Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
File: 3137302e37382e36382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier: dpoblp7Mkldom4F2F992YedjYlrZq2HNjeilxm/DDS4=
Subject key identifier: 43:04:F3:E2:29:D3:77:DA:3C:CA:F2:9B:CE:A5:47:F6:B3:DE:D2:17
Certificate issuer: /CN=84952BD36EF412E113A81649D3C5602505743767
Certificate serial: 2CE3EB360FD2FBAD83E8F793836F417DCD40B03D
Authority key identifier: 84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
Signing time: Tue 18 Mar 2025 11:22:47 +0000
ROA not before: Tue 18 Mar 2025 11:17:47 +0000
ROA not after: Tue 17 Mar 2026 11:22:47 +0000
asID: 262669
IP address blocks: 170.78.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e3:eb:36:0f:d2:fb:ad:83:e8:f7:93:83:6f:41:7d:cd:40:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84952BD36EF412E113A81649D3C5602505743767
Validity
Not Before: Mar 18 11:17:47 2025 GMT
Not After : Mar 17 11:22:47 2026 GMT
Subject: CN=4304F3E229D377DA3CCAF29BCEA547F6B3DED217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6c:77:a3:58:88:06:a8:2b:2e:d0:a7:93:ec:
d0:7b:bc:89:64:a6:97:9e:af:80:89:64:e5:dc:e0:
5b:19:8e:dd:8f:cd:07:c6:63:e3:25:05:a8:93:fc:
c4:96:1e:ba:e9:6b:9c:f5:47:65:4a:d9:e3:40:39:
22:49:9a:23:8d:31:32:2d:8e:5d:dc:e6:7e:12:98:
9c:42:95:5a:34:09:41:8d:57:af:31:c5:6f:80:2e:
a6:8b:f1:e6:44:60:eb:49:cb:6d:81:ee:ac:58:2b:
56:9b:3d:53:1d:63:99:c5:6e:a3:ec:f4:67:bb:e0:
90:61:1a:fa:b9:6b:79:e2:02:0b:4e:ac:52:7d:9c:
d1:c9:87:43:d1:8d:c5:03:bb:bf:ef:ba:d9:8f:41:
36:09:6c:2e:b5:3b:39:54:e3:ae:01:c4:92:31:04:
e1:c4:c7:00:f0:2e:80:b8:cd:f2:97:26:af:e5:ea:
51:27:37:4b:2a:c3:5c:6c:cf:e5:92:bb:ff:2d:86:
dc:e0:ec:44:da:1a:f3:49:12:6b:6e:ae:86:e4:1b:
c7:b8:a4:f6:ae:30:4b:47:ef:c7:5b:38:4c:18:47:
21:59:57:3b:8a:3a:6f:cd:8e:9b:f9:18:db:50:33:
be:c3:ee:90:b1:6e:61:04:ec:07:2c:ed:61:9f:7c:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:F3:E2:29:D3:77:DA:3C:CA:F2:9B:CE:A5:47:F6:B3:DE:D2:17
X509v3 Authority Key Identifier:
keyid:84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/84952BD36EF412E113A81649D3C5602505743767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:76:78:51:ca:e5:12:7e:69:4f:9d:d2:b9:a0:1a:f7:26:13:
d0:04:1c:62:77:53:87:fd:06:9a:d5:73:93:38:21:b2:1c:03:
09:66:b9:b0:29:9e:a4:51:ec:fe:f0:c2:2d:9c:ce:86:15:51:
00:2f:bd:5c:52:a3:31:bc:84:7e:f7:f1:91:a0:e8:c4:ef:af:
