Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35382e302f32342d3234203d3e20323730343431.roa
File: 3230302e31342e35382e302f32342d3234203d3e20323730343431.roa (raw, json)
Hash identifier: 4wnNW40u3yUQod+ltV6mhkg8Z1z3mYyESEQJFkdHZ5o=
Subject key identifier: 56:91:7D:61:DC:07:1B:18:FC:1B:C4:AF:FC:9D:7B:D6:40:1E:98:AB
Certificate issuer: /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial: 71E0404674CAC675260B9DFAF0209E3F47F88950
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35382e302f32342d3234203d3e20323730343431.roa
Signing time: Tue 03 Dec 2024 14:13:52 +0000
ROA not before: Tue 03 Dec 2024 14:08:52 +0000
ROA not after: Tue 02 Dec 2025 14:13:52 +0000
asID: 270441
IP address blocks: 200.14.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e0:40:46:74:ca:c6:75:26:0b:9d:fa:f0:20:9e:3f:47:f8:89:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Validity
Not Before: Dec 3 14:08:52 2024 GMT
Not After : Dec 2 14:13:52 2025 GMT
Subject: CN=56917D61DC071B18FC1BC4AFFC9D7BD6401E98AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:76:51:1c:3c:f8:bb:62:e8:3f:4b:31:ff:
d1:d0:30:21:c0:09:f3:0d:2e:74:99:87:a8:e3:87:
b0:ac:dc:51:86:78:32:2e:29:46:c3:0a:73:0f:78:
87:94:4c:11:b6:d9:2a:39:20:b3:83:9b:4d:0e:76:
fc:68:1a:1c:41:53:0a:3e:ea:b7:b0:eb:29:ba:9d:
d3:2f:6c:77:88:5c:f8:28:9b:37:e2:e5:70:82:b5:
57:ad:61:e3:d8:75:45:33:a5:33:5d:a3:e3:90:eb:
d8:d7:96:74:e7:c9:0b:8f:b1:ab:4d:cb:e8:b1:66:
35:85:dd:b8:92:a5:92:99:96:a9:0e:f3:20:02:70:
57:1d:c0:35:d9:15:06:01:21:10:12:bd:94:67:25:
2b:6d:e9:4d:6d:e0:8e:54:df:39:61:1d:97:e3:8a:
57:1f:1e:2e:8d:69:4b:23:5e:b9:b1:a6:42:ce:d7:
83:83:e8:d7:8a:75:75:13:c3:9e:dd:ad:80:f3:d8:
da:3a:d2:cb:d9:9a:c9:90:7a:23:d5:0f:0c:5f:9a:
67:e1:0d:f0:9d:12:04:22:9d:ed:60:0b:19:33:4a:
8a:87:3e:e2:a2:23:a8:ef:ea:72:e1:e5:07:34:02:
93:0f:aa:27:bc:fe:cb:d0:43:dc:1c:50:76:f1:37:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:7D:61:DC:07:1B:18:FC:1B:C4:AF:FC:9D:7B:D6:40:1E:98:AB
X509v3 Authority Key Identifier:
keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35382e302f32342d3234203d3e20323730343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.58.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6c:8c:5c:23:ba:bb:53:65:e9:19:2c:88:a7:95:86:ef:c2:
99:06:57:41:55:3e:09:0c:59:51:5a:a9:16:72:96:a7:bf:c9:
6a:d4:92:e4:ce:09:3f:59:0d:1c:36:54:1a:92:10:7e:e8:28:
