Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa
File: 3139312e362e3231312e302f32342d3234203d3e203238323939.roa (raw, json)
Hash identifier: HcNcTgNuJ2XCfMDX4K+njpBk35vjoetB3yX4QHC7DR4=
Subject key identifier: CB:45:58:5C:34:24:0A:9C:93:3C:45:91:E0:17:F8:72:0D:F1:E2:FD
Certificate issuer: /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial: 6E01CE0ED4A85DF862B34F1079AB904CEE1A1D16
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa
Signing time: Mon 23 Jun 2025 13:08:42 +0000
ROA not before: Mon 23 Jun 2025 13:03:42 +0000
ROA not after: Mon 22 Jun 2026 13:08:42 +0000
asID: 28299
IP address blocks: 191.6.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:01:ce:0e:d4:a8:5d:f8:62:b3:4f:10:79:ab:90:4c:ee:1a:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Validity
Not Before: Jun 23 13:03:42 2025 GMT
Not After : Jun 22 13:08:42 2026 GMT
Subject: CN=CB45585C34240A9C933C4591E017F8720DF1E2FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:7f:9a:5d:ad:aa:30:0c:93:c6:3a:e1:c1:
09:87:5b:07:36:c6:d2:22:7e:f0:b9:0b:5a:fa:dc:
2c:24:71:5f:a0:6c:54:d3:44:07:90:6a:bc:ad:7f:
66:1a:d4:66:0f:02:80:1a:a7:a5:e3:20:c9:37:86:
04:c0:49:a2:c2:52:a4:e1:59:a8:3a:c1:88:71:16:
28:41:de:0c:be:d3:ae:5c:c0:88:a1:e9:5a:ad:f9:
06:7c:3c:e9:3b:e9:a5:9e:39:f6:c8:0b:a2:b4:4c:
a4:c5:5c:f0:f4:0d:7b:ea:5f:b3:9a:96:4e:a8:43:
7c:62:d8:a8:4b:6c:25:88:67:07:da:46:af:b5:66:
fe:ef:79:70:65:75:c1:63:ff:5e:96:d9:35:94:72:
f3:9f:44:11:03:f4:74:c4:1a:81:6c:41:d3:db:a5:
33:59:6f:eb:3f:21:bc:1b:eb:a2:51:6f:fd:5f:7b:
86:d4:96:60:1c:65:0b:21:65:ba:75:93:ce:35:9f:
ce:1d:ee:ad:bf:cf:92:79:2b:e8:a3:a9:23:22:76:
46:e1:5e:57:fc:10:c7:6e:d4:a3:1b:0e:7c:39:d9:
23:72:4c:ef:15:51:6b:fd:05:20:ed:69:08:63:c7:
41:4e:ed:f4:bb:d3:12:76:42:55:72:57:fb:4f:f4:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:58:5C:34:24:0A:9C:93:3C:45:91:E0:17:F8:72:0D:F1:E2:FD
X509v3 Authority Key Identifier:
keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.6.211.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ab:9a:71:67:cf:52:7f:1a:8c:42:61:84:18:75:8f:3a:77:
af:62:7d:8c:09:4f:c5:58:cd:fb:58:b9:9c:d4:81:4a:20:9c:
93:39:b5:15:4e:d4:68:cf:24:50:6f:6c:8f:9c:6d:4b:21:e4:
88:e9:5a:cb:dd:a2:31:22:70:3d:97:db:40:d0:ec:39:e5:7c:
09:a3:ae:8e:e1:05:65:cd:bd:00:ce:a6:f5:1d:be:af:eb:0e:
