Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
File: 3137392e302e37322e302f32322d3332203d3e20323731343433.roa (raw, json)
Hash identifier: y8T3V2nc7gGpWZdoaaTDSeY3D459lBrjPuvy17aqDoE=
Subject key identifier: 39:D1:6A:2E:4C:F6:69:7B:89:9C:7E:19:40:18:2A:B6:09:9F:29:4D
Certificate issuer: /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial: 2BA4B5DFB963994CE41ADA1460D19DAD880D2BD4
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
Signing time: Sun 26 Mar 2023 22:09:37 +0000
ROA not before: Sun 26 Mar 2023 22:04:37 +0000
ROA not after: Sun 24 Mar 2024 22:09:37 +0000
asID: 271443
IP address blocks: 179.0.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a4:b5:df:b9:63:99:4c:e4:1a:da:14:60:d1:9d:ad:88:0d:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Validity
Not Before: Mar 26 22:04:37 2023 GMT
Not After : Mar 24 22:09:37 2024 GMT
Subject: CN=39D16A2E4CF6697B899C7E1940182AB6099F294D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:c8:9b:08:48:84:a6:8d:68:60:b8:82:3a:
31:cb:67:51:55:48:a0:59:05:89:1e:b0:5b:02:95:
c3:04:d4:02:72:1b:d6:13:86:16:3a:c5:68:b5:c1:
bd:d5:6c:2a:40:76:3e:be:d2:01:5c:fb:2f:80:b3:
90:6d:8b:0d:d0:6c:4e:c0:a5:76:26:12:a6:2c:f4:
f6:8c:1a:1c:40:d5:60:48:5c:ab:da:0d:55:de:fb:
fe:ae:a5:75:c6:b6:23:82:0d:e8:80:0f:0f:65:fc:
19:ad:d9:59:40:4f:c9:24:6f:b0:c0:93:91:8e:cd:
b3:56:72:59:fd:29:2e:b7:2f:a5:98:12:d9:66:d3:
70:27:f1:16:12:5c:2b:aa:c3:9e:b9:dd:0c:8e:e5:
5c:16:d6:25:a2:b1:75:92:1d:4a:7e:e0:bc:f6:8c:
5c:60:46:82:ea:91:74:89:e6:97:05:8d:08:be:dc:
e3:30:88:34:81:38:d4:58:76:e7:9b:91:12:12:e7:
50:39:8e:8a:55:f7:77:a3:9a:9f:af:84:ad:00:4a:
37:57:c3:d2:91:fc:95:f7:c4:4e:fa:e0:45:27:a9:
e9:4a:38:db:8a:dd:2a:68:8b:c3:3c:e8:a1:27:e4:
6d:75:bc:a9:9d:eb:63:61:98:52:d3:b3:49:af:bf:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:6A:2E:4C:F6:69:7B:89:9C:7E:19:40:18:2A:B6:09:9F:29:4D
X509v3 Authority Key Identifier:
keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:e3:c6:04:63:21:51:be:32:1d:9e:d5:80:1b:f3:3c:58:fe:
c4:a6:57:4a:98:80:28:f5:79:17:0d:38:d7:c5:f6:d6:82:0a:
2f:7b:c3:21:49:73:ff:ed:4d:48:52:a9:e7:ae:ed:15:84:56:
07:8d:cc:27:83:db:81:30:48:b2:e5:1d:b8:2f:0c:a7:61:89:
4b:d0:d9:1f:ec:bd:8a:46:04:c8:c3:81:6d:98:0e:8a:0a:cf:
6b:43:cb:1f:0d:94:b6:40:b0:ec:ed:75:10:72:c7:a1:2a:61:
e1:50:63:9c:c7:42:d6:e4:74:10:99:4a:a1:9c:a8:78:b8:b3:
68:3b:98:e0:b8:2b:ce:65:1d:63:2d:ab:a6:6d:e3:6c:41:d7:
dc:21:a5:f7:62:ec:2b:94:1f:99:78:12:39:f9:5d:43:ca:0e:
9b:a1:8e:ac:b7:e1:5d:58:9c:1b:cd:00:e3:31:c7:9f:12:03:
d9:e2:34:6a:57:ed:89:ea:18:b4:cf:86:17:3c:ed:9e:55:30:
4c:8c:da:83:18:89:39:56:44:71:e9:6b:b8:cf:02:40:34:ef:
d5:78:28:fe:2c:0d:c7:a0:d8:80:43:c5:ec:c6:c0:ce:36:79:
1e:79:cd:f5:f9:02:3d:5f:6d:1f:cd:7e:1f:e0:13:39:c4:74:
2f:b5:fb:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUK6S137ljmUzkGtoUYNGdrYgNK9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjYyMjA0MzdaFw0yNDAzMjQyMjA5MzdaMDMxMTAvBgNV
BAMTKDM5RDE2QTJFNENGNjY5N0I4OTlDN0UxOTQwMTgyQUI2MDk5RjI5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgE8ibCEiEpo1oYLiCOjHLZ1FV
SKBZBYkesFsClcME1AJyG9YThhY6xWi1wb3VbCpAdj6+0gFc+y+As5Btiw3QbE7A
pXYmEqYs9PaMGhxA1WBIXKvaDVXe+/6upXXGtiOCDeiADw9l/Bmt2VlAT8kkb7DA
k5GOzbNWcln9KS63L6WYEtlm03An8RYSXCuqw5653QyO5VwW1iWisXWSHUp+4Lz2
jFxgRoLqkXSJ5pcFjQi+3OMwiDSBONRYduebkRIS51A5jopV93ejmp+vhK0ASjdX
w9KR/JX3xE764EUnqelKONuK3Spoi8M86KEn5G11vKmd62NhmFLTs0mvv+llAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOdFqLkz2aXuJnH4ZQBgqtgmfKU0wHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzEzNzM5MmUzMDJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM0
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMASDANBgkqhkiG9w0BAQsFAAOCAQEAa+PGBGMhUb4y
HZ7VgBvzPFj+xKZXSpiAKPV5Fw0418X21oIKL3vDIUlz/+1NSFKp567tFYRWB43M
J4PbgTBIsuUduC8Mp2GJS9DZH+y9ikYEyMOBbZgOigrPa0PLHw2UtkCw7O11EHLH
oSph4VBjnMdC1uR0EJlKoZyoeLizaDuY4LgrzmUdYy2rpm3jbEHX3CGl92LsK5Qf
mXgSOfldQ8oOm6GOrLfhXVicG80A4zHHnxID2eI0alftieoYtM+GFzztnlUwTIza
gxiJOVZEcelruM8CQDTv1Xgo/iwNx6DYgEPF7MbAzjZ5HnnN9fkCPV9tH81+H+AT
OcR0L7X7Dw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:50:47 2025 by rpki-client