Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3230312e35352e3230342e302f32322d3234203d3e203532363431.roa
File: 3230312e35352e3230342e302f32322d3234203d3e203532363431.roa (raw, json)
Hash identifier: fMXIXWaAFq3Ln/uUNkne6klDdIG97Mql53qND33ESJs=
Subject key identifier: 60:A9:1B:89:D8:82:FF:B8:A4:D2:57:C0:A7:DE:28:48:ED:85:55:A0
Certificate issuer: /CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Certificate serial: 6B7AE4130F86DAEC623D3C97CBE493C32A6E00F0
Authority key identifier: 3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3230312e35352e3230342e302f32322d3234203d3e203532363431.roa
Signing time: Fri 24 Jan 2025 15:24:16 +0000
ROA not before: Fri 24 Jan 2025 15:19:16 +0000
ROA not after: Fri 23 Jan 2026 15:24:16 +0000
asID: 52641
IP address blocks: 201.55.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7a:e4:13:0f:86:da:ec:62:3d:3c:97:cb:e4:93:c3:2a:6e:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Validity
Not Before: Jan 24 15:19:16 2025 GMT
Not After : Jan 23 15:24:16 2026 GMT
Subject: CN=60A91B89D882FFB8A4D257C0A7DE2848ED8555A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:db:81:a8:a9:1e:c4:c7:67:27:a0:d3:b5:d7:
c5:d3:f8:c7:1a:72:0d:8d:48:ff:49:c3:9d:76:d4:
ea:87:d3:7e:89:61:52:35:8e:07:86:23:10:ac:6b:
4f:fc:17:cc:51:86:26:99:14:d9:d3:02:08:e3:33:
ba:0f:dc:e0:6e:4f:b5:44:1f:44:d6:a1:1f:db:4c:
23:f9:f5:e4:72:d8:5a:10:9d:8b:3b:b6:5d:2c:43:
32:bd:0d:6f:b0:e5:b3:9c:02:82:70:a9:06:a7:2e:
69:6c:3e:1a:1d:62:59:ac:75:7e:4e:17:25:57:26:
72:21:fa:b6:3e:53:db:6c:7b:c6:dd:c5:9a:62:81:
ee:0a:70:1a:d8:22:0f:d9:bb:96:a1:0d:df:76:43:
d0:91:47:9a:3b:a6:5a:81:95:d7:90:90:bb:97:76:
be:48:22:de:96:1d:22:ff:26:8a:e6:42:70:45:d3:
4e:0b:77:a1:f3:c4:a9:f9:69:29:35:83:21:79:e5:
5b:03:e7:21:33:d0:f9:37:b0:38:a5:af:f7:58:c9:
9c:80:6f:1b:1f:84:80:df:99:08:11:48:a7:f5:0a:
f8:fd:8d:64:d0:41:25:32:e9:65:cb:9f:3e:54:e6:
a9:82:40:78:1b:39:82:ab:e1:16:f5:0a:26:c0:e9:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:1B:89:D8:82:FF:B8:A4:D2:57:C0:A7:DE:28:48:ED:85:55:A0
X509v3 Authority Key Identifier:
keyid:3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3230312e35352e3230342e302f32322d3234203d3e203532363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.204.0/22
Signature Algorithm: sha256WithRSAEncryption
50:28:0c:cc:f9:da:2f:08:ea:07:78:46:35:99:fb:39:8a:9f:
ea:5b:55:c5:ce:07:0d:80:f4:30:8e:94:dc:55:26:5e:7d:ef:
87:5c:43:15:30:1d:e4:99:86:7d:ba:e1:39:4f:a7:04:56:e2:
