Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa
File: 3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa (raw, json)
Hash identifier: Mgk+sD0mvIk2sN7juM0HBlpUdge9hkYmPXw1Z1BiIGo=
Subject key identifier: 5B:FF:49:D8:72:A8:DE:A0:71:6E:5F:4D:24:8B:E2:67:A3:0C:2E:20
Certificate issuer: /CN=BC6C83912B1650F317FC1734FF95EA34DD2528E6
Certificate serial: 6615A0CCBEBC8A518D6BC2A74F0235EFF9921BBA
Authority key identifier: BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa
Signing time: Wed 07 Jun 2023 19:14:44 +0000
ROA not before: Wed 07 Jun 2023 19:09:44 +0000
ROA not after: Wed 05 Jun 2024 19:14:44 +0000
asID: 266572
IP address blocks: 160.238.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:15:a0:cc:be:bc:8a:51:8d:6b:c2:a7:4f:02:35:ef:f9:92:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6C83912B1650F317FC1734FF95EA34DD2528E6
Validity
Not Before: Jun 7 19:09:44 2023 GMT
Not After : Jun 5 19:14:44 2024 GMT
Subject: CN=5BFF49D872A8DEA0716E5F4D248BE267A30C2E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:17:24:6c:4f:c2:0b:8a:d9:28:94:8b:a4:
d6:21:d3:4c:0c:98:b2:71:5a:a4:69:e6:af:9d:d6:
a8:03:c3:7b:c1:ca:cb:fc:4d:58:e3:e4:74:e5:31:
29:40:e9:0a:8d:45:99:f8:08:f6:62:ea:ed:cf:af:
1e:6c:8e:df:27:62:02:3a:78:cf:25:ca:27:6f:2e:
8c:c3:8b:0f:7a:41:66:55:56:61:3c:0f:35:17:29:
89:eb:42:41:c8:1c:9e:60:fe:d9:ec:8b:6a:b0:e8:
47:27:02:0f:bf:46:a6:a3:be:26:f1:af:dc:37:c3:
d9:a7:58:8d:cd:0b:6a:e5:2f:28:71:29:27:2c:1b:
d8:7b:0b:fe:db:a2:1a:c9:ab:4e:56:17:f7:11:42:
d3:e6:58:81:8d:30:a6:69:58:c1:55:32:7b:3d:95:
5d:df:78:07:77:52:9f:30:31:f5:c8:76:b5:79:c7:
64:35:81:60:5e:53:db:87:47:82:ca:eb:80:27:e4:
e2:fd:6e:f9:27:eb:76:53:b2:7b:e1:5e:69:e4:4a:
8a:b7:30:ce:9e:9c:99:91:ca:cb:f5:ca:71:04:83:
2a:d3:21:08:51:d4:a8:48:ae:bd:3a:7f:38:49:b5:
9a:e7:3e:c7:0a:ce:86:cb:cd:2e:72:82:68:05:30:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:49:D8:72:A8:DE:A0:71:6E:5F:4D:24:8B:E2:67:A3:0C:2E:20
X509v3 Authority Key Identifier:
keyid:BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:75:b2:5d:34:27:2c:dc:72:1b:28:19:88:ff:ac:48:ea:67:
66:e5:da:28:d4:2e:56:40:03:d1:4f:66:8a:50:d4:b2:19:e0:
99:d5:84:ce:65:e5:d0:3d:88:b3:d8:55:b8:55:d5:b3:4a:32:
3d:cd:31:c3:f1:74:8e:1a:7a:6d:47:dd:38:47:f0:5f:01:a4:
