Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
File: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (raw, json)
Hash identifier: Pqbqpw9soOH+SYmYL6Z7cBcJnaH2aj06XpbYGkFpNYw=
Subject key identifier: 89:13:B5:77:59:50:B0:5B:E7:1E:D7:0A:7F:1D:7C:B8:46:1C:87:68
Certificate issuer: /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Certificate serial: 70C5F57D92D94863A96293F824FAD4AD5475EE79
Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
Signing time: Thu 04 Apr 2024 16:56:33 +0000
ROA not before: Thu 04 Apr 2024 16:51:33 +0000
ROA not after: Thu 03 Apr 2025 16:56:33 +0000
asID: 271343
IP address blocks: 200.39.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c5:f5:7d:92:d9:48:63:a9:62:93:f8:24:fa:d4:ad:54:75:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Validity
Not Before: Apr 4 16:51:33 2024 GMT
Not After : Apr 3 16:56:33 2025 GMT
Subject: CN=8913B5775950B05BE71ED70A7F1D7CB8461C8768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:01:49:74:bf:3c:21:50:58:02:f0:87:3e:
04:bb:95:cb:12:34:7c:fe:32:20:bd:b4:30:4a:1a:
9f:c7:40:a6:80:81:4d:d6:db:ae:dc:ff:f2:d9:b1:
13:c0:83:f8:62:43:1e:8d:96:50:4c:e9:fd:29:c4:
e8:15:c1:4d:60:ac:f0:99:2a:5c:d4:2e:f6:c7:a7:
12:fa:b9:db:de:63:9c:c1:83:9e:c3:9d:67:bc:61:
40:85:3b:ff:42:bc:39:42:61:05:22:d2:ef:38:6c:
1d:e3:53:83:f8:66:08:b2:66:4b:b0:86:b3:23:3d:
89:c3:cc:55:e3:78:ac:86:56:5e:cf:c5:6e:c8:15:
0a:09:fe:1e:a1:00:40:5e:b3:68:18:24:b7:eb:c9:
7f:d5:9d:7f:8b:5c:08:d4:38:1b:38:b9:84:5c:01:
d0:79:5d:aa:50:f9:88:ce:9e:4b:d4:ab:84:7e:3a:
73:52:bb:b2:1f:27:5b:83:5b:97:ac:59:f7:19:8c:
85:f0:95:ef:ad:25:6c:d5:10:a9:b0:46:6c:ca:cc:
b8:57:1d:8b:3c:93:a9:de:73:dc:ec:4e:2b:b6:e6:
6b:26:12:0d:cc:b8:31:00:b8:61:30:7c:fe:e2:a2:
63:ef:84:09:1e:fc:32:6e:32:f0:ed:1b:5a:74:7c:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:B5:77:59:50:B0:5B:E7:1E:D7:0A:7F:1D:7C:B8:46:1C:87:68
X509v3 Authority Key Identifier:
keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.36.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5d:40:ca:ca:22:ed:82:99:83:52:a4:98:b5:da:40:bc:33:
57:d2:50:34:e1:87:47:49:15:f0:a4:1d:80:de:ec:79:13:de:
6d:ce:1b:a7:48:40:80:08:df:26:36:1c:b9:5d:07:6a:3c:92:
16:e0:92:8b:4a:83:38:11:b0:99:19:d8:4b:62:53:02:45:27:
85:06:40:aa:fb:0a:9f:39:d6:17:5e:3e:4c:57:ac:61:fc:13:
d4:0e:d5:0d:8d:63:0c:16:a4:72:a6:d7:27:49:21:4b:17:af:
2c:28:48:f9:5f:57:b0:6b:d7:11:e7:f6:4f:ca:8b:b8:7b:02:
61:78:0c:15:0a:6c:0e:d6:50:65:be:c8:1e:72:93:64:c1:7b:
c1:55:14:c8:79:86:f3:d3:f8:02:92:35:9e:65:06:44:e9:80:
3b:76:84:1f:0a:07:b2:00:4e:1c:7e:0b:80:9d:6a:05:08:e1:
55:bd:34:9d:92:19:cf:72:bd:09:0b:b2:87:4a:f4:d4:04:bc:
4e:f6:03:8a:be:79:18:d8:96:c4:e6:b9:28:8a:a1:5c:a6:19:
83:d3:2b:f4:e3:80:0e:37:c4:dc:f8:82:f5:88:bd:2b:67:89:
36:18:41:8b:7f:01:26:af:eb:82:1b:73:de:af:c6:a5:4f:b5:
87:f2:88:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcMX1fZLZSGOpYpP4JPrUrVR17nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAzNTFERjM4MEM0QjNCNDVGQTY1NjNEMjBDM0M1OTZB
MTNCMEM1MDAeFw0yNDA0MDQxNjUxMzNaFw0yNTA0MDMxNjU2MzNaMDMxMTAvBgNV
BAMTKDg5MTNCNTc3NTk1MEIwNUJFNzFFRDcwQTdGMUQ3Q0I4NDYxQzg3NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAAFJdL88IVBYAvCHPgS7lcsS
NHz+MiC9tDBKGp/HQKaAgU3W267c//LZsRPAg/hiQx6NllBM6f0pxOgVwU1grPCZ
KlzULvbHpxL6udveY5zBg57DnWe8YUCFO/9CvDlCYQUi0u84bB3jU4P4ZgiyZkuw
hrMjPYnDzFXjeKyGVl7PxW7IFQoJ/h6hAEBes2gYJLfryX/VnX+LXAjUOBs4uYRc
AdB5XapQ+YjOnkvUq4R+OnNSu7IfJ1uDW5esWfcZjIXwle+tJWzVEKmwRmzKzLhX
HYs8k6nec9zsTiu25msmEg3MuDEAuGEwfP7iomPvhAke/DJuMvDtG1p0fG59AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiRO1d1lQsFvnHtcKfx18uEYch2gwHwYDVR0j
BBgwFoAUYDUd84DEs7RfplY9IMPFlqE7DFAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0
NUsvMi82MDM1MURGMzgwQzRCM0I0NUZBNjU2M0QyMEMzQzU5NkExM0IwQzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMzUxREYzODBDNEIzQjQ1
RkE2NTYzRDIwQzNDNTk2QTEzQjBDNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlSzhQbm5XVng5NGlkZG8zcmJGSGpBUDJCb0pyVllOaGtCVERYVm5BNDVLLzIv
MzIzMDMwMmUzMzM5MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyCckMA0GCSqGSIb3DQEBCwUAA4IBAQAxXUDKyiLt
gpmDUqSYtdpAvDNX0lA04YdHSRXwpB2A3ux5E95tzhunSECACN8mNhy5XQdqPJIW
4JKLSoM4EbCZGdhLYlMCRSeFBkCq+wqfOdYXXj5MV6xh/BPUDtUNjWMMFqRyptcn
SSFLF68sKEj5X1ewa9cR5/ZPyou4ewJheAwVCmwO1lBlvsgecpNkwXvBVRTIeYbz
0/gCkjWeZQZE6YA7doQfCgeyAE4cfguAnWoFCOFVvTSdkhnPcr0JC7KHSvTUBLxO
9gOKvnkY2JbE5rkoiqFcphmD0yv044AON8Tc+IL1iL0rZ4k2GEGLfwEmr+uCG3Pe
r8alT7WH8ogA
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:40:16 2025 by rpki-client