c2:c5:d4:b8:f5:f4:b2:91:07:cd:a3:1d:5c:dc:b3:dc:c1:b3:
ec:f4:6b:29:50:e7:12:dc:01:cb:e8:1f:1d:03:72:5a:b0:3c:
36:7d:4e:75:27:ee:81:90:f5:79:51:57:b0:73:ca:44:8a:09:
6f:c2:da:e0:fd:7a:8b:55:89:a1:47:39:30:8b:ea:64:a8:cf:
7c:79:26:05:5e:ca:a6:72:cc:62:d7:73:78:e9:be:03:49:51:
63:ed:34:bd:38:b0:ae:42:97:51:43:c8:8a:ee:f5:d1:c7:7b:
3d:51:82:4c:ba:16:4b:99:f0:2b:ec:2d:b8:78:f9:3c:0c:fc:
05:5a:37:c3:26:49:77:a6:dd:11:37:36:c2:7a:a1:b5:97:e8:
8c:2e:d0:3d:a0:62:a2:03:da:0f:96:ec:93:85:28:61:91:69:
10:00:dd:ab:c9:26:1c:8c:04:8b:2c:d8:c3:66:43:51:55:87:
49:da:33:f7:0e:f4:57:d4:9c:d3:3d:b1:b1:43:d6:bf:a2:b5:
b3:a0:b2:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa3rkEw+G2uxiPTyXy+STwypuAPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDMzU5NjBDNDVFNUYwRjNCNkVERUY5OUY2MzE5MTJC
MzRGQTRDNTAeFw0yNTAxMjQxNTE5MTZaFw0yNjAxMjMxNTI0MTZaMDMxMTAvBgNV
BAMTKDYwQTkxQjg5RDg4MkZGQjhBNEQyNTdDMEE3REUyODQ4RUQ4NTU1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD024GoqR7Ex2cnoNO118XT+Mca
cg2NSP9Jw5121OqH036JYVI1jgeGIxCsa0/8F8xRhiaZFNnTAgjjM7oP3OBuT7VE
H0TWoR/bTCP59eRy2FoQnYs7tl0sQzK9DW+w5bOcAoJwqQanLmlsPhodYlmsdX5O
FyVXJnIh+rY+U9tse8bdxZpige4KcBrYIg/Zu5ahDd92Q9CRR5o7plqBldeQkLuX
dr5IIt6WHSL/JormQnBF004Ld6HzxKn5aSk1gyF55VsD5yEz0Pk3sDilr/dYyZyA
bxsfhIDfmQgRSKf1Cvj9jWTQQSUy6WXLnz5U5qmCQHgbOYKr4Rb1CibA6Ti3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYKkbidiC/7ik0lfAp94oSO2FVaAwHwYDVR0j
BBgwFoAUO8NZYMReXw87bt75n2MZErNPpMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEN3NlE5amV0TmkydjlkRjJTV1ByVjU4a1hjUmg3b3Q2WUtnampHaE5D
VmgvMC8zQkMzNTk2MEM0NUU1RjBGM0I2RURFRjk5RjYzMTkxMkIzNEZBNEM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzM1OTYwQzQ1RTVGMEYz
QjZFREVGOTlGNjMxOTEyQjM0RkE0QzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDdzZROWpldE5pMnY5ZEYyU1dQclY1OGtYY1JoN290NllLZ2pqR2hOQ1ZoLzAv
MzIzMDMxMmUzNTM1MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzYzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyTfMMA0GCSqGSIb3DQEBCwUAA4IBAQBQKAzM+dov
COoHeEY1mfs5ip/qW1XFzgcNgPQwjpTcVSZefe+HXEMVMB3kmYZ9uuE5T6cEVuLC
xdS49fSykQfNox1c3LPcwbPs9GspUOcS3AHL6B8dA3JasDw2fU51J+6BkPV5UVew
c8pEiglvwtrg/XqLVYmhRzkwi+pkqM98eSYFXsqmcsxi13N46b4DSVFj7TS9OLCu
QpdRQ8iK7vXRx3s9UYJMuhZLmfAr7C24ePk8DPwFWjfDJkl3pt0RNzbCeqG1l+iM
LtA9oGKiA9oPluyThShhkWkQAN2rySYcjASLLNjDZkNRVYdJ2jP3DvRX1JzTPbGx
Q9a/orWzoLJu
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:21 2025 by rpki-client