Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
File: 3230302e35332e36362e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier: FsE0PvhgsAO3qt4JYbh7A4MuGZt17G7jCIZFb9Np/Mw=
Subject key identifier: FF:4E:2C:26:8E:3D:DE:40:FB:FE:79:B5:2C:7C:C1:84:ED:D4:4C:04
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 26923F25B38A9F50D40AFEB0C39E83287F2C8214
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:37 +0000
ROA not before: Tue 21 Jan 2025 20:39:37 +0000
ROA not after: Tue 20 Jan 2026 20:44:37 +0000
asID: 271504
IP address blocks: 200.53.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:92:3f:25:b3:8a:9f:50:d4:0a:fe:b0:c3:9e:83:28:7f:2c:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:37 2025 GMT
Not After : Jan 20 20:44:37 2026 GMT
Subject: CN=FF4E2C268E3DDE40FBFE79B52C7CC184EDD44C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:c7:90:6e:d4:bf:c8:db:5e:ff:53:f2:77:
e5:4e:bc:e7:f5:dc:c3:e1:fc:30:3d:dc:8b:e2:0a:
2f:83:0d:a9:a0:6b:5b:f6:a0:f8:28:bc:82:d4:8e:
c6:54:33:04:60:a7:6d:e5:13:c9:47:c0:70:6b:88:
2e:57:c5:e6:12:12:18:96:5e:1f:d9:91:53:0f:a8:
2a:a0:46:d8:f0:61:d9:7e:9c:ef:57:03:3a:4f:ad:
08:64:88:31:1c:9b:bb:f8:0f:55:f2:80:e6:b9:17:
49:4e:13:b5:94:e5:4f:20:ed:d7:c9:09:67:1d:12:
c2:50:f5:4e:8c:a8:67:ae:c5:38:39:86:8b:f0:99:
f0:55:e6:a4:65:4e:75:6f:c4:83:2f:38:b7:63:45:
0b:d7:dc:fe:64:09:56:80:15:ac:28:4b:6f:c3:50:
0b:65:c3:46:dd:0c:10:f7:62:f7:5b:40:7f:18:d9:
fe:c5:13:a5:cc:07:d6:2d:81:72:a7:70:59:b7:11:
2f:bb:e9:08:01:44:7f:f0:6a:70:a4:bc:d4:60:8c:
c0:de:6e:c1:90:fa:13:5e:b0:95:56:02:80:8f:75:
63:5e:0f:d0:28:01:cd:6e:4e:74:ba:b6:50:0a:fb:
e2:37:b9:0a:01:89:81:26:40:c6:78:9f:a6:f8:48:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:2C:26:8E:3D:DE:40:FB:FE:79:B5:2C:7C:C1:84:ED:D4:4C:04
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.66.0/23
Signature Algorithm: sha256WithRSAEncryption
95:86:ab:5f:67:99:96:1c:b5:e5:2d:bb:fd:5e:58:9e:b2:77:
d5:94:0c:c6:bd:ec:89:f1:0a:31:bf:8e:02:d8:5f:b8:9f:08:
ba:43:52:a4:d3:c9:7e:ab:1b:5e:07:25:98:fa:ae:cd:c9:1f:
77:bb:90:48:a2:8f:d8:5a:3b:c3:56:29:ed:71:1d:e6:c3:2c:
0c:db:c7:69:31:ce:62:cf:c9:98:67:79:e7:16:4e:6d:a6:ea:
ed:47:27:62:16:71:83:ef:fd:f2:ad:39:f3:c8:58:7b:3b:34:
d2:cb:42:9c:02:42:d8:ed:fd:0d:25:14:bd:27:55:11:ee:04:
f3:d5:a9:ee:c9:66:6a:dd:44:06:28:1e:68:e2:32:ac:81:ca:
c1:fc:f3:0a:bd:98:a1:32:6d:6c:75:b1:58:c2:21:e1:97:ac:
db:e7:96:f5:c1:de:d0:3a:2d:22:35:12:0f:6a:89:05:77:9b:
a9:20:f6:e3:29:a0:b0:5b:40:30:c6:00:e1:1b:51:49:b6:72:
ba:49:5a:c6:5c:a1:c8:1f:81:17:76:5c:90:09:90:ad:86:8b:
bf:42:7d:a3:0e:27:aa:f4:c1:73:b4:94:6b:be:0b:ff:08:ad:
6b:c2:86:fe:c9:c4:d6:88:c1:7f:d5:55:12:7b:ab:ac:c9:ea:
49:a0:98:c0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJpI/JbOKn1DUCv6ww56DKH8sghQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCNzBEMTUzNDdCNTkxOTMwNjc3NTE0MUQ4RTJFREFD
RUM2QjMxMDAeFw0yNTAxMjEyMDM5MzdaFw0yNjAxMjAyMDQ0MzdaMDMxMTAvBgNV
BAMTKEZGNEUyQzI2OEUzRERFNDBGQkZFNzlCNTJDN0NDMTg0RURENDRDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UceQbtS/yNte/1Pyd+VOvOf1
3MPh/DA93IviCi+DDamga1v2oPgovILUjsZUMwRgp23lE8lHwHBriC5XxeYSEhiW
Xh/ZkVMPqCqgRtjwYdl+nO9XAzpPrQhkiDEcm7v4D1XygOa5F0lOE7WU5U8g7dfJ
CWcdEsJQ9U6MqGeuxTg5hovwmfBV5qRlTnVvxIMvOLdjRQvX3P5kCVaAFawoS2/D
UAtlw0bdDBD3YvdbQH8Y2f7FE6XMB9YtgXKncFm3ES+76QgBRH/wanCkvNRgjMDe
bsGQ+hNesJVWAoCPdWNeD9AoAc1uTnS6tlAK++I3uQoBiYEmQMZ4n6b4SF4JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/04sJo493kD7/nm1LHzBhO3UTAQwHwYDVR0j
BBgwFoAUQLcNFTR7WRkwZ3UUHY4u2s7GsxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdQNnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZM
OXovMC80MEI3MEQxNTM0N0I1OTE5MzA2Nzc1MTQxRDhFMkVEQUNFQzZCMzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQjcwRDE1MzQ3QjU5MTkz
MDY3NzUxNDFEOEUyRURBQ0VDNkIzMTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXUDZ3ejd4cmVzc29TQmNnWEtxbVFvQVdGZjJmcjhLNmhTa2YxUUd2TDl6LzAv
MzIzMDMwMmUzNTMzMmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByDVCMA0GCSqGSIb3DQEBCwUAA4IBAQCVhqtfZ5mW
HLXlLbv9XliesnfVlAzGveyJ8Qoxv44C2F+4nwi6Q1Kk08l+qxteByWY+q7NyR93
u5BIoo/YWjvDVintcR3mwywM28dpMc5iz8mYZ3nnFk5tpurtRydiFnGD7/3yrTnz
yFh7OzTSy0KcAkLY7f0NJRS9J1UR7gTz1anuyWZq3UQGKB5o4jKsgcrB/PMKvZih
Mm1sdbFYwiHhl6zb55b1wd7QOi0iNRIPaokFd5upIPbjKaCwW0AwxgDhG1FJtnK6
SVrGXKHIH4EXdlyQCZCthou/Qn2jDieq9MFztJRrvgv/CK1rwob+ycTWiMF/1VUS
e6usyepJoJjA
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:15:25 2025 by rpki-client