Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e302e302f32312d3332203d3e203238313338.roa
File: 3138372e34392e302e302f32312d3332203d3e203238313338.roa (raw, json)
Hash identifier: fTvy/g4fipW2YuBqHlQWPxhwLyxGmGG3bGVCyo88pqg=
Subject key identifier: 94:37:E3:6B:10:14:66:8C:74:54:5A:98:C0:C0:10:49:7E:7A:95:B1
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 31509FD28BE45F914B2A709825E0F46B8BBAB63F
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e302e302f32312d3332203d3e203238313338.roa
Signing time: Mon 17 Mar 2025 15:03:40 +0000
ROA not before: Mon 17 Mar 2025 14:58:40 +0000
ROA not after: Mon 16 Mar 2026 15:03:40 +0000
asID: 28138
IP address blocks: 187.49.0.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:50:9f:d2:8b:e4:5f:91:4b:2a:70:98:25:e0:f4:6b:8b:ba:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 17 14:58:40 2025 GMT
Not After : Mar 16 15:03:40 2026 GMT
Subject: CN=9437E36B1014668C74545A98C0C010497E7A95B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:86:87:45:b7:88:cd:23:d8:b8:78:53:ce:
dd:f8:cc:b1:40:60:48:10:a5:01:0f:a1:14:3d:ee:
6c:91:97:60:17:18:d3:9c:51:a5:b3:2f:dd:f9:c8:
a4:0c:20:c9:e6:80:1d:e4:0d:f7:a7:bd:b2:10:1d:
e8:ec:89:60:a5:30:fe:df:a2:e7:c6:65:73:a3:80:
50:90:81:9a:9e:6d:bf:ef:f5:ad:8a:7e:cb:8a:4b:
cb:5c:8c:1b:d8:18:27:91:1c:22:c7:2d:02:d7:ed:
c8:95:d5:b8:c2:0c:c7:28:44:15:91:85:4e:59:4d:
36:e4:8b:ae:d3:fd:2c:45:f2:1d:65:43:2d:2d:1e:
7e:ae:4c:68:c3:e8:d5:d4:7d:bd:b4:ee:00:d8:92:
3c:71:f8:77:bd:6e:8e:03:56:59:35:c7:34:71:b1:
e1:44:f8:c2:51:cf:8b:bf:ab:92:89:df:3f:b2:c4:
ce:4f:06:20:31:40:32:fc:bd:28:c3:d4:e9:7a:1e:
d4:d1:5a:14:4f:3a:81:58:62:68:fb:c5:3e:6d:00:
8a:97:1b:66:b1:23:e9:56:30:3f:a2:c8:33:32:ed:
93:e1:bf:16:73:74:5b:d4:c6:4f:ca:a5:2b:c1:8b:
02:aa:a7:8b:3f:39:91:65:e7:2a:64:88:36:9e:be:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:37:E3:6B:10:14:66:8C:74:54:5A:98:C0:C0:10:49:7E:7A:95:B1
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e302e302f32312d3332203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:4c:23:44:6f:47:8f:8d:67:1c:73:12:3a:65:eb:97:37:ea:
82:f8:42:0b:1f:08:7f:58:fc:8d:8e:a7:5e:3e:eb:36:cf:e7:
b8:6a:ac:04:78:a1:bb:a2:92:50:0c:04:8c:e6:d2:3f:46:c8:
ab:cf:86:a4:fe:fb:e7:63:fd:77:9f:ab:d8:83:90:07:f9:6a:
9e:cd:d5:4e:78:a7:c1:f9:b0:f2:44:5a:00:ef:3b:07:e7:af:
