Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39302e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e39302e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: bRD8+i33ClCFtEHerM6pgz+jGAXm++owzvLQGjo+GU4=
Subject key identifier: 2D:52:40:BE:7B:B2:A4:BA:74:B0:E6:AD:74:02:4C:09:FB:A2:F8:68
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 1D56343C500436568022F8026C24E6677536655C
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39302e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:48 +0000
ROA not before: Thu 27 Feb 2025 18:16:48 +0000
ROA not after: Thu 26 Feb 2026 18:21:48 +0000
asID: 52801
IP address blocks: 177.52.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:56:34:3c:50:04:36:56:80:22:f8:02:6c:24:e6:67:75:36:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:48 2025 GMT
Not After : Feb 26 18:21:48 2026 GMT
Subject: CN=2D5240BE7BB2A4BA74B0E6AD74024C09FBA2F868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:64:33:71:11:4b:27:c8:8f:49:a5:37:37:
2a:69:f5:66:5c:61:71:07:e6:e6:99:24:96:ea:21:
e0:b9:a8:4d:e0:93:84:24:60:1d:04:a5:a9:f0:fc:
6e:e7:23:47:f8:91:08:82:42:54:a5:0a:b5:3f:16:
c8:48:18:8a:22:eb:87:52:27:8f:a0:ef:97:67:c0:
8f:27:12:4c:d2:e5:b1:0f:e7:41:47:7c:4b:6a:e3:
5b:3a:41:f3:af:ea:77:ec:46:85:8a:04:c1:94:a3:
09:30:25:7c:8d:06:91:55:65:c8:42:fe:2d:94:ca:
1b:09:18:44:59:13:07:04:6f:ff:b5:8c:bf:70:66:
8c:41:47:ed:85:d5:75:34:e2:dc:dc:d9:1a:63:83:
29:64:eb:89:62:5f:51:2c:d8:b3:3a:c3:de:da:da:
9d:08:af:a6:48:38:d2:87:12:e7:95:d1:fe:d7:4d:
e6:22:88:9e:cb:4b:ef:f2:71:3e:39:c9:78:01:19:
80:77:9b:d4:79:70:30:fa:ce:2f:c2:39:a8:d2:19:
f6:27:cf:7e:13:5a:51:03:cd:9e:a0:d6:8f:2a:0a:
1f:93:8e:6d:ea:ac:33:47:f1:6b:c3:39:f1:bc:cf:
d3:ef:56:24:5f:d2:8f:8c:7d:e6:ce:f1:23:c8:a4:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:40:BE:7B:B2:A4:BA:74:B0:E6:AD:74:02:4C:09:FB:A2:F8:68
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39302e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9f:a8:24:03:35:34:63:11:c0:46:68:63:a7:64:1f:9e:7e:
d3:d6:fb:93:b3:65:30:00:ad:38:45:02:81:c8:b5:a3:a3:21:
e7:81:ac:67:d1:cc:3e:1f:90:77:9b:e8:b3:a9:2d:2d:77:c0:
85:a1:f1:96:86:fd:7d:d3:1a:3b:3f:9a:cb:f7:4a:17:f5:38:
de:85:eb:40:66:9b:bb:44:a5:90:a4:50:06:6a:60:86:6b:e2:
23:5a:54:8e:ce:18:cd:df:e3:6d:00:a3:cd:a2:32:89:e2:da:
94:47:44:08:67:50:7c:57:21:82:22:04:22:20:7d:91:90:6a:
14:73:9e:a8:d9:30:d2:70:1e:0a:fa:eb:3c:c3:7f:bc:e6:45:
37:be:fc:10:c1:5b:82:14:47:6e:6b:ac:b9:8d:01:a3:06:d8:
8d:45:e3:e4:b2:c1:04:af:79:f6:5f:e3:ec:33:07:3b:85:90:
08:cf:a8:6c:63:72:f3:83:cb:e0:17:e9:5f:e0:39:47:22:41:
54:c5:56:32:f9:26:b0:93:6f:7e:7f:ed:76:e8:1c:1b:16:83:
ad:8c:64:de:d1:44:97:80:45:c6:e5:b6:35:23:60:4f:b4:7f:
bb:22:a4:b9:94:1f:d6:df:a1:fe:29:f5:8d:4a:0d:74:16:ee:
58:55:71:00
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHVY0PFAENlaAIvgCbCTmZ3U2ZVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwRDkxRDFEQzZCMTNBRjRFRDM4MjMyMTFGRDY5QzQ0
N0Q1MjVCRDAeFw0yNTAyMjcxODE2NDhaFw0yNjAyMjYxODIxNDhaMDMxMTAvBgNV
BAMTKDJENTI0MEJFN0JCMkE0QkE3NEIwRTZBRDc0MDI0QzA5RkJBMkY4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbx2QzcRFLJ8iPSaU3Nypp9WZc
YXEH5uaZJJbqIeC5qE3gk4QkYB0Epanw/G7nI0f4kQiCQlSlCrU/FshIGIoi64dS
J4+g75dnwI8nEkzS5bEP50FHfEtq41s6QfOv6nfsRoWKBMGUowkwJXyNBpFVZchC
/i2UyhsJGERZEwcEb/+1jL9wZoxBR+2F1XU04tzc2Rpjgylk64liX1Es2LM6w97a
2p0Ir6ZIONKHEueV0f7XTeYiiJ7LS+/ycT45yXgBGYB3m9R5cDD6zi/COajSGfYn
z34TWlEDzZ6g1o8qCh+Tjm3qrDNH8WvDOfG8z9PvViRf0o+MfebO8SPIpEn/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULVJAvnuypLp0sOatdAJMCfui+GgwHwYDVR0j
BBgwFoAUNA2R0dxrE69O04IyEf1pxEfVJb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldCTUtla1IyaDM5S0RHeDZjdllhQmhSVzlUeG1QdDRtZTJWTDY4M0NV
YVcvMC8zNDBEOTFEMURDNkIxM0FGNEVEMzgyMzIxMUZENjlDNDQ3RDUyNUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0MEQ5MUQxREM2QjEzQUY0
RUQzODIzMjExRkQ2OUM0NDdENTI1QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJXQk1LZWtSMmgzOUtER3g2Y3ZZYUJoUlc5VHhtUHQ0bWUyVkw2ODNDVWFXLzAv
MzEzNzM3MmUzNTMyMmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM4
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALE0WjANBgkqhkiG9w0BAQsFAAOCAQEAfJ+oJAM1NGMR
wEZoY6dkH55+09b7k7NlMACtOEUCgci1o6Mh54GsZ9HMPh+Qd5vos6ktLXfAhaHx
lob9fdMaOz+ay/dKF/U43oXrQGabu0SlkKRQBmpghmviI1pUjs4Yzd/jbQCjzaIy
ieLalEdECGdQfFchgiIEIiB9kZBqFHOeqNkw0nAeCvrrPMN/vOZFN778EMFbghRH
bmusuY0BowbYjUXj5LLBBK959l/j7DMHO4WQCM+obGNy84PL4BfpX+A5RyJBVMVW
MvkmsJNvfn/tdugcGxaDrYxk3tFEl4BFxuW2NSNgT7R/uyKkuZQf1t+h/in1jUoN
dBbuWFVxAA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:48:31 2025 by rpki-client