Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa
File: 3133382e302e35322e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier: 7g3t6cU4fUzYFakPW1n1q7khgxUBbdF7ot42h14uq9M=
Subject key identifier: 5C:C7:5C:70:3D:34:B3:1D:57:7B:D3:F0:EE:19:9A:8A:28:2D:30:75
Certificate issuer: /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial: FC480E3FC234F0313D95C0FC78C8C100159052
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa
Signing time: Mon 03 Feb 2025 20:34:32 +0000
ROA not before: Mon 03 Feb 2025 20:29:32 +0000
ROA not after: Mon 02 Feb 2026 20:34:32 +0000
asID: 264525
IP address blocks: 138.0.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fc:48:0e:3f:c2:34:f0:31:3d:95:c0:fc:78:c8:c1:00:15:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
Validity
Not Before: Feb 3 20:29:32 2025 GMT
Not After : Feb 2 20:34:32 2026 GMT
Subject: CN=5CC75C703D34B31D577BD3F0EE199A8A282D3075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:7b:c4:03:8d:d1:62:82:b2:63:54:07:ed:
81:47:35:a0:99:56:6a:c6:02:dd:23:6c:b8:31:24:
0f:77:5a:4f:7b:5b:ce:94:90:3c:5d:f0:b4:de:48:
7f:1b:d8:d7:0c:3c:1d:52:c6:fc:53:bb:58:a4:45:
7c:96:67:39:60:2f:3b:92:ed:b1:cf:f2:46:ed:a8:
9a:59:93:79:82:8d:db:d6:e7:e2:9d:57:a1:34:cc:
8f:0e:d3:09:e9:6a:ac:56:05:06:3f:2a:8d:19:86:
69:89:b6:20:36:6d:29:c7:1e:d5:6e:3b:c0:d6:89:
35:0b:cf:86:4a:ea:ec:2d:8d:6b:cc:10:a5:6a:50:
c7:9a:9c:b4:25:69:62:f6:0a:2f:05:d4:f2:f5:54:
b6:76:d2:cd:20:a8:cc:c9:71:34:b3:4b:85:09:8a:
da:fa:06:0a:a6:77:00:bc:56:77:fb:bf:c7:20:3c:
8a:93:33:81:04:d6:ed:e8:d2:4e:67:2c:b3:51:f6:
e4:ff:b9:a1:b4:7b:11:f8:bf:ee:46:ed:db:e6:b2:
a4:0e:b5:97:83:ed:74:26:63:03:e3:4a:b9:9a:77:
5d:30:4e:3f:a9:7a:bf:15:47:23:7d:4f:5f:2c:9b:
6f:c1:77:e6:51:81:d5:6a:43:1b:42:63:fe:23:51:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:5C:70:3D:34:B3:1D:57:7B:D3:F0:EE:19:9A:8A:28:2D:30:75
X509v3 Authority Key Identifier:
keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.52.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7b:92:9d:e4:be:be:c0:f2:fe:84:bb:71:83:05:04:bc:13:
ea:9f:79:d4:3f:4e:2f:0f:a5:14:0d:09:b0:cb:22:b3:fb:40:
74:31:67:36:0c:ea:37:82:21:05:c1:14:db:d5:91:4a:f1:63:
f8:80:62:51:0a:bb:77:34:f1:14:0b:d6:54:0d:2f:b8:8c:7b:
2d:46:28:05:79:ca:2f:f6:31:7c:9c:56:74:6d:f6:3d:c2:8b:
e0:55:0c:49:f1:88:f9:11:05:56:59:b9:09:63:47:c8:37:23:
8d:90:38:9b:ce:83:ed:b1:88:88:36:9e:bc:a0:2b:aa:46:7e:
3f:ca:aa:db:15:9e:33:fe:df:38:28:09:37:9c:09:d4:27:ff:
1f:88:63:23:a5:d8:27:0b:57:40:08:5f:48:09:ec:0d:4e:a0:
15:30:1d:4f:7b:be:e4:f1:71:6a:af:8b:28:d0:e3:74:7f:29:
0c:a1:39:db:ae:fa:97:f0:2f:be:9f:79:31:7d:b8:df:a7:89:
3c:bb:10:54:35:4e:b7:55:de:f8:f8:1a:2c:09:ab:cb:e4:9e:
b0:e8:9f:a2:03:bd:30:f6:d3:fa:4e:7e:8c:99:08:eb:6d:78:
4b:c8:88:d7:93:67:f4:ee:90:fa:bd:62:3e:b9:11:b1:b4:f3:
8a:ef:98:b3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAPxIDj/CNPAxPZXA/HjIwQAVkFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NkYzQ0E0MzEyNUVERUQyQkEyNzQxNTU1NzYzODZE
OTEwMUVEQzAeFw0yNTAyMDMyMDI5MzJaFw0yNjAyMDIyMDM0MzJaMDMxMTAvBgNV
BAMTKDVDQzc1QzcwM0QzNEIzMUQ1NzdCRDNGMEVFMTk5QThBMjgyRDMwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDse3vEA43RYoKyY1QH7YFHNaCZ
VmrGAt0jbLgxJA93Wk97W86UkDxd8LTeSH8b2NcMPB1SxvxTu1ikRXyWZzlgLzuS
7bHP8kbtqJpZk3mCjdvW5+KdV6E0zI8O0wnpaqxWBQY/Ko0ZhmmJtiA2bSnHHtVu
O8DWiTULz4ZK6uwtjWvMEKVqUMeanLQlaWL2Ci8F1PL1VLZ20s0gqMzJcTSzS4UJ
itr6BgqmdwC8Vnf7v8cgPIqTM4EE1u3o0k5nLLNR9uT/uaG0exH4v+5G7dvmsqQO
tZeD7XQmYwPjSrmad10wTj+per8VRyN9T18sm2/Bd+ZRgdVqQxtCY/4jUa9nAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXMdccD00sx1Xe9Pw7hmaiigtMHUwHwYDVR0j
BBgwFoAUR2bzykMSXt7SuidBVVdjhtkQHtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC80NzY2RjNDQTQzMTI1RURFRDJCQTI3NDE1NTU3NjM4NkQ5MTAxRURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjZGM0NBNDMxMjVFREVE
MkJBMjc0MTU1NTc2Mzg2RDkxMDFFREMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzEzMzM4MmUzMDJlMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM1
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooANDANBgkqhkiG9w0BAQsFAAOCAQEAg3uSneS+vsDy
/oS7cYMFBLwT6p951D9OLw+lFA0JsMsis/tAdDFnNgzqN4IhBcEU29WRSvFj+IBi
UQq7dzTxFAvWVA0vuIx7LUYoBXnKL/YxfJxWdG32PcKL4FUMSfGI+REFVlm5CWNH
yDcjjZA4m86D7bGIiDaevKArqkZ+P8qq2xWeM/7fOCgJN5wJ1Cf/H4hjI6XYJwtX
QAhfSAnsDU6gFTAdT3u+5PFxaq+LKNDjdH8pDKE52676l/Avvp95MX2436eJPLsQ
VDVOt1Xe+PgaLAmry+SesOifogO9MPbT+k5+jJkI6214S8iI15Nn9O6Q+r1iPrkR
sbTziu+Ysw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:10:08 2025 by rpki-client