Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
File: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier: m1xeRBd2BlFTwxfO1a2fuLJr860vZgStwJViu/sDHcc=
Subject key identifier: A1:90:77:9B:6A:E9:F3:81:48:25:2D:82:42:1B:48:2B:61:8F:50:3F
Certificate issuer: /CN=79CBF269438B5C4C5D8301EAF8BCE0DB63987301
Certificate serial: 19F03CE1E963B945543D9ACED3FE3E29BF9A5BB0
Authority key identifier: 79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
Signing time: Mon 25 Sep 2023 13:40:14 +0000
ROA not before: Mon 25 Sep 2023 13:35:14 +0000
ROA not after: Mon 23 Sep 2024 13:40:14 +0000
asID: 28131
IP address blocks: 170.0.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f0:3c:e1:e9:63:b9:45:54:3d:9a:ce:d3:fe:3e:29:bf:9a:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79CBF269438B5C4C5D8301EAF8BCE0DB63987301
Validity
Not Before: Sep 25 13:35:14 2023 GMT
Not After : Sep 23 13:40:14 2024 GMT
Subject: CN=A190779B6AE9F38148252D82421B482B618F503F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:20:c8:84:d1:88:a1:0c:14:00:0b:b8:5a:
f9:da:98:0d:89:44:db:b5:c5:34:63:f0:d4:44:9a:
ae:ce:18:f1:3a:f5:a9:6f:f8:eb:ad:f1:ea:9a:0e:
96:55:dd:ff:aa:f9:f5:cc:af:9d:dd:48:ae:25:09:
6f:62:a0:a6:4f:5c:d5:29:f0:0f:3d:4e:7c:90:d7:
46:e7:26:fc:66:42:ec:cf:5e:37:c2:99:4d:8b:1a:
60:ad:27:f7:6d:3e:69:fc:b9:f5:f0:71:00:61:63:
31:0b:3f:f6:86:2a:41:4a:3c:e5:52:38:60:ac:7d:
6f:b5:39:ab:08:6e:4f:b6:d4:28:f4:78:f5:83:a3:
69:87:51:63:29:5b:c0:c6:92:51:50:66:a9:fb:d6:
2b:aa:75:16:d4:91:bb:05:16:b4:c4:6e:59:aa:bd:
b3:40:e3:d2:8b:9a:c1:95:df:9d:4c:67:86:50:8d:
b8:20:65:f1:21:b2:26:5f:5b:bd:a1:d4:fb:1a:c3:
62:83:fc:fc:5e:6b:51:f0:10:68:90:06:8d:34:b8:
f9:c2:c0:38:73:27:8c:08:b7:77:3c:13:91:04:8e:
c2:75:f5:06:93:5f:5d:76:4d:ba:8a:7f:c3:ec:ac:
30:5c:28:e4:39:d5:17:3b:a0:9e:7f:ec:3b:b3:18:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:77:9B:6A:E9:F3:81:48:25:2D:82:42:1B:48:2B:61:8F:50:3F
X509v3 Authority Key Identifier:
keyid:79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.240.0/22
Signature Algorithm: sha256WithRSAEncryption
07:74:b8:c1:26:cd:e6:5e:22:b5:2a:f4:cb:83:00:8e:17:a6:
95:d7:d9:05:46:32:39:28:44:2a:30:5e:11:3f:09:be:5e:b3:
53:22:f4:47:c0:f9:b9:ee:aa:09:62:b1:55:ab:8b:90:b8:22:
90:e7:bc:3a:e9:6f:4d:f1:db:30:fd:20:8f:94:c1:32:39:26:
