Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
File: 3230302e31392e3139322e302f31392d3139203d3e203131383032.roa (raw, json)
Hash identifier: 60wSuYcmXuHaw23pekNP8ok1L/jikLnQ4ZnV3so5N3c=
Subject key identifier: 6C:E8:25:D4:D5:EB:9C:34:D9:5A:A8:E4:F1:B3:C4:2D:7E:14:D1:38
Certificate issuer: /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial: 532D2F61D67F0466113622C173DD2F7796A2A76A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
Signing time: Thu 18 Jul 2024 20:01:49 +0000
ROA not before: Thu 18 Jul 2024 19:56:49 +0000
ROA not after: Thu 17 Jul 2025 20:01:49 +0000
asID: 11802
IP address blocks: 200.19.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2d:2f:61:d6:7f:04:66:11:36:22:c1:73:dd:2f:77:96:a2:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Validity
Not Before: Jul 18 19:56:49 2024 GMT
Not After : Jul 17 20:01:49 2025 GMT
Subject: CN=6CE825D4D5EB9C34D95AA8E4F1B3C42D7E14D138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:5b:37:d0:e1:bb:48:22:42:89:ef:8b:6b:
58:09:6c:87:91:a1:64:dd:af:4f:5e:c2:72:35:74:
ff:ae:9b:f7:5e:df:ca:e1:20:b3:ac:b8:ba:99:d0:
2d:3e:31:d9:c5:6f:4a:36:a7:6d:45:c8:c4:cc:ce:
62:6c:13:13:ac:9a:43:9a:c2:ca:c5:41:87:8c:ac:
b5:ee:e1:65:f1:fb:c4:33:c7:9e:ea:3e:9e:ba:ef:
1b:2d:76:96:f0:00:3c:35:21:7d:ac:9a:4e:e1:b2:
c6:e1:1f:c8:56:9d:28:0a:18:97:e7:2b:97:37:8b:
65:b8:78:a9:83:dc:2e:51:0d:a1:f5:5b:7b:8a:cb:
d7:40:25:a9:ad:73:9e:e4:db:28:72:b7:63:fb:92:
7a:f0:5d:f0:7f:4e:93:7c:4a:d3:b9:89:19:7d:45:
85:0f:03:c4:ee:b5:90:4e:ce:c4:dc:7f:da:9a:94:
a4:e7:d7:b1:d9:79:99:85:f3:c4:c8:d8:41:01:20:
61:4b:19:f9:e9:f3:2e:26:43:1b:e2:91:50:3c:30:
17:b6:e8:5e:30:7e:8c:5a:35:0f:34:36:10:9f:45:
d0:14:4b:d8:c8:aa:75:e0:b3:6e:46:51:81:db:e7:
2e:b5:5f:14:0c:99:c5:9c:e7:0d:35:f0:bd:36:25:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:25:D4:D5:EB:9C:34:D9:5A:A8:E4:F1:B3:C4:2D:7E:14:D1:38
X509v3 Authority Key Identifier:
keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.19.192.0/19
Signature Algorithm: sha256WithRSAEncryption
48:bf:84:99:b2:06:07:20:91:5f:03:cb:f9:4e:2e:0e:6c:4b:
6d:27:f0:3e:f1:3d:ce:5a:a2:77:a7:c9:be:00:f7:e2:a1:0f:
89:4e:bc:7d:6c:15:23:f9:4e:6d:1a:f0:87:13:09:1c:b7:c8:
3a:8f:95:12:57:47:2e:09:28:cc:f6:83:e7:54:54:54:07:cf:
1f:a2:17:2d:4c:0c:47:cc:8d:15:43:2f:32:9c:c4:ff:e2:33:
74:5b:30:a5:a1:45:e0:92:57:16:04:04:29:19:fc:01:5a:b9:
b7:f0:10:4f:b6:4c:c1:ed:be:f7:92:31:d1:9a:af:52:ca:24:
83:5e:4a:c3:46:96:8e:3a:ce:fd:60:92:8d:f0:cc:40:f5:8c:
f6:1d:dd:ca:de:78:b6:cc:90:97:0b:a4:01:52:dc:f5:7a:2f:
3c:9d:8f:f8:06:89:0a:66:e4:03:dc:c4:8d:9e:01:dc:69:58:
c2:a7:04:00:d7:df:d1:f0:b4:49:42:78:52:cb:02:c3:a8:42:
51:5f:d7:31:7d:dd:ac:15:54:40:d1:d7:4f:27:58:47:07:2b:
10:5f:dd:c8:0f:12:46:6f:7d:3d:39:90:4d:8f:6e:33:51:57:
4e:e6:bf:f3:b8:10:40:96:62:b6:ea:ed:45:57:4e:01:a1:39:
3d:f4:0f:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUy0vYdZ/BGYRNiLBc90vd5aip2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU2NDlaFw0yNTA3MTcyMDAxNDlaMDMxMTAvBgNV
BAMTKDZDRTgyNUQ0RDVFQjlDMzREOTVBQThFNEYxQjNDNDJEN0UxNEQxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMVs30OG7SCJCie+La1gJbIeR
oWTdr09ewnI1dP+um/de38rhILOsuLqZ0C0+MdnFb0o2p21FyMTMzmJsExOsmkOa
wsrFQYeMrLXu4WXx+8Qzx57qPp667xstdpbwADw1IX2smk7hssbhH8hWnSgKGJfn
K5c3i2W4eKmD3C5RDaH1W3uKy9dAJamtc57k2yhyt2P7knrwXfB/TpN8StO5iRl9
RYUPA8TutZBOzsTcf9qalKTn17HZeZmF88TI2EEBIGFLGfnp8y4mQxvikVA8MBe2
6F4wfoxaNQ80NhCfRdAUS9jIqnXgs25GUYHb5y61XxQMmcWc5w018L02JZ9BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbOgl1NXrnDTZWqjk8bPELX4U0TgwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMTM5MzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyBPAMA0GCSqGSIb3DQEBCwUAA4IBAQBIv4SZsgYH
IJFfA8v5Ti4ObEttJ/A+8T3OWqJ3p8m+APfioQ+JTrx9bBUj+U5tGvCHEwkct8g6
j5USV0cuCSjM9oPnVFRUB88fohctTAxHzI0VQy8ynMT/4jN0WzCloUXgklcWBAQp
GfwBWrm38BBPtkzB7b73kjHRmq9SyiSDXkrDRpaOOs79YJKN8MxA9Yz2Hd3K3ni2
zJCXC6QBUtz1ei88nY/4BokKZuQD3MSNngHcaVjCpwQA19/R8LRJQnhSywLDqEJR
X9cxfd2sFVRA0ddPJ1hHBysQX93IDxJGb309OZBNj24zUVdO5r/zuBBAlmK26u1F
V04BoTk99A9H
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:38:57 2025 by rpki-client