Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HvfCBKoo2C5tBndTYZbgsjLQoGT3ate3Yd3GafJvPj4z/0/3230302e342e39362e302f32322d3234203d3e20323731333835.roa
File: 3230302e342e39362e302f32322d3234203d3e20323731333835.roa (raw, json)
Hash identifier: L+rXZuS8Nwfiwld7ziOy+Frxri1IpgWeLJ0YUmoJk7A=
Subject key identifier: F3:F6:A9:0C:BA:88:F9:E2:A2:CB:84:3E:6E:85:9F:82:82:3F:F7:C4
Certificate issuer: /CN=549A032C7380D62F0C70FBCEC001A4A6D8499784
Certificate serial: 1BF41555E2A7E35EA2D33430FA654DF6B810EF46
Authority key identifier: 54:9A:03:2C:73:80:D6:2F:0C:70:FB:CE:C0:01:A4:A6:D8:49:97:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549A032C7380D62F0C70FBCEC001A4A6D8499784.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HvfCBKoo2C5tBndTYZbgsjLQoGT3ate3Yd3GafJvPj4z/0/3230302e342e39362e302f32322d3234203d3e20323731333835.roa
Signing time: Wed 12 Feb 2025 20:51:58 +0000
ROA not before: Wed 12 Feb 2025 20:46:58 +0000
ROA not after: Wed 11 Feb 2026 20:51:58 +0000
asID: 271385
IP address blocks: 200.4.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f4:15:55:e2:a7:e3:5e:a2:d3:34:30:fa:65:4d:f6:b8:10:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=549A032C7380D62F0C70FBCEC001A4A6D8499784
Validity
Not Before: Feb 12 20:46:58 2025 GMT
Not After : Feb 11 20:51:58 2026 GMT
Subject: CN=F3F6A90CBA88F9E2A2CB843E6E859F82823FF7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:d2:11:3b:56:d7:f5:ae:c6:0e:74:53:78:
81:ba:2b:4e:66:41:cb:2b:dc:32:45:4c:69:2c:c5:
3d:91:6b:0d:6b:40:2a:f5:45:f8:56:16:53:4f:34:
87:12:68:9e:2b:2d:0b:37:41:ce:7d:4f:d9:7c:18:
ec:36:74:11:f7:e6:fc:ca:74:1a:17:70:a8:f0:fe:
4b:f6:d1:0e:bb:8f:fc:fd:ee:95:ae:ef:93:a2:42:
7b:4e:a3:e5:20:9d:f1:b8:51:89:dc:dd:6d:59:3a:
cb:6a:43:2b:bf:a5:eb:9e:f2:03:76:31:65:36:ec:
6c:c2:73:9f:c6:56:72:d0:57:b3:ae:f2:8f:01:40:
3d:bf:89:80:2a:8a:be:c8:d2:51:2b:1d:0e:dc:f6:
ae:5e:32:66:b2:9e:63:26:7b:02:d0:b1:f3:fa:69:
bd:e9:21:2e:6a:08:c4:a3:e2:1c:59:3e:fc:a2:a7:
5b:ac:35:f7:91:c7:7e:0e:1b:66:c9:86:58:fa:3a:
13:c4:1f:51:5d:0e:0b:6f:2d:a8:84:ab:20:c6:b7:
d8:f7:37:0c:03:1f:79:88:fc:65:c4:75:de:1c:cb:
86:86:bd:0d:90:3c:45:54:1e:8b:6b:b8:49:1a:6a:
41:0b:df:46:f6:43:d2:77:3e:0c:a5:86:70:d6:5d:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:A9:0C:BA:88:F9:E2:A2:CB:84:3E:6E:85:9F:82:82:3F:F7:C4
X509v3 Authority Key Identifier:
keyid:54:9A:03:2C:73:80:D6:2F:0C:70:FB:CE:C0:01:A4:A6:D8:49:97:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HvfCBKoo2C5tBndTYZbgsjLQoGT3ate3Yd3GafJvPj4z/0/549A032C7380D62F0C70FBCEC001A4A6D8499784.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549A032C7380D62F0C70FBCEC001A4A6D8499784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvfCBKoo2C5tBndTYZbgsjLQoGT3ate3Yd3GafJvPj4z/0/3230302e342e39362e302f32322d3234203d3e20323731333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.96.0/22