5c:47:4d:f8:c7:d1:0d:92:aa:ed:48:06:ac:08:f0:71:6e:dd:
76:da:a5:7d:1e:ff:73:ba:75:85:c9:71:ed:0d:72:d1:61:7f:
fe:64:79:00:60:be:28:d1:4a:af:5d:1d:0d:18:fb:90:56:88:
7e:77:05:7a:3d:49:36:00:49:13:e8:56:10:de:3b:39:ee:c0:
5b:4f:46:3e:9e:73:d3:db:f1:1f:d0:d0:bb:7a:9e:3b:d2:8c:
e7:d4:55:9c:dc:e1:32:41:5a:05:8c:8d:9c:46:48:77:3f:eb:
ab:a1:28:e9:65:d7:e4:ee:d7:f4:8e:68:95:9f:30:ce:2a:76:
13:2c:e4:b7:62:8b:89:de:4e:af:62:fa:ac:d1:1c:34:03:2d:
57:3d:88:8f:75:a4:6f:ed:79:ac:60:2a:be:29:b6:8a:b2:e5:
21:4b:1f:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUMVCf0ovkX5FLKnCYJeD0a4u6tj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I1RkZFNEVGRjYxMjBGOUFGNjQxMTY1MUU0NTFCQzg1
MERBOTdFMzAeFw0yNTAzMTcxNDU4NDBaFw0yNjAzMTYxNTAzNDBaMDMxMTAvBgNV
BAMTKDk0MzdFMzZCMTAxNDY2OEM3NDU0NUE5OEMwQzAxMDQ5N0U3QTk1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VIaHRbeIzSPYuHhTzt34zLFA
YEgQpQEPoRQ97myRl2AXGNOcUaWzL935yKQMIMnmgB3kDfenvbIQHejsiWClMP7f
oufGZXOjgFCQgZqebb/v9a2KfsuKS8tcjBvYGCeRHCLHLQLX7ciV1bjCDMcoRBWR
hU5ZTTbki67T/SxF8h1lQy0tHn6uTGjD6NXUfb207gDYkjxx+He9bo4DVlk1xzRx
seFE+MJRz4u/q5KJ3z+yxM5PBiAxQDL8vSjD1Ol6HtTRWhRPOoFYYmj7xT5tAIqX
G2axI+lWMD+iyDMy7ZPhvxZzdFvUxk/KpSvBiwKqp4s/OZFl5ypkiDaevguzAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUlDfjaxAUZox0VFqYwMAQSX56lbEwHwYDVR0j
BBgwFoAUO1/+Tv9hIPmvZBFlHkUbyFDal+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlF6V01IVzRkTDhzcnpvN2FIMUZuM3NlWlFMcVJzczcyVzRyOFViUlJR
RzkvMC8zQjVGRkU0RUZGNjEyMEY5QUY2NDExNjUxRTQ1MUJDODUwREE5N0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNUZGRTRFRkY2MTIwRjlB
RjY0MTE2NTFFNDUxQkM4NTBEQTk3RTMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZReldNSFc0ZEw4c3J6bzdhSDFGbjNzZVpRTHFSc3M3Mlc0cjhVYlJSUUc5LzAv
MzEzODM3MmUzNDM5MmUzMDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMyMzgzMTMz
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO7MQAwDQYJKoZIhvcNAQELBQADggEBAKhMI0RvR4+NZxxz
Ejpl65c36oL4QgsfCH9Y/I2Op14+6zbP57hqrAR4obuiklAMBIzm0j9GyKvPhqT+
++dj/Xefq9iDkAf5ap7N1U54p8H5sPJEWgDvOwfnr1xHTfjH0Q2Squ1IBqwI8HFu
3XbapX0e/3O6dYXJce0NctFhf/5keQBgvijRSq9dHQ0Y+5BWiH53BXo9STYASRPo
VhDeOznuwFtPRj6ec9Pb8R/Q0Lt6njvSjOfUVZzc4TJBWgWMjZxGSHc/66uhKOll
1+Tu1/SOaJWfMM4qdhMs5Ldii4neTq9i+qzRHDQDLVc9iI91pG/teaxgKr4ptoqy
5SFLH8k=
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:39:52 2025 by rpki-client