Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
File: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier: zPcZDOL66f4T54HzJWFF8O5qHyApg5MkyxiuE2xahB4=
Subject key identifier: 29:6F:16:02:7B:2C:DC:EF:D8:A3:AE:47:8A:53:4B:9F:29:08:A9:12
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 389CEF28EEA61A79860A2B17ACD4CEA3C0A9BC76
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
Signing time: Thu 06 Mar 2025 10:07:43 +0000
ROA not before: Thu 06 Mar 2025 10:02:43 +0000
ROA not after: Thu 05 Mar 2026 10:07:43 +0000
asID: 270370
IP address blocks: 190.89.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9c:ef:28:ee:a6:1a:79:86:0a:2b:17:ac:d4:ce:a3:c0:a9:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Mar 6 10:02:43 2025 GMT
Not After : Mar 5 10:07:43 2026 GMT
Subject: CN=296F16027B2CDCEFD8A3AE478A534B9F2908A912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:52:ef:23:6d:84:ab:73:8d:15:5f:b6:a2:
08:de:00:da:89:0a:9f:6a:8f:86:50:e7:b0:37:ae:
4e:29:68:9a:a0:34:fd:5f:6e:2f:5d:3b:9f:d9:76:
78:1b:49:76:5a:2d:d7:46:73:21:6d:eb:4e:39:b0:
f3:a5:76:c2:6f:a8:56:50:67:3d:71:4c:6b:45:cd:
44:38:32:67:c2:a8:26:f5:2d:b4:3b:dd:c3:a7:d6:
a9:be:41:53:3a:14:a2:a7:df:d4:34:5e:e0:da:5f:
1e:b7:1e:87:d8:94:a1:35:0d:d2:44:6f:f7:40:c0:
b5:47:9b:31:9e:0c:e0:35:d2:58:a2:31:ca:63:86:
04:88:4d:f5:cf:5b:5f:aa:b9:55:05:4f:40:de:9f:
c1:12:2d:06:a7:76:dc:2f:0b:e9:0f:6f:93:94:b7:
ab:34:19:44:09:bb:0d:4c:ca:c9:c7:f7:ec:fd:48:
d5:37:f1:f3:4a:0f:cd:af:9a:d8:12:9b:4f:ba:22:
6c:65:f9:00:23:31:88:10:ba:99:77:98:88:bd:ac:
b0:5d:f9:10:95:6f:c0:89:e6:9a:91:13:bf:59:1c:
6d:fe:67:7b:50:b6:94:94:79:9e:2a:8d:a5:b5:fd:
7b:07:d0:60:67:6b:4f:61:7b:c1:44:48:04:5f:27:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6F:16:02:7B:2C:DC:EF:D8:A3:AE:47:8A:53:4B:9F:29:08:A9:12
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6c:d7:db:19:77:75:10:0f:e0:2f:84:24:50:c1:c8:61:39:
7a:00:8b:b6:60:f1:c7:e3:0c:7d:c2:3b:ff:6a:f3:13:06:2d:
e1:d3:e6:36:b2:80:fc:3c:97:b2:69:f5:b9:65:14:1a:1a:bd:
23:c8:94:76:5d:e9:25:b5:57:ba:5f:9b:51:0b:97:55:98:1d:
e7:b9:3e:e8:03:69:91:d1:c0:41:b6:31:a2:d9:6b:02:37:d6:
bc:85:00:ea:fa:f7:a9:ae:b3:12:22:c3:e8:56:46:1c:00:6b:
41:c1:19:d8:90:c9:db:e7:4b:ea:9e:35:24:e9:28:28:57:61:
db:03:a9:95:d5:b4:49:81:ba:ec:19:86:85:15:d8:ff:e8:8f:
c4:35:d6:b3:b0:88:9b:4b:2a:6d:b3:2f:ee:51:0f:e0:ac:3f:
9a:93:51:bb:76:f5:74:78:1c:79:e8:b6:1f:a5:ee:b7:e3:7a:
6f:d7:1c:27:09:ef:bc:c2:a9:83:b5:97:74:dd:11:43:e4:aa:
71:fe:92:6a:0a:2f:9c:70:11:dd:58:60:d3:d5:f2:ac:37:11:
a3:29:89:3b:af:d2:43:18:72:30:31:3b:9f:8c:af:9a:f4:9a:
40:7f:f8:5e:f3:1f:1f:14:43:80:7a:a2:79:f3:23:3f:1e:ec:
89:3e:30:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOJzvKO6mGnmGCisXrNTOo8CpvHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNTAzMDYxMDAyNDNaFw0yNjAzMDUxMDA3NDNaMDMxMTAvBgNV
BAMTKDI5NkYxNjAyN0IyQ0RDRUZEOEEzQUU0NzhBNTM0QjlGMjkwOEE5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiFLvI22Eq3ONFV+2ogjeANqJ
Cp9qj4ZQ57A3rk4paJqgNP1fbi9dO5/ZdngbSXZaLddGcyFt6045sPOldsJvqFZQ
Zz1xTGtFzUQ4MmfCqCb1LbQ73cOn1qm+QVM6FKKn39Q0XuDaXx63HofYlKE1DdJE
b/dAwLVHmzGeDOA10liiMcpjhgSITfXPW1+quVUFT0Den8ESLQandtwvC+kPb5OU
t6s0GUQJuw1MysnH9+z9SNU38fNKD82vmtgSm0+6Imxl+QAjMYgQupl3mIi9rLBd
+RCVb8CJ5pqRE79ZHG3+Z3tQtpSUeZ4qjaW1/XsH0GBna09he8FESARfJ1NNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKW8WAnss3O/Yo65HilNLnykIqRIwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzEv
MzEzOTMwMmUzODM5MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZYwDQYJKoZIhvcNAQELBQADggEBAJ1s19sZ
d3UQD+AvhCRQwchhOXoAi7Zg8cfjDH3CO/9q8xMGLeHT5jaygPw8l7Jp9bllFBoa
vSPIlHZd6SW1V7pfm1ELl1WYHee5PugDaZHRwEG2MaLZawI31ryFAOr696musxIi
w+hWRhwAa0HBGdiQydvnS+qeNSTpKChXYdsDqZXVtEmBuuwZhoUV2P/oj8Q11rOw
iJtLKm2zL+5RD+CsP5qTUbt29XR4HHnoth+l7rfjem/XHCcJ77zCqYO1l3TdEUPk
qnH+kmoKL5xwEd1YYNPV8qw3EaMpiTuv0kMYcjAxO5+Mr5r0mkB/+F7zHx8UQ4B6
onnzIz8e7Ik+MJI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:27 2025 by rpki-client