Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32332d3234203d3e20323730333035.roa
File: 3230312e3231362e3132302e302f32332d3234203d3e20323730333035.roa (raw, json)
Hash identifier: tGNyA+3Ia3gbWVVCZLgbBp7XaOTfiSn6jX369k6aZ8c=
Subject key identifier: 5C:3A:DF:66:A7:EE:59:D5:98:E6:DF:78:D0:37:48:00:96:E6:7A:7D
Certificate issuer: /CN=2EB1573F98123E28FC28A2381146A49E59E8D2FE
Certificate serial: 6FBFFA2E13835C9D5ACBF6F79D36D96B050832CD
Authority key identifier: 2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32332d3234203d3e20323730333035.roa
Signing time: Wed 02 Aug 2023 20:29:41 +0000
ROA not before: Wed 02 Aug 2023 20:24:41 +0000
ROA not after: Wed 31 Jul 2024 20:29:41 +0000
asID: 270305
IP address blocks: 201.216.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bf:fa:2e:13:83:5c:9d:5a:cb:f6:f7:9d:36:d9:6b:05:08:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EB1573F98123E28FC28A2381146A49E59E8D2FE
Validity
Not Before: Aug 2 20:24:41 2023 GMT
Not After : Jul 31 20:29:41 2024 GMT
Subject: CN=5C3ADF66A7EE59D598E6DF78D037480096E67A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:b3:c4:29:c5:e8:68:c5:30:4b:03:95:f2:
5f:de:e9:9b:5e:26:4d:e3:38:1a:c4:71:19:26:d8:
5e:70:98:b7:d1:6e:f2:7b:e8:35:51:bd:88:5b:a9:
d8:c6:38:d2:b0:e2:b3:6b:e9:9b:4b:bd:be:98:0f:
23:97:fe:72:f3:87:6d:31:2d:d1:fe:04:c9:32:7b:
76:45:90:72:8c:73:df:2b:85:12:7a:fe:e3:ef:5a:
2c:a8:bf:3f:a1:f8:2a:99:fd:57:b5:05:c1:61:30:
d0:49:dc:4a:dd:be:ce:bc:87:61:ab:78:4e:2d:a4:
3d:f1:20:3b:e8:74:99:31:da:d1:75:bd:ca:b7:02:
78:a9:eb:70:3f:43:16:ed:13:b7:f9:5a:bc:89:c0:
39:cc:82:aa:2d:7a:6c:cc:68:63:f3:f0:4c:f0:50:
16:e5:e6:83:9d:6c:16:32:f7:7a:8f:61:4f:51:9c:
cd:67:d4:8e:26:0c:01:4c:db:1c:fb:1e:a4:bd:c4:
0f:8a:75:46:b2:0d:52:6f:70:35:35:56:19:96:87:
80:a8:e5:0b:9c:11:b3:21:98:4a:1f:5c:75:4b:54:
2d:69:be:5e:77:f6:32:47:a3:95:e1:91:c5:31:bb:
87:b0:1a:cc:cc:26:63:fd:a9:e0:d1:5a:0a:14:63:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:DF:66:A7:EE:59:D5:98:E6:DF:78:D0:37:48:00:96:E6:7A:7D
X509v3 Authority Key Identifier:
keyid:2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32332d3234203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:46:38:21:ef:08:a2:6f:de:9b:44:09:bd:82:23:b2:4f:1e:
5e:03:54:4d:70:30:9e:43:37:e2:00:12:88:08:82:9d:28:a6:
48:03:04:5d:e5:50:02:4f:17:82:52:dd:da:3f:47:e1:9c:ca:
4a:7f:0f:55:b7:ab:e5:53:f9:07:e8:60:2d:19:21:e6:63:0a:
b8:f6:5e:bd:00:dd:b1:35:ee:e1:47:51:35:28:18:8b:b0:ce:
7d:10:45:97:a3:65:18:da:9a:c8:ef:21:58:e9:74:68:e9:34:
16:8e:d0:d2:19:17:ec:f9:e2:ce:f1:11:a8:b0:92:92:06:b6:
a1:3a:76:62:df:d5:fc:55:37:3d:2b:f3:2d:1b:e0:39:14:26:
cb:c2:92:e3:84:5f:a2:08:48:a2:21:6d:f3:b3:f8:ed:08:83:
78:bb:ce:db:ee:b2:8e:fe:49:15:6d:07:99:6a:11:24:80:3b:
05:fd:3f:1f:c2:97:5a:9d:86:ea:f1:df:80:68:a4:46:7b:7e:
23:9b:89:a6:b1:ba:e3:9a:d8:66:4e:f2:29:ec:e7:64:a3:c1:
d0:d1:3a:37:22:1f:f1:c3:e3:36:d4:ea:36:e9:a8:25:c7:8f:
4b:78:ec:20:77:1d:60:8c:1c:a6:c4:01:40:6c:a0:53:08:b8:
e5:72:62:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUb7/6LhODXJ1ay/b3nTbZawUIMs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCMTU3M0Y5ODEyM0UyOEZDMjhBMjM4MTE0NkE0OUU1
OUU4RDJGRTAeFw0yMzA4MDIyMDI0NDFaFw0yNDA3MzEyMDI5NDFaMDMxMTAvBgNV
BAMTKDVDM0FERjY2QTdFRTU5RDU5OEU2REY3OEQwMzc0ODAwOTZFNjdBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqrPEKcXoaMUwSwOV8l/e6Zte
Jk3jOBrEcRkm2F5wmLfRbvJ76DVRvYhbqdjGONKw4rNr6ZtLvb6YDyOX/nLzh20x
LdH+BMkye3ZFkHKMc98rhRJ6/uPvWiyovz+h+CqZ/Ve1BcFhMNBJ3Erdvs68h2Gr
eE4tpD3xIDvodJkx2tF1vcq3Anip63A/QxbtE7f5WryJwDnMgqotemzMaGPz8Ezw
UBbl5oOdbBYy93qPYU9RnM1n1I4mDAFM2xz7HqS9xA+KdUayDVJvcDU1VhmWh4Co
5QucEbMhmEofXHVLVC1pvl539jJHo5XhkcUxu4ewGszMJmP9qeDRWgoUY4/nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXDrfZqfuWdWY5t940DdIAJbmen0wHwYDVR0j
BBgwFoAULrFXP5gSPij8KKI4EUaknlno0v4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvMkVCMTU3M0Y5ODEyM0UyOEZDMjhBMjM4MTE0NkE0OUU1OUU4RDJGRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRUIxNTczRjk4MTIzRTI4RkMy
OEEyMzgxMTQ2QTQ5RTU5RThEMkZFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzAvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcnYeDANBgkqhkiG9w0BAQsFAAOCAQEALUY4Ie8I
om/em0QJvYIjsk8eXgNUTXAwnkM34gASiAiCnSimSAMEXeVQAk8XglLd2j9H4ZzK
Sn8PVber5VP5B+hgLRkh5mMKuPZevQDdsTXu4UdRNSgYi7DOfRBFl6NlGNqayO8h
WOl0aOk0Fo7Q0hkX7PnizvERqLCSkga2oTp2Yt/V/FU3PSvzLRvgORQmy8KS44Rf
oghIoiFt87P47QiDeLvO2+6yjv5JFW0HmWoRJIA7Bf0/H8KXWp2G6vHfgGikRnt+
I5uJprG645rYZk7yKeznZKPB0NE6NyIf8cPjNtTqNumoJcePS3jsIHcdYIwcpsQB
QGygUwi45XJi7Q==
-----END CERTIFICATE-----
Generated at Thu May 15 11:45:40 2025 by rpki-client