b4:6e:16:69:75:4d:92:10:0c:0b:ae:08:1a:99:30:34:2d:f5:
5e:32:58:72:83:87:b5:ac:0e:13:68:50:ef:e3:df:95:11:b6:
20:69:39:29:69:c8:02:d1:d6:3a:20:06:c4:9a:5e:0c:ea:33:
4c:16:21:fb:53:57:bc:25:09:79:92:7a:31:e5:21:37:e7:10:
0d:bf:48:6b:cb:86:95:c2:7c:4e:94:58:9a:43:e9:48:3e:f5:
31:d4:7a:08:0f:ed:b2:fd:85:72:50:ec:f1:87:6f:5e:28:c8:
0f:65:01:a2:ce:d4:4d:dd:be:42:ac:a0:95:9d:6e:df:e9:bd:
33:dc:a9:63:b6:82:3f:d0:84:4c:38:47:4f:fa:fa:19:ea:11:
2d:71:b3:ce:55:de:1c:77:cf:22:7e:bd:5a:9f:0f:76:9f:05:
42:cc:e6:cf:93:98:79:b6:1d:a9:cc:57:9a:ce:b4:d6:1e:8c:
0f:32:ec:df
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZhWgzL68ilGNa8KnTwI17/mSG7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2QzgzOTEyQjE2NTBGMzE3RkMxNzM0RkY5NUVBMzRE
RDI1MjhFNjAeFw0yMzA2MDcxOTA5NDRaFw0yNDA2MDUxOTE0NDRaMDMxMTAvBgNV
BAMTKDVCRkY0OUQ4NzJBOERFQTA3MTZFNUY0RDI0OEJFMjY3QTMwQzJFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmxckbE/CC4rZKJSLpNYh00wM
mLJxWqRp5q+d1qgDw3vBysv8TVjj5HTlMSlA6QqNRZn4CPZi6u3Prx5sjt8nYgI6
eM8lyidvLozDiw96QWZVVmE8DzUXKYnrQkHIHJ5g/tnsi2qw6EcnAg+/Rqajvibx
r9w3w9mnWI3NC2rlLyhxKScsG9h7C/7bohrJq05WF/cRQtPmWIGNMKZpWMFVMns9
lV3feAd3Up8wMfXIdrV5x2Q1gWBeU9uHR4LK64An5OL9bvkn63ZTsnvhXmnkSoq3
MM6enJmRysv1ynEEgyrTIQhR1KhIrr06fzhJtZrnPscKzobLzS5ygmgFMLtlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUW/9J2HKo3qBxbl9NJIviZ6MMLiAwHwYDVR0j
BBgwFoAUvGyDkSsWUPMX/Bc0/5XqNN0lKOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5ZanRpNU51b1UyR0xiZG5Qb0pIZFg3N05wUEhwNVpTZHh2Tk14Nnk0
UVEvMC9CQzZDODM5MTJCMTY1MEYzMTdGQzE3MzRGRjk1RUEzNEREMjUyOEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDNkM4MzkxMkIxNjUwRjMx
N0ZDMTczNEZGOTVFQTM0REQyNTI4RTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOWWp0aTVOdW9VMkdMYmRuUG9KSGRYNzdOcFBIcDVaU2R4dk5NeDZ5NFFRLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDu8DANBgkqhkiG9w0BAQsFAAOCAQEAn3Wy
XTQnLNxyGygZiP+sSOpnZuXaKNQuVkAD0U9milDUshngmdWEzmXl0D2Is9hVuFXV
s0oyPc0xw/F0jhp6bUfdOEfwXwGktG4WaXVNkhAMC64IGpkwNC31XjJYcoOHtawO
E2hQ7+PflRG2IGk5KWnIAtHWOiAGxJpeDOozTBYh+1NXvCUJeZJ6MeUhN+cQDb9I
a8uGlcJ8TpRYmkPpSD71MdR6CA/tsv2FclDs8YdvXijID2UBos7UTd2+QqyglZ1u
3+m9M9ypY7aCP9CETDhHT/r6GeoRLXGzzlXeHHfPIn69Wp8Pdp8FQszmz5OYebYd
qcxXms601h6MDzLs3w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:45:17 2025 by rpki-client