Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa
File: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (raw, json)
Hash identifier: S7mn+aIRKkfCkrEGNSaEpbEn+9QE2IZk2jlyPQPYAu4=
Subject key identifier: 3A:4D:C2:C6:4E:1D:EF:2C:6F:62:69:67:D9:05:FB:8D:7C:A0:73:AE
Certificate issuer: /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial: 622C503E20DE7AA41873F8D67A80A10C769FA0BE
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa
Signing time: Fri 21 Mar 2025 18:52:22 +0000
ROA not before: Fri 21 Mar 2025 18:47:22 +0000
ROA not after: Fri 20 Mar 2026 18:52:22 +0000
asID: 271573
IP address blocks: 200.6.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2c:50:3e:20:de:7a:a4:18:73:f8:d6:7a:80:a1:0c:76:9f:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Validity
Not Before: Mar 21 18:47:22 2025 GMT
Not After : Mar 20 18:52:22 2026 GMT
Subject: CN=3A4DC2C64E1DEF2C6F626967D905FB8D7CA073AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:cb:61:ad:bf:95:16:04:a2:64:10:cb:e9:
83:b7:a6:59:0f:dc:a0:12:13:c6:6b:0b:58:c6:de:
6f:77:62:bf:68:c9:bc:4d:34:cc:4c:87:b1:7c:8e:
78:42:b4:cd:6d:c1:1b:2f:b3:a7:95:42:b9:9f:d0:
c4:5c:3d:92:a6:cd:a5:43:3f:fa:8d:31:37:d0:91:
a5:43:13:bd:d9:91:c5:f1:06:b4:d5:7d:81:40:0e:
85:a8:63:79:61:78:cf:9f:1a:03:f5:c2:38:e4:8a:
18:03:29:85:e8:da:d8:46:9f:bf:3f:a2:04:7e:f3:
51:48:8a:2f:a1:e2:1c:ec:31:90:f7:f3:ea:fa:d5:
a4:16:53:5f:25:cc:f4:c9:95:ae:4a:53:49:eb:43:
66:ed:60:69:ac:10:dc:02:ac:5b:5c:e2:c5:b6:89:
35:db:9c:b8:d7:3a:e7:4e:e1:b7:86:66:a5:17:be:
5a:41:0f:0d:ed:c2:95:9a:d7:7b:73:23:99:72:93:
38:ca:cc:91:47:b1:e7:40:52:74:da:06:ae:35:43:
01:5d:a9:c0:e4:f1:3b:d5:d7:9a:41:0e:f1:5e:f6:
7c:31:6f:af:11:fc:a3:75:a0:3e:2a:f9:7b:1c:44:
be:f1:15:ba:4d:ba:17:a2:55:68:80:ab:47:2f:31:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:C2:C6:4E:1D:EF:2C:6F:62:69:67:D9:05:FB:8D:7C:A0:73:AE
X509v3 Authority Key Identifier:
keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.134.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a7:92:7a:52:c1:2a:8a:9f:14:89:d9:6c:2e:5a:e0:63:41:
c4:3d:5b:59:60:59:b7:35:39:77:2a:9a:26:43:3a:d2:a1:0c:
ec:23:a4:55:09:3a:17:57:22:d4:b3:f9:83:4a:e5:06:2e:ee:
fb:75:0e:93:97:0f:ca:fe:2d:96:84:d7:a9:c8:4e:b3:a7:d7:
f7:ec:68:07:ea:89:14:13:4e:01:1d:d6:37:fc:fb:61:9c:cc:
a7:b6:f1:51:56:bd:9e:48:f5:95:8b:39:de:2a:8b:07:b7:37:
45:18:6d:f4:3b:51:26:3d:d0:e6:84:0b:d1:35:a7:c0:7b:bb:
a5:a9:f2:5e:6b:b0:5c:e5:cd:49:fd:fe:94:6d:81:94:1a:52:
3e:a5:f2:8e:c1:21:ca:c3:02:0c:bd:03:96:cf:6b:b7:d5:75:
9a:d0:77:bd:72:ac:c1:71:50:ee:b2:c6:98:2d:a7:ae:93:c8:
6c:81:a1:7d:6c:d0:96:08:1e:45:a7:02:de:21:35:12:36:59:
51:bb:3c:b9:b1:b9:b3:34:99:90:aa:e9:12:92:f4:42:66:8c:
15:dd:a5:bb:08:15:3c:25:47:18:29:10:72:4f:3e:89:1a:cc:
74:c5:c3:2a:06:c1:6a:28:84:c9:94:46:6d:95:01:16:73:42:
05:0e:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:19 2025 by rpki-client