Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa
File: 3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa (raw, json)
Hash identifier: U86KGbwh2F8NI3Gcc+OhXZ5iNqON03QnOsLehyAfd6Q=
Subject key identifier: 46:82:2C:F1:A0:B2:5A:FF:B7:A6:34:36:07:47:AB:33:BB:33:CF:3B
Certificate issuer: /CN=7C39647D835751BB03E763780FC3CF55E30C6370
Certificate serial: 411781C4DEDA39B07F94E1F03433D7F3F5BA7680
Authority key identifier: 7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa
Signing time: Tue 25 Mar 2025 14:56:58 +0000
ROA not before: Tue 25 Mar 2025 14:51:58 +0000
ROA not after: Tue 24 Mar 2026 14:56:58 +0000
asID: 270288
IP address blocks: 200.123.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:17:81:c4:de:da:39:b0:7f:94:e1:f0:34:33:d7:f3:f5:ba:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C39647D835751BB03E763780FC3CF55E30C6370
Validity
Not Before: Mar 25 14:51:58 2025 GMT
Not After : Mar 24 14:56:58 2026 GMT
Subject: CN=46822CF1A0B25AFFB7A634360747AB33BB33CF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:00:ef:52:52:9f:37:d3:8d:0b:6b:66:3f:
a2:fb:99:51:6f:32:bb:ae:d1:97:95:37:d9:8c:d5:
58:51:ed:22:7a:48:46:f7:8e:5a:98:0e:95:8b:29:
d5:12:49:89:eb:d2:52:fe:91:d1:23:f4:43:b3:79:
23:38:85:07:27:99:7e:64:d3:e2:f7:62:e8:90:43:
ca:dc:ef:19:ba:b8:f5:db:86:ab:55:96:94:e6:4c:
31:51:5e:32:52:36:6b:a6:3d:2b:1a:ad:dd:b3:c7:
e9:3d:b1:b3:59:e1:6c:2a:46:f4:dc:31:ff:ca:9c:
43:69:08:3b:4c:c1:ab:8d:e4:4b:c8:dd:62:51:c5:
67:74:9a:a7:cb:7f:73:eb:83:cc:c0:7b:0f:a9:10:
6c:be:d1:8e:43:81:fd:7b:ce:6b:b1:d3:95:14:f6:
90:a9:71:b8:81:29:3e:4a:50:92:76:ee:0f:22:f0:
1f:4c:b8:f8:5e:7c:d8:84:a3:91:37:6c:03:ce:e2:
a7:ab:a6:0c:4f:eb:07:63:5f:85:ae:55:55:7b:f3:
5a:24:da:1c:e0:b1:fb:06:17:02:a8:00:4a:0f:55:
b5:5d:ea:fa:de:81:3d:c8:6f:0c:54:7e:3e:23:63:
ed:3e:3e:9c:e7:ed:fb:03:ef:20:b4:0c:9b:59:d2:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:2C:F1:A0:B2:5A:FF:B7:A6:34:36:07:47:AB:33:BB:33:CF:3B
X509v3 Authority Key Identifier:
keyid:7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.233.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ef:ec:46:60:e9:50:f5:7b:80:b8:cf:01:1f:34:0b:34:02:
c5:b1:05:cb:1f:1d:23:30:c7:dc:26:97:4d:55:5d:8b:56:1b:
ac:86:42:43:e4:72:01:67:f5:a9:48:e6:e8:a1:2f:82:f9:d3:
77:ff:98:20:55:48:f4:4b:30:c6:60:aa:d0:bd:4f:c6:8a:fd:
33:45:16:6b:6f:a6:25:95:87:8a:74:29:ca:15:6b:d9:3d:41:
db:d3:6e:20:e3:79:df:8e:a0:b2:3d:88:06:82:9a:7b:da:be:
aa:b3:c2:00:8b:55:c2:98:df:8e:6c:26:b0:d0:23:c5:e2:4d:
0a:1d:68:85:0a:b3:d3:9a:81:7f:ca:65:f1:08:90:81:8c:b5:
c7:c9:12:93:92:95:0c:02:84:a4:20:cc:97:8f:a8:ca:1c:7f:
82:73:f9:9b:61:9a:83:d8:32:db:29:24:71:d6:f1:bc:23:c6:
83:40:25:1f:77:07:0b:90:6f:14:8d:13:7e:61:8c:fe:51:4b:
a4:46:db:2e:c0:a1:cd:09:5c:b7:bb:d7:dc:e7:fd:e6:5b:ee:
5b:a6:98:5f:48:72:f0:0d:95:92:8c:4b:65:d3:2c:85:0f:05:
f7:78:a5:73:59:3a:96:25:9c:85:ec:40:28:91:4e:8c:76:ec:
00:01:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:59:51 2025 by rpki-client