Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa
File: 3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier: 9iiR35mEd65WRUH3Y31GcTvAfWWGmONClLM0IQV8hss=
Subject key identifier: 07:8D:AA:04:77:E6:17:AC:70:03:65:3F:63:86:17:B1:AC:94:0C:4D
Certificate issuer: /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Certificate serial: 339F2F453239420E078520125B78FF6A69916547
Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa
Signing time: Tue 18 Mar 2025 00:48:59 +0000
ROA not before: Tue 18 Mar 2025 00:43:59 +0000
ROA not after: Tue 17 Mar 2026 00:48:59 +0000
asID: 61613
IP address blocks: 200.192.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9f:2f:45:32:39:42:0e:07:85:20:12:5b:78:ff:6a:69:91:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Validity
Not Before: Mar 18 00:43:59 2025 GMT
Not After : Mar 17 00:48:59 2026 GMT
Subject: CN=078DAA0477E617AC7003653F638617B1AC940C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:ea:3f:bd:8c:87:03:92:56:4a:bf:6c:27:
06:8c:53:76:d8:9e:09:c4:d3:6d:74:93:d1:53:0b:
25:22:87:2d:37:44:0f:e8:3f:19:23:ca:03:d7:8f:
58:1f:f0:b6:db:e9:3b:25:69:e8:16:91:37:8a:29:
3d:5c:9c:61:6b:47:6b:26:2e:b0:2d:f3:79:f9:5e:
44:67:e5:cf:c2:81:11:f2:6e:f3:04:c8:6f:41:89:
f0:bb:8e:43:8e:16:44:7e:4b:95:12:e1:3d:33:07:
01:a3:e9:ea:d7:b0:50:9c:03:78:85:f0:4e:97:aa:
0c:b0:20:40:22:cf:95:46:41:55:79:b2:4c:db:81:
2c:02:4b:0d:6c:02:c5:9e:7d:32:07:f9:7e:87:63:
52:1d:4d:ee:66:a1:c0:ca:89:39:a3:ae:56:bc:42:
2e:23:01:31:0a:42:14:41:a9:29:32:92:0e:c1:bd:
d3:c1:47:43:45:b3:78:4f:ec:0b:62:27:38:54:34:
43:b0:1c:46:de:0c:67:16:ff:31:3e:a6:79:56:17:
78:b4:2f:4a:22:14:b9:14:a6:14:19:57:0c:95:4d:
f0:cc:93:34:14:97:0c:25:82:da:5f:67:e8:98:87:
8a:79:9f:1a:97:a7:6b:8c:3c:ad:69:e9:3c:0a:5c:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:AA:04:77:E6:17:AC:70:03:65:3F:63:86:17:B1:AC:94:0C:4D
X509v3 Authority Key Identifier:
keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.153.0/24
Signature Algorithm: sha256WithRSAEncryption
33:17:fb:d4:d4:ac:8b:17:61:e4:06:58:b2:05:69:1b:67:f0:
81:ed:18:bf:08:ba:28:c8:d0:c5:c8:a2:56:5b:03:9b:70:eb:
04:7f:b0:18:8b:00:eb:d2:5e:83:d6:9a:ae:e7:80:4a:14:48:
83:7d:2a:34:16:66:26:61:a0:ae:96:ca:fe:0a:a2:39:4c:44:
31:50:a7:43:37:24:1e:a2:f8:81:df:ee:e9:98:94:86:23:b3:
34:2d:fc:a8:51:4b:2e:09:58:5c:81:f8:b2:b1:bf:ac:28:67:
9e:a7:06:0f:7d:1b:bf:2e:54:1f:5e:f3:71:4c:c1:a6:c1:01:
d2:07:07:94:c6:84:b6:16:85:c9:98:77:b9:a6:2c:55:b8:c5:
92:c8:07:d2:fd:c6:08:02:ce:64:4e:7b:32:37:34:0c:45:aa:
6c:3d:62:bd:cf:6e:63:4f:48:a5:34:ef:6e:50:4d:cd:58:15:
f0:a4:9a:19:46:96:0b:2c:64:64:88:2c:fa:9c:d8:62:a4:fc:
3b:d0:85:25:01:4d:8c:65:bf:32:8a:cc:11:fa:21:4a:a8:de:
1a:30:cc:18:a6:50:dd:07:2b:7c:d0:9f:a4:52:95:0d:93:7e:
33:fd:62:28:33:ba:72:6b:cd:52:1b:8b:34:0d:53:9c:4a:0b:
e0:59:00:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM58vRTI5Qg4HhSASW3j/ammRZUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDRjlGRURCRTI0ODFENzcxMTk1RDA2MDgxRDQ5RkE0
QUYwNzE3MTAeFw0yNTAzMTgwMDQzNTlaFw0yNjAzMTcwMDQ4NTlaMDMxMTAvBgNV
BAMTKDA3OERBQTA0NzdFNjE3QUM3MDAzNjUzRjYzODYxN0IxQUM5NDBDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Juo/vYyHA5JWSr9sJwaMU3bY
ngnE0210k9FTCyUihy03RA/oPxkjygPXj1gf8Lbb6TslaegWkTeKKT1cnGFrR2sm
LrAt83n5XkRn5c/CgRHybvMEyG9BifC7jkOOFkR+S5US4T0zBwGj6erXsFCcA3iF
8E6XqgywIEAiz5VGQVV5skzbgSwCSw1sAsWefTIH+X6HY1IdTe5mocDKiTmjrla8
Qi4jATEKQhRBqSkykg7BvdPBR0NFs3hP7AtiJzhUNEOwHEbeDGcW/zE+pnlWF3i0
L0oiFLkUphQZVwyVTfDMkzQUlwwlgtpfZ+iYh4p5nxqXp2uMPK1p6TwKXIU9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUB42qBHfmF6xwA2U/Y4YXsayUDE0wHwYDVR0j
BBgwFoAUxc+f7b4kgddxGV0GCB1J+krwcXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU
d1QvMC9DNUNGOUZFREJFMjQ4MUQ3NzExOTVEMDYwODFENDlGQTRBRjA3MTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1Q0Y5RkVEQkUyNDgxRDc3
MTE5NUQwNjA4MUQ0OUZBNEFGMDcxNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2M1BBMWhmSldyNFJUZFFuTVRIWHdtTlNTczFFQ1VoVXZQanhQTkRYVHdULzAv
MzIzMDMwMmUzMTM5MzIyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIwJkwDQYJKoZIhvcNAQELBQADggEBADMX+9TU
rIsXYeQGWLIFaRtn8IHtGL8IuijI0MXIolZbA5tw6wR/sBiLAOvSXoPWmq7ngEoU
SIN9KjQWZiZhoK6Wyv4KojlMRDFQp0M3JB6i+IHf7umYlIYjszQt/KhRSy4JWFyB
+LKxv6woZ56nBg99G78uVB9e83FMwabBAdIHB5TGhLYWhcmYd7mmLFW4xZLIB9L9
xggCzmROezI3NAxFqmw9Yr3PbmNPSKU0725QTc1YFfCkmhlGlgssZGSILPqc2GKk
/DvQhSUBTYxlvzKKzBH6IUqo3howzBimUN0HK3zQn6RSlQ2TfjP9YigzunJrzVIb
izQNU5xKC+BZAFo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:12:07 2025 by rpki-client