Signature Algorithm: sha256WithRSAEncryption
07:e9:5c:d3:ad:31:b6:5d:79:d9:ff:8a:0c:65:71:78:c3:4b:
61:ba:36:47:4b:12:b9:2f:94:ae:1f:b7:05:90:a2:38:1d:c5:
fa:33:94:66:15:2d:cc:1e:8f:54:98:62:17:bf:34:de:3c:85:
f1:c8:c5:3f:3e:99:bc:72:00:c7:61:21:b1:4a:e5:2e:63:f9:
ac:f2:1e:30:0e:c1:3f:ce:52:a8:c8:1f:45:9b:72:41:81:cf:
55:89:c1:95:ef:73:0a:a2:ab:5c:ce:6c:58:e5:41:52:a8:ad:
65:3d:3d:28:8c:90:e2:6d:48:ac:55:10:76:f8:1e:21:06:61:
25:b4:56:7b:8a:cd:95:a4:0d:f7:02:8e:bf:43:bb:d7:4a:10:
91:bb:de:62:0f:40:cc:2c:f6:6c:ba:2b:cf:26:48:0a:ee:91:
ea:21:08:52:1e:b7:b0:24:af:26:18:31:08:70:83:cc:94:29:
c8:51:2a:df:de:1f:b1:5e:a5:cd:df:6c:8b:fb:17:58:fb:1d:
a3:56:2e:f7:1b:f4:5c:03:4f:1a:16:5e:e1:da:00:0e:20:3d:
4a:01:0e:14:5b:40:49:0a:08:87:6d:77:5e:a5:69:ae:54:f9:
e6:c5:ac:bd:ac:ba:37:68:7d:4e:fd:07:d8:14:29:51:01:db:
75:a9:f0:2a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUG/QVVeKn416i0zQw+mVN9rgQ70YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ5QTAzMkM3MzgwRDYyRjBDNzBGQkNFQzAwMUE0QTZE
ODQ5OTc4NDAeFw0yNTAyMTIyMDQ2NThaFw0yNjAyMTEyMDUxNThaMDMxMTAvBgNV
BAMTKEYzRjZBOTBDQkE4OEY5RTJBMkNCODQzRTZFODU5RjgyODIzRkY3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGtIRO1bX9a7GDnRTeIG6K05m
Qcsr3DJFTGksxT2Raw1rQCr1RfhWFlNPNIcSaJ4rLQs3Qc59T9l8GOw2dBH35vzK
dBoXcKjw/kv20Q67j/z97pWu75OiQntOo+UgnfG4UYnc3W1ZOstqQyu/peue8gN2
MWU27GzCc5/GVnLQV7Ou8o8BQD2/iYAqir7I0lErHQ7c9q5eMmaynmMmewLQsfP6
ab3pIS5qCMSj4hxZPvyip1usNfeRx34OG2bJhlj6OhPEH1FdDgtvLaiEqyDGt9j3
NwwDH3mI/GXEdd4cy4aGvQ2QPEVUHotruEkaakEL30b2Q9J3PgylhnDWXWEBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8/apDLqI+eKiy4Q+boWfgoI/98QwHwYDVR0j
BBgwFoAUVJoDLHOA1i8McPvOwAGkpthJl4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZmQ0JLb28yQzV0Qm5kVFlaYmdzakxRb0dUM2F0ZTNZZDNHYWZKdlBq
NHovMC81NDlBMDMyQzczODBENjJGMEM3MEZCQ0VDMDAxQTRBNkQ4NDk5Nzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0OUEwMzJDNzM4MEQ2MkYw
QzcwRkJDRUMwMDFBNEE2RDg0OTk3ODQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2ZkNCS29vMkM1dEJuZFRZWmJnc2pMUW9HVDNhdGUzWWQzR2FmSnZQajR6LzAv
MzIzMDMwMmUzNDJlMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMz
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgEYDANBgkqhkiG9w0BAQsFAAOCAQEAB+lc060xtl15
2f+KDGVxeMNLYbo2R0sSuS+Urh+3BZCiOB3F+jOUZhUtzB6PVJhiF7803jyF8cjF
Pz6ZvHIAx2EhsUrlLmP5rPIeMA7BP85SqMgfRZtyQYHPVYnBle9zCqKrXM5sWOVB
UqitZT09KIyQ4m1IrFUQdvgeIQZhJbRWe4rNlaQN9wKOv0O710oQkbveYg9AzCz2
bLorzyZICu6R6iEIUh63sCSvJhgxCHCDzJQpyFEq394fsV6lzd9si/sXWPsdo1Yu
9xv0XANPGhZe4doADiA9SgEOFFtASQoIh213XqVprlT55sWsvay6N2h9Tv0H2BQp
UQHbdanwKg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:13:36 2025 by rpki-client