aa:54:90:36:be:45:f4:91:e0:fd:de:26:9f:5d:5e:58:3b:3f:
b9:da:c4:84:1f:84:f8:ea:5f:a5:f0:d8:dc:d4:36:1b:6b:5f:
d4:ab:04:63:1c:f5:e2:c3:12:ec:9d:90:d8:2d:9a:9a:7f:85:
14:58:f3:38:83:7a:2f:dd:9d:8a:a2:8f:e1:c9:e4:79:ba:ae:
1a:c5:b0:c5:da:3f:80:03:c0:67:29:14:2f:6f:79:78:9f:5f:
ff:3c:c5:4d:91:39:91:06:4a:5d:b1:2e:20:6d:11:a7:45:25:
f9:51:82:fc:3c:c5:07:75:1c:5e:3d:17:57:a8:25:2d:4a:54:
7f:31:d6:b4:71:27:73:83:e9:5e:95:e2:8a:2e:30:ac:c1:aa:
bd:ce:17:52:48:3a:d7:6d:b7:ee:0c:d8:11:28:89:94:53:a7:
99:f5:d0:0f:b4:c3:d0:4e:b2:4c:04:2a:55:66:26:d6:94:01:
ca:58:87:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULOPrNg/S+62D6PeTg29Bfc1AsD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ5NTJCRDM2RUY0MTJFMTEzQTgxNjQ5RDNDNTYwMjUw
NTc0Mzc2NzAeFw0yNTAzMTgxMTE3NDdaFw0yNjAzMTcxMTIyNDdaMDMxMTAvBgNV
BAMTKDQzMDRGM0UyMjlEMzc3REEzQ0NBRjI5QkNFQTU0N0Y2QjNERUQyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6bHejWIgGqCsu0KeT7NB7vIlk
ppeer4CJZOXc4FsZjt2PzQfGY+MlBaiT/MSWHrrpa5z1R2VK2eNAOSJJmiONMTIt
jl3c5n4SmJxClVo0CUGNV68xxW+ALqaL8eZEYOtJy22B7qxYK1abPVMdY5nFbqPs
9Ge74JBhGvq5a3niAgtOrFJ9nNHJh0PRjcUDu7/vutmPQTYJbC61OzlU464BxJIx
BOHExwDwLoC4zfKXJq/l6lEnN0sqw1xsz+WSu/8thtzg7ETaGvNJEmturobkG8e4
pPauMEtH78dbOEwYRyFZVzuKOm/Njpv5GNtQM77D7pCxbmEE7Acs7WGffDn7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQwTz4inTd9o8yvKbzqVH9rPe0hcwHwYDVR0j
BBgwFoAUhJUr0270EuETqBZJ08VgJQV0N2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmc5ZVdVelVjVTVqbUZTakVmMUVBOUZIWk5ENWtLd0tyYmpmcUtrS2dp
ZlQvMC84NDk1MkJEMzZFRjQxMkUxMTNBODE2NDlEM0M1NjAyNTA1NzQzNzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OTUyQkQzNkVGNDEyRTEx
M0E4MTY0OUQzQzU2MDI1MDU3NDM3NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnOWVXVXpVY1U1am1GU2pFZjFFQTlGSFpORDVrS3dLcmJqZnFLa0tnaWZULzAv
MzEzNzMwMmUzNzM4MmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5EMA0GCSqGSIb3DQEBCwUAA4IBAQB+dnhRyuUS
fmlPndK5oBr3JhPQBBxid1OH/Qaa1XOTOCGyHAMJZrmwKZ6kUez+8MItnM6GFVEA
L71cUqMxvIR+9/GRoOjE76+qVJA2vkX0keD93iafXV5YOz+52sSEH4T46l+l8Njc
1DYba1/UqwRjHPXiwxLsnZDYLZqaf4UUWPM4g3ov3Z2Koo/hyeR5uq4axbDF2j+A
A8BnKRQvb3l4n1//PMVNkTmRBkpdsS4gbRGnRSX5UYL8PMUHdRxePRdXqCUtSlR/
Mda0cSdzg+leleKKLjCswaq9zhdSSDrXbbfuDNgRKImUU6eZ9dAPtMPQTrJMBCpV
ZibWlAHKWIct
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:34:10 2025 by rpki-client