bf:0a:35:62:b9:40:aa:cd:c0:c8:d2:4e:b9:17:a5:2c:8d:63:
4b:18:7e:1d:b9:b1:be:cb:86:61:b1:79:a5:0e:d7:45:f5:62:
fb:5c:9a:9c:53:c9:ec:ed:4d:d2:6b:f4:3d:4a:9d:f0:70:e3:
99:a9:ef:3e:0f:ee:1b:f5:bb:cc:8b:0d:b4:2f:1f:2f:4d:5b:
9d:58:e4:b0:eb:f1:64:4e:59:4e:6e:a8:67:52:d9:7b:d7:79:
26:ce:1e:8c:5a:55:1e:b4:78:76:21:0f:a2:65:b9:33:2e:89:
b7:e6:e1:15:43:38:ce:ba:d5:b0:be:e2:22:02:83:e4:77:b9:
76:66:1c:a6:23:87:f7:99:cc:79:b3:8e:3c:99:50:a7:4d:83:
96:a0:1b:85:2a:ef:ae:12:39:cf:63:a0:f7:46:32:fd:b0:46:
b7:91:a6:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbgHODtSoXfhis08QeauQTO4aHRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4MERCQjRDRTUzQTM4NTUxMkNCQjg3NzQ3RDhDQTFB
REQwOUFFQzAeFw0yNTA2MjMxMzAzNDJaFw0yNjA2MjIxMzA4NDJaMDMxMTAvBgNV
BAMTKENCNDU1ODVDMzQyNDBBOUM5MzNDNDU5MUUwMTdGODcyMERGMUUyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYX+aXa2qMAyTxjrhwQmHWwc2
xtIifvC5C1r63CwkcV+gbFTTRAeQarytf2Ya1GYPAoAap6XjIMk3hgTASaLCUqTh
Wag6wYhxFihB3gy+065cwIih6Vqt+QZ8POk76aWeOfbIC6K0TKTFXPD0DXvqX7Oa
lk6oQ3xi2KhLbCWIZwfaRq+1Zv7veXBldcFj/16W2TWUcvOfRBED9HTEGoFsQdPb
pTNZb+s/Ibwb66JRb/1fe4bUlmAcZQshZbp1k841n84d7q2/z5J5K+ijqSMidkbh
Xlf8EMdu1KMbDnw52SNyTO8VUWv9BSDtaQhjx0FO7fS70xJ2QlVyV/tP9PDPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUy0VYXDQkCpyTPEWR4Bf4cg3x4v0wHwYDVR0j
BBgwFoAUKYDbtM5To4VRLLuHdH2Moa3QmuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmV0OHh6QVE0aGt2Vm5GcTNXNmkxV3diQ3RReHdOem9jODgyclMzR0w1
OUgvMC8yOTgwREJCNENFNTNBMzg1NTEyQ0JCODc3NDdEOENBMUFERDA5QUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODBEQkI0Q0U1M0EzODU1
MTJDQkI4Nzc0N0Q4Q0ExQUREMDlBRUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JldDh4ekFRNGhrdlZuRnEzVzZpMVd3YkN0UXh3TnpvYzg4MnJTM0dMNTlILzAv
MzEzOTMxMmUzNjJlMzIzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL8G0zANBgkqhkiG9w0BAQsFAAOCAQEAJKuacWfPUn8a
jEJhhBh1jzp3r2J9jAlPxVjN+1i5nNSBSiCckzm1FU7UaM8kUG9sj5xtSyHkiOla
y92iMSJwPZfbQNDsOeV8CaOujuEFZc29AM6m9R2+r+sOvwo1YrlAqs3AyNJOuRel
LI1jSxh+HbmxvsuGYbF5pQ7XRfVi+1yanFPJ7O1N0mv0PUqd8HDjmanvPg/uG/W7
zIsNtC8fL01bnVjksOvxZE5ZTm6oZ1LZe9d5Js4ejFpVHrR4diEPomW5My6Jt+bh
FUM4zrrVsL7iIgKD5He5dmYcpiOH95nMebOOPJlQp02DlqAbhSrvrhI5z2Og90Yy
/bBGt5GmIg==
-----END CERTIFICATE-----
Generated at Sat Jul 12 18:20:05 2025 by rpki-client