1d:1e:f5:e3:e4:c7:f2:5b:0d:06:1c:79:af:89:85:f6:aa:3f:
9e:b2:80:58:0d:d3:ea:db:aa:77:9e:49:1e:03:03:1a:d5:f2:
95:56:db:8e:1b:d7:4b:b9:45:88:85:72:5d:3f:98:44:0e:60:
3d:e7:e0:1d:a0:90:d2:66:a9:3c:cc:20:2a:ad:cd:5c:da:eb:
23:d2:02:eb:47:f6:22:b8:72:ae:f3:17:38:0a:f2:1b:62:bd:
5b:3a:dc:5a:55:9c:46:ff:47:25:62:a6:92:c3:4e:76:8b:b8:
24:9c:f2:42:3d:7f:b7:a0:a1:42:3d:08:ee:17:50:d4:2e:37:
23:53:7a:ad:44:11:76:b3:ff:eb:cc:31:be:7d:d7:06:67:97:
fc:59:ff:5d:63:12:e6:81:70:ab:66:e3:cb:c9:0a:e1:58:9d:
5d:af:39:51:51:e7:92:1a:28:ec:67:4d:fc:9f:71:1c:e0:0d:
c6:05:6d:94:61:12:74:11:61:99:3e:69:8d:bc:eb:ef:7c:fc:
06:01:ee:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUceBARnTKxnUmC5368CCeP0f4iVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNDdCOTU0RDhBRDg5MjNBN0E4RkFEQ0RCODI3ODdD
MzFGQjE2QTAeFw0yNDEyMDMxNDA4NTJaFw0yNTEyMDIxNDEzNTJaMDMxMTAvBgNV
BAMTKDU2OTE3RDYxREMwNzFCMThGQzFCQzRBRkZDOUQ3QkQ2NDAxRTk4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPHZRHDz4u2LoP0sx/9HQMCHA
CfMNLnSZh6jjh7Cs3FGGeDIuKUbDCnMPeIeUTBG22So5ILODm00OdvxoGhxBUwo+
6rew6ym6ndMvbHeIXPgomzfi5XCCtVetYePYdUUzpTNdo+OQ69jXlnTnyQuPsatN
y+ixZjWF3biSpZKZlqkO8yACcFcdwDXZFQYBIRASvZRnJStt6U1t4I5U3zlhHZfj
ilcfHi6NaUsjXrmxpkLO14OD6NeKdXUTw57drYDz2No60svZmsmQeiPVDwxfmmfh
DfCdEgQine1gCxkzSoqHPuKiI6jv6nLh5Qc0ApMPqie8/svQQ9wcUHbxN45rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVpF9YdwHGxj8G8Sv/J171kAemKswHwYDVR0j
BBgwFoAUt6R7lU2K2JI6eo+tzbgnh8MfsWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2Q3NDVkU0NqTmtDWHdKdWlFWDhyUXdqN1ZYdFl5TjI4d2doSmJCNUpC
eE0vMC9CN0E0N0I5NTREOEFEODkyM0E3QThGQURDREI4Mjc4N0MzMUZCMTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTQ3Qjk1NEQ4QUQ4OTIz
QTdBOEZBRENEQjgyNzg3QzMxRkIxNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkNzQ1ZFNDak5rQ1h3SnVpRVg4clF3ajdWWHRZeU4yOHdnaEpiQjVKQnhNLzAv
MzIzMDMwMmUzMTM0MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyA46MA0GCSqGSIb3DQEBCwUAA4IBAQAybIxcI7q7
U2XpGSyIp5WG78KZBldBVT4JDFlRWqkWcpanv8lq1JLkzgk/WQ0cNlQakhB+6Cgd
HvXj5MfyWw0GHHmviYX2qj+esoBYDdPq26p3nkkeAwMa1fKVVtuOG9dLuUWIhXJd
P5hEDmA95+AdoJDSZqk8zCAqrc1c2usj0gLrR/YiuHKu8xc4CvIbYr1bOtxaVZxG
/0clYqaSw052i7gknPJCPX+3oKFCPQjuF1DULjcjU3qtRBF2s//rzDG+fdcGZ5f8
Wf9dYxLmgXCrZuPLyQrhWJ1drzlRUeeSGijsZ038n3Ec4A3GBW2UYRJ0EWGZPmmN
vOvvfPwGAe6z
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:09:26 2025 by rpki-client