Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa
File: 3230302e31392e3231392e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier: QiwKSVxYrPQcYjlM9RqNanjBc2YgD2Ep35gMC2x6Xyk=
Subject key identifier: 86:15:43:6A:53:7E:63:57:06:EA:1E:BB:78:2D:BE:12:44:96:C1:C0
Certificate issuer: /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial: 2A4AB36477B9B53BA45BF3D231D1D7C176A64814
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa
Signing time: Tue 26 Nov 2024 21:46:21 +0000
ROA not before: Tue 26 Nov 2024 21:41:21 +0000
ROA not after: Tue 25 Nov 2025 21:46:21 +0000
asID: 11802
IP address blocks: 200.19.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4a:b3:64:77:b9:b5:3b:a4:5b:f3:d2:31:d1:d7:c1:76:a6:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Validity
Not Before: Nov 26 21:41:21 2024 GMT
Not After : Nov 25 21:46:21 2025 GMT
Subject: CN=8615436A537E635706EA1EBB782DBE124496C1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:db:ba:54:ae:11:a7:ad:eb:91:5e:75:99:
8f:10:9a:65:39:da:e5:0f:cf:c8:80:e0:5e:89:1a:
3d:81:a6:fa:cf:0d:ec:9e:67:e9:bc:76:c0:64:1e:
f4:bd:ee:e1:86:cb:ce:43:04:4a:32:df:eb:17:66:
66:c4:64:c8:c2:55:55:bd:a4:d5:8b:65:1a:9a:f2:
b3:e3:6d:9f:6f:69:4b:de:7c:de:ba:0e:ee:68:28:
02:1c:8e:a6:1c:69:68:22:e2:65:90:a1:9a:4f:c1:
0e:2a:9c:35:ec:b5:35:03:c4:09:f4:61:7a:0b:e3:
e2:3a:f8:a4:ad:10:de:33:1a:36:a4:9d:04:b9:5f:
0d:0b:b2:23:b4:80:6e:92:c3:0a:8e:43:db:56:39:
2f:ea:aa:41:4f:76:99:f5:93:fd:05:69:46:0e:c1:
bb:9f:21:c5:1b:d1:a2:12:19:0f:15:29:ce:bc:af:
a8:f9:21:63:36:94:3e:c1:06:30:a2:47:e2:c8:a6:
ba:15:ea:db:29:5f:51:3d:93:81:e2:4d:3c:d4:0b:
99:a4:72:4f:8b:ea:0f:d5:4d:1a:8a:25:73:f6:ef:
8e:dd:4c:ea:85:73:c3:6c:3c:cc:38:1a:ab:9b:df:
a3:70:c0:39:e4:df:15:16:85:ba:11:f2:7e:91:33:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:43:6A:53:7E:63:57:06:EA:1E:BB:78:2D:BE:12:44:96:C1:C0
X509v3 Authority Key Identifier:
keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e1:fe:08:6a:23:26:70:f3:eb:68:77:73:d7:b3:7d:19:d6:
fb:7f:d0:3c:70:97:f5:2d:e9:7d:de:9f:38:7f:36:0b:80:33:
ec:fb:ba:41:db:e1:ab:c0:a6:b3:82:c5:b9:76:1c:bc:ee:1a:
66:3f:4e:80:5c:31:6f:ba:e8:3f:0b:98:7f:8e:15:e2:c3:a1:
39:c7:d3:c7:17:2d:dc:46:1a:03:de:dc:af:2a:3a:1d:ce:c2:
42:28:4b:50:c0:23:41:7c:f4:4d:0e:3f:32:96:e2:ab:28:39:
2c:06:a0:e0:23:32:cd:66:f5:1a:05:50:11:fb:63:01:a5:49:
0b:ae:20:90:e6:86:2d:f4:d4:12:58:e6:2c:d6:be:de:90:7a:
cf:c2:b6:12:4d:45:cd:9c:34:2c:61:4f:e2:e2:3b:a7:12:ad:
f1:38:0a:60:f3:87:73:53:c2:f3:be:ef:22:0f:e4:bf:04:ab:
b8:9e:75:36:28:18:8e:67:9f:3e:91:95:c6:e5:2b:29:f6:75:
06:91:07:a6:fc:c9:68:2a:69:5f:8b:73:0e:81:2d:8b:32:5b:
94:19:4e:e8:dc:a7:b0:a2:d5:96:6c:19:6b:dd:fb:8a:c7:9f:
35:0e:54:6d:e7:a3:95:32:f6:cd:fa:e3:8a:b6:84:11:19:f6:
82:18:b5:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKkqzZHe5tTukW/PSMdHXwXamSBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDExMjYyMTQxMjFaFw0yNTExMjUyMTQ2MjFaMDMxMTAvBgNV
BAMTKDg2MTU0MzZBNTM3RTYzNTcwNkVBMUVCQjc4MkRCRTEyNDQ5NkMxQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5du6VK4Rp63rkV51mY8QmmU5
2uUPz8iA4F6JGj2BpvrPDeyeZ+m8dsBkHvS97uGGy85DBEoy3+sXZmbEZMjCVVW9
pNWLZRqa8rPjbZ9vaUvefN66Du5oKAIcjqYcaWgi4mWQoZpPwQ4qnDXstTUDxAn0
YXoL4+I6+KStEN4zGjaknQS5Xw0LsiO0gG6SwwqOQ9tWOS/qqkFPdpn1k/0FaUYO
wbufIcUb0aISGQ8VKc68r6j5IWM2lD7BBjCiR+LIproV6tspX1E9k4HiTTzUC5mk
ck+L6g/VTRqKJXP2747dTOqFc8NsPMw4Gqub36NwwDnk3xUWhboR8n6RMwQJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhhVDalN+Y1cG6h67eC2+EkSWwcAwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMjMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPbMA0GCSqGSIb3DQEBCwUAA4IBAQCO4f4IaiMm
cPPraHdz17N9Gdb7f9A8cJf1Lel93p84fzYLgDPs+7pB2+GrwKazgsW5dhy87hpm
P06AXDFvuug/C5h/jhXiw6E5x9PHFy3cRhoD3tyvKjodzsJCKEtQwCNBfPRNDj8y
luKrKDksBqDgIzLNZvUaBVAR+2MBpUkLriCQ5oYt9NQSWOYs1r7ekHrPwrYSTUXN
nDQsYU/i4junEq3xOApg84dzU8Lzvu8iD+S/BKu4nnU2KBiOZ58+kZXG5Ssp9nUG
kQem/MloKmlfi3MOgS2LMluUGU7o3KewotWWbBlr3fuKx581DlRt56OVMvbN+uOK
toQRGfaCGLVx
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:48 2025 by rpki-client