Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133362e302f32312d3231203d3e203532353438.roa
File: 3137372e38352e3133362e302f32312d3231203d3e203532353438.roa (raw, json)
Hash identifier: pvmA7gZ1dmu+RkWBZgIKg7KAgC2epZPSJEtepDfKtt0=
Subject key identifier: 4B:71:71:BA:30:50:B6:E4:E8:0F:BF:01:BB:0F:97:1A:7B:13:19:94
Certificate issuer: /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial: 61F252061AF97F01D1C8680717FAC7622053D096
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133362e302f32312d3231203d3e203532353438.roa
Signing time: Tue 25 Jul 2023 21:14:50 +0000
ROA not before: Tue 25 Jul 2023 21:09:50 +0000
ROA not after: Tue 23 Jul 2024 21:14:50 +0000
asID: 52548
IP address blocks: 177.85.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f2:52:06:1a:f9:7f:01:d1:c8:68:07:17:fa:c7:62:20:53:d0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Validity
Not Before: Jul 25 21:09:50 2023 GMT
Not After : Jul 23 21:14:50 2024 GMT
Subject: CN=4B7171BA3050B6E4E80FBF01BB0F971A7B131994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:97:1d:92:7e:fa:09:ec:42:7f:77:ec:77:
ad:6b:35:73:f3:97:d5:de:49:f6:11:0c:ab:9d:7b:
2c:03:ea:6b:4b:02:77:21:26:bb:3f:bb:48:41:e1:
36:ca:0a:2a:d6:d0:f2:17:15:cd:66:90:57:9e:88:
c1:98:ca:80:cc:76:c2:16:6f:b9:95:4a:df:e0:ba:
14:e1:7d:19:92:b9:db:76:d8:a0:d1:50:41:36:e8:
cc:3e:64:d7:06:d4:50:6b:e7:12:eb:35:43:06:cb:
d0:34:91:d2:dc:86:c6:58:3a:f4:20:6b:39:52:fb:
00:1a:d9:5c:5a:1d:36:96:fe:e0:ed:6f:e3:51:82:
46:b0:22:05:67:3c:b9:ac:47:73:1d:87:70:c8:c9:
78:e2:89:d9:a5:e1:fa:97:47:80:01:55:5b:a7:84:
e5:bc:7c:40:fd:95:a5:76:b9:4b:0e:76:31:f1:5e:
2b:a5:14:d2:f3:72:b0:24:a2:c1:88:0e:83:34:7b:
fd:00:32:4c:ef:73:e9:58:5d:ed:b2:d0:0c:b0:84:
d6:cb:ac:7f:79:da:0b:db:07:e4:3e:66:a7:ff:be:
0f:da:16:6b:8a:14:de:f6:30:8f:10:0b:6d:ef:22:
f3:22:a5:55:e3:2d:67:bc:6a:a3:81:38:ab:80:6d:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:71:BA:30:50:B6:E4:E8:0F:BF:01:BB:0F:97:1A:7B:13:19:94
X509v3 Authority Key Identifier:
keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133362e302f32312d3231203d3e203532353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.136.0/21
Signature Algorithm: sha256WithRSAEncryption
48:c3:ff:72:42:f7:cb:7b:1e:87:40:2a:8e:44:e9:05:f2:59:
39:e5:48:02:a3:8e:72:00:64:9c:31:fb:6e:18:d6:2c:79:26:
d4:9b:79:ea:3e:c9:29:11:bf:46:e2:d2:34:da:3c:d1:f3:3d:
4c:1c:ec:42:8c:68:0e:84:ae:b7:a2:38:c4:a8:35:a7:b3:77:
75:ca:b3:ef:1b:6b:87:2a:b5:fa:f1:48:36:31:2e:52:4c:d8:
a5:12:da:b4:7a:e7:dc:f0:93:61:7f:e1:50:0e:07:eb:bc:e4:
b1:df:7c:52:ef:b8:d9:5b:a6:5a:9f:7a:1b:27:61:88:de:e3:
1f:d0:9b:3d:0e:68:a1:17:37:5d:cf:95:c6:a5:0c:f1:17:84:
1b:c4:9c:bc:a8:52:3b:f4:a9:6b:4b:d8:2c:05:ad:75:da:8e:
e9:e8:c1:4a:5a:6b:f3:50:e0:be:f7:a7:6b:dc:a4:8e:81:a4:
6e:9d:19:77:56:9e:61:87:b9:ce:ad:77:5c:56:5f:26:a0:6c:
33:d9:13:75:a9:33:02:bb:41:b0:c0:b1:17:8a:c6:20:88:6a:
ad:4e:93:0f:8b:3e:8e:03:cb:7d:f9:52:5f:8c:bc:e2:0a:55:
da:88:b5:7a:aa:e2:88:a3:50:34:0a:bb:c5:b8:a9:95:55:9c:
a4:16:32:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYfJSBhr5fwHRyGgHF/rHYiBT0JYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUwREQzNDAwNkUzNzQzNjc1NjYxOEFEQTMyMkMxNkMw
QUZDNjk3MDAeFw0yMzA3MjUyMTA5NTBaFw0yNDA3MjMyMTE0NTBaMDMxMTAvBgNV
BAMTKDRCNzE3MUJBMzA1MEI2RTRFODBGQkYwMUJCMEY5NzFBN0IxMzE5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWZcdkn76CexCf3fsd61rNXPz
l9XeSfYRDKudeywD6mtLAnchJrs/u0hB4TbKCirW0PIXFc1mkFeeiMGYyoDMdsIW
b7mVSt/guhThfRmSudt22KDRUEE26Mw+ZNcG1FBr5xLrNUMGy9A0kdLchsZYOvQg
azlS+wAa2VxaHTaW/uDtb+NRgkawIgVnPLmsR3Mdh3DIyXjiidml4fqXR4ABVVun
hOW8fED9laV2uUsOdjHxXiulFNLzcrAkosGIDoM0e/0AMkzvc+lYXe2y0AywhNbL
rH952gvbB+Q+Zqf/vg/aFmuKFN72MI8QC23vIvMipVXjLWe8aqOBOKuAbRJTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUS3FxujBQtuToD78Buw+XGnsTGZQwHwYDVR0j
BBgwFoAU7g3TQAbjdDZ1ZhitoyLBbAr8aXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMktNUEw3ZXpZTHpIWHdLTFIySFBIdzVFNnNKZUdVb0d0d3daUUw0N0Vz
d1QvMC9FRTBERDM0MDA2RTM3NDM2NzU2NjE4QURBMzIyQzE2QzBBRkM2OTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFMEREMzQwMDZFMzc0MzY3
NTY2MThBREEzMjJDMTZDMEFGQzY5NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJLTVBMN2V6WUx6SFh3S0xSMkhQSHc1RTZzSmVHVW9HdHd3WlFMNDdFc3dULzAv
MzEzNzM3MmUzODM1MmUzMTMzMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMy
MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVWIMA0GCSqGSIb3DQEBCwUAA4IBAQBIw/9yQvfL
ex6HQCqOROkF8lk55UgCo45yAGScMftuGNYseSbUm3nqPskpEb9G4tI02jzR8z1M
HOxCjGgOhK63ojjEqDWns3d1yrPvG2uHKrX68Ug2MS5STNilEtq0eufc8JNhf+FQ
DgfrvOSx33xS77jZW6Zan3obJ2GI3uMf0Js9DmihFzddz5XGpQzxF4QbxJy8qFI7
9KlrS9gsBa112o7p6MFKWmvzUOC+96dr3KSOgaRunRl3Vp5hh7nOrXdcVl8moGwz
2RN1qTMCu0GwwLEXisYgiGqtTpMPiz6OA8t9+VJfjLziClXaiLV6quKIo1A0CrvF
uKmVVZykFjLE
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:10 2025 by rpki-client