Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
File: 3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier: oQys4EkuR/Bjj8BeVCGTCokpoToG8WyvKGpraYn5tRs=
Subject key identifier: 06:F6:A9:A9:20:AB:DE:07:22:4C:FE:4C:18:E9:02:D8:72:93:A3:DF
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 35A39E95CF9774FF9FF66F38363E58B41A2008DE
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
Signing time: Tue 07 Jan 2025 13:28:34 +0000
ROA not before: Tue 07 Jan 2025 13:23:34 +0000
ROA not after: Tue 06 Jan 2026 13:28:34 +0000
asID: 271670
IP address blocks: 200.150.255.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a3:9e:95:cf:97:74:ff:9f:f6:6f:38:36:3e:58:b4:1a:20:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Jan 7 13:23:34 2025 GMT
Not After : Jan 6 13:28:34 2026 GMT
Subject: CN=06F6A9A920ABDE07224CFE4C18E902D87293A3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:44:c8:a6:83:8b:a9:1f:7d:72:ca:a9:a0:
62:9c:62:1c:33:19:4d:66:d1:d9:e2:6f:0e:d5:c2:
26:29:f2:6e:e2:d2:4e:8e:2c:4a:55:5b:d8:e1:7a:
5a:d4:8c:26:62:aa:f5:b1:9f:12:fb:6f:3d:1c:a8:
74:78:9e:2e:0f:28:85:b4:c4:54:a9:22:8f:cb:89:
fc:e1:88:8c:e4:82:79:fc:b4:c5:e2:27:b0:be:f9:
98:7b:76:36:28:d9:c1:7b:52:e4:2b:9f:e8:8c:40:
b6:4e:57:ef:bb:de:25:aa:37:b5:06:f2:84:7f:ab:
70:04:fd:a8:e4:bf:02:65:c9:6a:63:40:bd:69:8d:
24:9e:8e:9f:22:dd:ec:f5:0b:8e:a2:bd:af:78:6c:
17:9c:77:c9:6c:00:43:de:b7:77:56:42:6f:de:e4:
c7:e4:2b:89:66:e6:1a:cd:64:8e:4a:21:b1:fd:b4:
06:c6:49:2f:8f:b0:16:57:0b:eb:13:5d:20:ab:2a:
77:72:e1:75:65:9d:9c:87:b1:83:66:d4:56:e2:ae:
90:01:44:0d:22:7c:ab:ce:78:b6:1d:f6:8c:97:0c:
77:ee:46:aa:37:5f:5c:99:04:81:6c:83:b7:3a:22:
ec:ba:65:92:8f:94:03:5d:3b:36:e1:d2:6c:59:6f:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:A9:A9:20:AB:DE:07:22:4C:FE:4C:18:E9:02:D8:72:93:A3:DF
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.255.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:6a:74:83:8c:59:cb:37:e4:bb:2c:aa:48:9a:eb:8d:e7:
b3:1a:cd:54:a8:6b:8e:41:cc:b4:e7:2a:d3:2f:38:c7:b6:17:
59:5a:a5:a5:05:0c:83:d3:f5:52:36:5e:84:0d:a1:7e:a6:a0:
ff:54:c4:db:cc:a5:97:6b:e3:b7:3d:c9:cc:65:b8:bd:a8:7d:
e6:b6:b0:7d:8d:64:21:f6:98:90:2f:e8:ad:62:11:34:67:96:
b5:bb:d5:6c:d8:79:bc:a8:d9:b6:4a:9d:80:c2:b9:c4:57:c0:
34:3b:db:af:3a:89:e5:04:75:bf:e2:4c:1d:17:f5:10:30:a7:
dd:bc:7c:6f:e4:e8:90:db:d9:8e:64:2c:b0:fd:b6:c9:78:c8:
b1:e8:bc:d4:97:7e:43:1d:cf:e6:c9:4e:0b:ec:74:4e:8b:5d:
26:99:51:bc:18:51:17:39:e0:83:6f:ba:31:12:7e:d8:70:30:
e8:e0:e4:41:bf:5b:28:4c:f5:d5:54:37:ab:49:57:ef:70:be:
79:b4:fc:90:80:83:8b:6b:e9:8c:56:f7:d0:03:ab:48:5f:4e:
28:36:c8:b5:f8:bc:99:a4:77:59:ef:8b:a3:a3:9c:c2:7a:e5:
f4:59:96:21:77:66:fd:d2:ee:77:da:d2:0b:2e:4b:6a:3e:74:
b1:bc:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:05:23 2025 by rpki-client