Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
File: 3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier: cDgZ5T1DJnYPK47BurZgV6eGTudixfk0sXcmf270HAM=
Subject key identifier: 89:05:E0:43:43:26:00:87:5F:15:B6:75:47:2B:D8:91:16:D5:15:BF
Certificate issuer: /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial: 7187268AC200E8DCB0285935C64EFF234ABD89F1
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
Signing time: Thu 04 Apr 2024 00:53:38 +0000
ROA not before: Thu 04 Apr 2024 00:48:38 +0000
ROA not after: Thu 03 Apr 2025 00:53:38 +0000
asID: 28594
IP address blocks: 200.218.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:87:26:8a:c2:00:e8:dc:b0:28:59:35:c6:4e:ff:23:4a:bd:89:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Validity
Not Before: Apr 4 00:48:38 2024 GMT
Not After : Apr 3 00:53:38 2025 GMT
Subject: CN=8905E043432600875F15B675472BD89116D515BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:f0:f8:e6:68:59:f0:f8:34:da:0c:00:c3:
8a:25:1d:45:b5:4a:1e:e5:7d:17:6d:f5:e4:ab:14:
81:32:da:e8:83:72:bb:5d:6b:18:7f:12:9f:76:7a:
ea:b5:15:86:68:c0:23:79:64:22:26:e5:87:96:19:
75:3b:e8:d9:a4:31:42:f3:79:9c:a8:5f:7c:cd:6b:
14:ba:b6:80:1f:e1:cb:47:c8:62:f9:2e:d4:3f:78:
59:01:9a:54:41:c5:9c:93:74:ec:95:c7:3b:b2:61:
f1:ac:c9:77:76:a2:4f:0b:3e:b4:d7:69:a2:0e:27:
22:07:2d:d1:08:ed:f7:ed:42:f9:79:2a:ed:bf:e9:
b5:f7:d0:14:3a:a9:ee:36:23:39:ed:06:f4:37:d7:
a4:2b:78:8e:8b:2e:04:d5:00:5c:ec:ac:4e:72:ba:
5f:40:3a:0a:a3:82:c9:79:6a:c3:82:51:0e:96:1e:
f0:bf:62:25:57:89:64:20:92:f3:20:f5:89:e3:64:
54:32:a5:b7:20:89:d8:61:30:31:95:fe:cd:b9:ad:
12:9f:4c:7b:b3:68:88:d6:6a:e1:fc:15:5f:d1:63:
79:b4:b5:c8:38:81:b8:58:5b:4b:9f:7b:9a:bc:1b:
84:ae:06:3a:dd:b0:bd:18:9d:df:f1:5a:3d:48:bf:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:E0:43:43:26:00:87:5F:15:B6:75:47:2B:D8:91:16:D5:15:BF
X509v3 Authority Key Identifier:
keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e3:4c:e0:6b:8e:62:01:fa:bc:5d:19:f2:b1:76:8f:61:3f:
4a:b0:74:12:eb:15:0d:a4:20:cd:80:3b:0b:fb:cc:de:ca:00:
41:01:a6:a0:3b:f7:0f:88:23:b0:cc:91:89:8f:73:3c:88:37:
fd:a3:fd:40:e1:48:4e:5c:ee:eb:57:07:ee:0c:eb:4e:25:d1:
ac:d3:cf:57:10:56:e0:55:26:fb:29:1f:d3:ad:c8:ea:4b:65:
e1:72:da:00:82:4e:6e:5f:06:10:bb:7a:ba:62:a4:46:85:86:
31:c5:02:b6:9d:8f:b5:47:6d:d6:bb:98:f0:88:30:2a:06:af:
7b:5c:0d:31:20:2c:9d:61:b6:ab:03:7b:a3:f2:1f:d8:ab:3d:
6b:52:15:d7:6f:72:57:2b:70:80:62:95:51:bb:fc:5f:47:61:
26:9f:7a:9a:e4:31:2b:49:96:12:b8:6f:00:89:7e:61:47:cd:
cb:87:27:53:aa:3c:f8:9c:0f:05:c3:bc:6a:e5:3e:54:0c:cf:
1a:4a:dd:96:1f:8d:62:54:b0:4c:b5:0b:33:40:7a:26:60:7f:
2a:3b:4e:1f:f1:08:0b:4c:39:df:63:14:2a:2c:32:56:95:5e:
2d:19:9c:3b:9d:9a:54:33:53:66:db:4e:c9:b0:ca:84:f0:ee:
d9:70:5f:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcYcmisIA6NywKFk1xk7/I0q9ifEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNDA0MDQwMDQ4MzhaFw0yNTA0MDMwMDUzMzhaMDMxMTAvBgNV
BAMTKDg5MDVFMDQzNDMyNjAwODc1RjE1QjY3NTQ3MkJEODkxMTZENTE1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A/D45mhZ8Pg02gwAw4olHUW1
Sh7lfRdt9eSrFIEy2uiDcrtdaxh/Ep92euq1FYZowCN5ZCIm5YeWGXU76NmkMULz
eZyoX3zNaxS6toAf4ctHyGL5LtQ/eFkBmlRBxZyTdOyVxzuyYfGsyXd2ok8LPrTX
aaIOJyIHLdEI7fftQvl5Ku2/6bX30BQ6qe42IzntBvQ316QreI6LLgTVAFzsrE5y
ul9AOgqjgsl5asOCUQ6WHvC/YiVXiWQgkvMg9YnjZFQypbcgidhhMDGV/s25rRKf
THuzaIjWauH8FV/RY3m0tcg4gbhYW0ufe5q8G4SuBjrdsL0Ynd/xWj1Iv4QJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiQXgQ0MmAIdfFbZ1RyvYkRbVFb8wHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vgwDQYJKoZIhvcNAQELBQADggEBAGHjTOBr
jmIB+rxdGfKxdo9hP0qwdBLrFQ2kIM2AOwv7zN7KAEEBpqA79w+II7DMkYmPczyI
N/2j/UDhSE5c7utXB+4M604l0azTz1cQVuBVJvspH9OtyOpLZeFy2gCCTm5fBhC7
erpipEaFhjHFAradj7VHbda7mPCIMCoGr3tcDTEgLJ1htqsDe6PyH9irPWtSFddv
clcrcIBilVG7/F9HYSafeprkMStJlhK4bwCJfmFHzcuHJ1OqPPicDwXDvGrlPlQM
zxpK3ZYfjWJUsEy1CzNAeiZgfyo7Th/xCAtMOd9jFCosMlaVXi0ZnDudmlQzU2bb
TsmwyoTw7tlwX7I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:29 2025 by rpki-client