a8:cd:12:4c:d6:82:bc:96:37:47:2c:00:91:70:10:c7:60:a5:
3e:20:6c:bc:51:6e:73:06:6c:5f:b9:03:57:2d:37:0e:55:c3:
c2:d9:aa:f7:f9:db:d6:de:8c:40:e1:79:c6:3d:97:23:10:77:
ec:33:0b:f1:67:9c:db:b7:26:4b:13:f1:60:11:7b:79:c6:b4:
ab:0e:51:a9:c6:5f:74:54:d8:78:33:0d:c6:0c:49:75:77:2a:
04:63:2f:b1:b5:ea:ac:b5:e2:49:7d:42:07:f5:a0:d7:d9:e8:
25:12:91:68:84:04:e5:c5:3a:98:d1:ca:71:b3:47:f6:66:b6:
af:0e:4b:3f:6c:9b:11:c3:7d:a5:c3:66:b6:5a:53:bc:7a:7c:
27:61:00:32:1a:5e:8e:5a:7d:2a:45:10:9e:4d:aa:4f:ca:1a:
98:f4:f4:e5:bd:3a:b8:11:97:03:b2:cb:13:72:86:97:b0:22:
a0:3e:2c:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGfA84eljuUVUPZrO0/4+Kb+aW7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlDQkYyNjk0MzhCNUM0QzVEODMwMUVBRjhCQ0UwREI2
Mzk4NzMwMTAeFw0yMzA5MjUxMzM1MTRaFw0yNDA5MjMxMzQwMTRaMDMxMTAvBgNV
BAMTKEExOTA3NzlCNkFFOUYzODE0ODI1MkQ4MjQyMUI0ODJCNjE4RjUwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgSDIhNGIoQwUAAu4WvnamA2J
RNu1xTRj8NREmq7OGPE69alv+Out8eqaDpZV3f+q+fXMr53dSK4lCW9ioKZPXNUp
8A89TnyQ10bnJvxmQuzPXjfCmU2LGmCtJ/dtPmn8ufXwcQBhYzELP/aGKkFKPOVS
OGCsfW+1OasIbk+21Cj0ePWDo2mHUWMpW8DGklFQZqn71iuqdRbUkbsFFrTEblmq
vbNA49KLmsGV351MZ4ZQjbggZfEhsiZfW72h1Psaw2KD/Pxea1HwEGiQBo00uPnC
wDhzJ4wIt3c8E5EEjsJ19QaTX112TbqKf8PsrDBcKOQ51Rc7oJ5/7DuzGGoNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoZB3m2rp84FIJS2CQhtIK2GPUD8wHwYDVR0j
BBgwFoAUecvyaUOLXExdgwHq+Lzg22OYcwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3B1RnNWWTd6UlljcEo0Y1B5S2tDYTlrRnM0RzF4Y0o5M21adGVXMVJy
NmUvMC83OUNCRjI2OTQzOEI1QzRDNUQ4MzAxRUFGOEJDRTBEQjYzOTg3MzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5Q0JGMjY5NDM4QjVDNEM1
RDgzMDFFQUY4QkNFMERCNjM5ODczMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdwdUZzVlk3elJZY3BKNGNQeUtrQ2E5a0ZzNEcxeGNKOTNtWnRlVzFScjZlLzAv
MzEzNzMwMmUzMDJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqoA8DANBgkqhkiG9w0BAQsFAAOCAQEAB3S4wSbN5l4i
tSr0y4MAjhemldfZBUYyOShEKjBeET8Jvl6zUyL0R8D5ue6qCWKxVauLkLgikOe8
OulvTfHbMP0gj5TBMjkmqM0STNaCvJY3RywAkXAQx2ClPiBsvFFucwZsX7kDVy03
DlXDwtmq9/nb1t6MQOF5xj2XIxB37DML8Wec27cmSxPxYBF7eca0qw5RqcZfdFTY
eDMNxgxJdXcqBGMvsbXqrLXiSX1CB/Wg19noJRKRaIQE5cU6mNHKcbNH9ma2rw5L
P2ybEcN9pcNmtlpTvHp8J2EAMhpejlp9KkUQnk2qT8oamPT05b06uBGXA7LLE3KG
l7AioD4sCg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:48:36 2025 by rpki-client