Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32322d3332203d3e20323635333938.roa
File: 3137302e3235342e3134342e302f32322d3332203d3e20323635333938.roa (raw, json)
Hash identifier: BDEuN9yDdxYXouXOs7IpJ2TfDs9AONQZb0uocmTbBCw=
Subject key identifier: 06:0F:6F:E4:A7:09:A7:E3:29:5E:1B:B4:DC:97:F7:EC:27:FC:D5:54
Certificate issuer: /CN=71A400A31C079C3533B10B08162C210937E52A75
Certificate serial: 6C7238E3EDF86671D0444FC6194601CA9B562F38
Authority key identifier: 71:A4:00:A3:1C:07:9C:35:33:B1:0B:08:16:2C:21:09:37:E5:2A:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71A400A31C079C3533B10B08162C210937E52A75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32322d3332203d3e20323635333938.roa
Signing time: Wed 20 Mar 2024 11:41:39 +0000
ROA not before: Wed 20 Mar 2024 11:36:39 +0000
ROA not after: Wed 19 Mar 2025 11:41:39 +0000
asID: 265398
IP address blocks: 170.254.144.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:72:38:e3:ed:f8:66:71:d0:44:4f:c6:19:46:01:ca:9b:56:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71A400A31C079C3533B10B08162C210937E52A75
Validity
Not Before: Mar 20 11:36:39 2024 GMT
Not After : Mar 19 11:41:39 2025 GMT
Subject: CN=060F6FE4A709A7E3295E1BB4DC97F7EC27FCD554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:bb:85:05:68:77:4c:d5:9f:f9:9a:cc:f9:
0a:fc:51:e3:f2:db:b9:c0:d8:bf:bd:03:23:62:05:
8d:d9:74:55:15:77:c7:fd:ff:8c:ee:2f:69:4d:91:
b7:41:6f:6f:ec:b4:e6:1b:58:fc:65:5b:6a:9c:e9:
73:0a:83:ba:39:e9:0b:df:09:d9:00:70:44:28:fc:
06:97:10:bf:a8:fa:8d:96:5c:ea:0f:fb:31:b0:a7:
1f:c0:35:5e:bd:d9:34:fa:14:77:84:97:74:2d:0f:
16:85:7a:6e:50:cc:e3:6c:57:ad:45:db:23:ba:5f:
88:8a:1c:4e:03:69:a7:6f:9b:af:78:89:2f:98:1d:
1b:a6:5b:d2:09:50:00:ac:8b:2a:ee:78:f1:58:6f:
c7:7b:fb:77:9e:b8:3b:85:0a:ad:94:aa:1d:b8:63:
4e:01:cb:24:e4:a6:6b:16:11:55:85:c2:12:cb:bb:
cb:9a:d8:d9:eb:31:e9:a4:8a:c4:5b:84:8b:c7:ea:
a8:fa:b6:0b:90:dc:66:4b:9d:31:0c:f3:c4:b6:70:
f3:ef:26:95:ee:5b:3f:f2:84:8b:97:d8:31:84:96:
3f:0c:a8:2c:97:ca:6f:45:26:57:24:e3:94:f9:a4:
90:5a:8b:5e:64:66:3b:68:31:e2:46:e1:75:ee:f0:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:6F:E4:A7:09:A7:E3:29:5E:1B:B4:DC:97:F7:EC:27:FC:D5:54
X509v3 Authority Key Identifier:
keyid:71:A4:00:A3:1C:07:9C:35:33:B1:0B:08:16:2C:21:09:37:E5:2A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/71A400A31C079C3533B10B08162C210937E52A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71A400A31C079C3533B10B08162C210937E52A75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32322d3332203d3e20323635333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:e0:6b:08:6e:f5:71:fc:aa:7f:d6:e6:6c:ff:a5:4f:74:5b:
