzKQ49Om/co9fvLmwVP2fePpZ9TOY
40SC9fykIoQo/lsLxJVtWnxCDGKxGlH3j/LNCLvHMQfa/Kp2DV6oSfKzFtjouW37
+zXNUMwDgAy0d1PWTZVwSbVxcRyfSxiB1AZQDUdZE/2bUE7GxnN3ZJompHzQ4sg4
OZ8QFWT5BViyffVHpgTlwK1JIgjbfGyCzrLu1n9EM4TeYDPQxGquT6B8ctmIwcAs
VS1wOBo74g==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:16:59 2025 by rpki-client