e8:11:80:29:9c:36:ad:17:69:2a:86:bf:22:30:b4:01:f5:d7:
19:dc:99:c1:99:54:dc:13:88:41:30:e7:09:98:94:fc:01:eb:
71:2d:db:e7:d7:ca:dc:aa:cb:97:42:78:44:34:77:d8:f8:c4:
c7:36:e1:24:af:c3:96:dd:07:55:49:35:80:72:82:e6:c6:1c:
ff:f8:7a:dc:f4:bb:f9:74:53:14:d2:87:ab:d3:39:44:c9:b9:
d0:6a:97:50:78:8a:a9:3a:00:46:ac:4d:bf:83:00:57:ff:0b:
64:fd:57:6e:da:10:6f:10:9f:2e:d1:53:88:ed:b1:10:48:ca:
61:91:91:16:ce:19:26:1d:a2:e9:95:fd:d3:ad:6a:a9:47:d1:
dc:0b:79:73:ea:3f:56:0e:ba:83:3e:c7:30:e6:1d:b3:e4:6a:
ac:7f:17:52:54:0f:86:c5:5f:f1:f6:49:53:ff:dc:49:33:88:
62:04:3c:57:92:1b:b2:4c:a3:74:10:7b:d7:88:8c:fc:62:8f:
2b:de:c5:bf:2f:4d:84:3f:5a:9a:90:bd:52:e5:bf:95:b1:50:
e3:6c:c3:ba:fd:a7:19:c3:03:d6:5c:a0:e1:4b:04:41:5c:43:
4a:4d:0a:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbHI44+34ZnHQRE/GGUYByptWLzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBNDAwQTMxQzA3OUMzNTMzQjEwQjA4MTYyQzIxMDkz
N0U1MkE3NTAeFw0yNDAzMjAxMTM2MzlaFw0yNTAzMTkxMTQxMzlaMDMxMTAvBgNV
BAMTKDA2MEY2RkU0QTcwOUE3RTMyOTVFMUJCNERDOTdGN0VDMjdGQ0Q1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a7uFBWh3TNWf+ZrM+Qr8UePy
27nA2L+9AyNiBY3ZdFUVd8f9/4zuL2lNkbdBb2/stOYbWPxlW2qc6XMKg7o56Qvf
CdkAcEQo/AaXEL+o+o2WXOoP+zGwpx/ANV692TT6FHeEl3QtDxaFem5QzONsV61F
2yO6X4iKHE4Daadvm694iS+YHRumW9IJUACsiyruePFYb8d7+3eeuDuFCq2Uqh24
Y04ByyTkpmsWEVWFwhLLu8ua2NnrMemkisRbhIvH6qj6tguQ3GZLnTEM88S2cPPv
JpXuWz/yhIuX2DGElj8MqCyXym9FJlck45T5pJBai15kZjtoMeJG4XXu8MWhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBg9v5KcJp+MpXhu03Jf37Cf81VQwHwYDVR0j
BBgwFoAUcaQAoxwHnDUzsQsIFiwhCTflKnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmppdW0zNWhIWXk5dnNieWNFb05peGs3OXdUOTRjOGhVZVJWNTk0d2RW
U0wvMC83MUE0MDBBMzFDMDc5QzM1MzNCMTBCMDgxNjJDMjEwOTM3RTUyQTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxQTQwMEEzMUMwNzlDMzUz
M0IxMEIwODE2MkMyMTA5MzdFNTJBNzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqaXVtMzVoSFl5OXZzYnljRW9OaXhrNzl3VDk0YzhoVWVSVjU5NHdkVlNMLzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTMzMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+kDANBgkqhkiG9w0BAQsFAAOCAQEAoOBr
CG71cfyqf9bmbP+lT3Rb6BGAKZw2rRdpKoa/IjC0AfXXGdyZwZlU3BOIQTDnCZiU
/AHrcS3b59fK3KrLl0J4RDR32PjExzbhJK/Dlt0HVUk1gHKC5sYc//h63PS7+XRT
FNKHq9M5RMm50GqXUHiKqToARqxNv4MAV/8LZP1XbtoQbxCfLtFTiO2xEEjKYZGR
Fs4ZJh2i6ZX9061qqUfR3At5c+o/Vg66gz7HMOYds+RqrH8XUlQPhsVf8fZJU//c
STOIYgQ8V5IbskyjdBB714iM/GKPK97Fvy9NhD9ampC9UuW/lbFQ42zDuv2nGcMD
1lyg4UsEQVxDSk0KqQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:12:59 2025 by rpki-client