Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
File: 3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier: OCQVomfcVvr/tVlXMksP7Lm2Vw6bHA53rAi2b9MTqEc=
Subject key identifier: AE:92:D5:FB:02:2B:14:90:41:57:CE:E2:D2:41:C9:D2:06:DD:42:16
Certificate issuer: /CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Certificate serial: 0BBD3B3EE44F56E9637381D0E14A695014E74119
Authority key identifier: A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
Signing time: Sat 18 Jan 2025 13:54:59 +0000
ROA not before: Sat 18 Jan 2025 13:49:59 +0000
ROA not after: Sat 17 Jan 2026 13:54:59 +0000
asID: 262675
IP address blocks: 131.255.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bd:3b:3e:e4:4f:56:e9:63:73:81:d0:e1:4a:69:50:14:e7:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Validity
Not Before: Jan 18 13:49:59 2025 GMT
Not After : Jan 17 13:54:59 2026 GMT
Subject: CN=AE92D5FB022B14904157CEE2D241C9D206DD4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:97:08:b3:a8:c9:be:8d:35:73:d5:29:fe:
21:b3:b4:0a:6d:2a:9a:27:43:91:bf:a1:6c:7c:8c:
18:33:7a:1d:0f:b1:8d:03:05:48:f6:e1:8c:73:d5:
0b:9d:21:6d:06:ac:90:c0:94:87:88:a5:19:37:28:
ac:14:66:b3:2a:3a:bf:c9:82:45:5c:83:fb:f3:1c:
11:6e:d1:ca:70:53:a8:6c:53:a7:cf:8b:d9:45:e7:
c6:c1:ac:aa:f9:7d:42:85:59:3e:cf:75:fe:86:36:
9e:1d:97:11:2c:8d:69:95:8c:9d:58:ba:51:3f:3a:
01:1e:aa:f9:3e:c5:78:e8:b1:55:cc:15:26:20:fa:
72:a0:e7:bd:54:61:48:f4:38:e5:a4:32:e4:66:ae:
f0:6c:42:95:70:78:85:8d:29:6a:04:f5:06:33:05:
bd:0d:d1:f4:a7:f6:e5:3f:eb:e1:7d:51:1e:e0:8b:
be:70:80:80:b7:98:fd:c5:06:18:7a:9d:ed:b3:38:
c8:33:21:44:0d:8e:38:fa:4c:1e:32:a5:c6:3c:17:
fa:33:37:50:8f:6b:a7:ec:98:81:31:85:fc:9c:91:
2b:d4:98:4e:e5:05:ef:7c:a5:4c:3b:08:20:42:17:
96:4a:16:f0:85:92:a7:62:db:a7:fa:b9:6b:f4:61:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:D5:FB:02:2B:14:90:41:57:CE:E2:D2:41:C9:D2:06:DD:42:16
X509v3 Authority Key Identifier:
keyid:A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/A3B6378C38DEEF029A12800A867DE629F832D92A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:01:bc:e0:88:6e:bc:c9:ed:77:6e:2d:0f:46:e8:11:9e:44:
3e:fd:f5:f7:01:72:2a:4e:cb:65:37:69:b7:c9:1e:95:df:54:
c6:c6:9b:42:25:1d:ac:59:6c:ba:3e:28:b4:1a:72:95:94:d7:
cb:17:da:90:22:1f:c1:15:0c:33:0d:7d:17:ae:cd:b8:32:6d:
d1:59:6a:e8:f0:6a:9f:c9:fe:06:a0:35:c1:cc:81:58:14:2f:
2f:34:04:16:1d:3d:c0:45:3c:6c:b9:82:15:67:e9:68:6c:e1:
20:70:1a:19:08:1c:8f:bc:40:16:42:53:83:cf:aa:a6:d3:df:
9f:d3:4a:4c:8b:ef:46:76:ee:72:5f:39:9c:cc:4b:94:35:dc:
57:21:01:2e:09:f2:4a:c4:b2:9b:3b:af:60:72:3b:75:8d:c2:
e8:8c:b8:7e:d9:05:96:2f:c8:f4:cd:65:8a:76:19:4a:dc:79:
6c:8d:cc:28:ff:e8:bf:6b:ec:61:33:fb:2b:46:68:06:c4:80:
0f:e5:8d:f9:a5:0a:5d:fe:8a:b5:02:67:c0:25:6b:6c:a9:31:
18:e4:02:d4:20:9f:7a:12:63:6a:c8:0a:6a:cc:16:b9:88:63:
fa:89:39:09:62:4f:14:09:62:e8:0c:72:be:07:46:08:05:2b:
25:4d:a0:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC707PuRPVuljc4HQ4UppUBTnQRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNCNjM3OEMzOERFRUYwMjlBMTI4MDBBODY3REU2MjlG
ODMyRDkyQTAeFw0yNTAxMTgxMzQ5NTlaFw0yNjAxMTcxMzU0NTlaMDMxMTAvBgNV
BAMTKEFFOTJENUZCMDIyQjE0OTA0MTU3Q0VFMkQyNDFDOUQyMDZERDQyMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfZcIs6jJvo01c9Up/iGztApt
KponQ5G/oWx8jBgzeh0PsY0DBUj24Yxz1QudIW0GrJDAlIeIpRk3KKwUZrMqOr/J
gkVcg/vzHBFu0cpwU6hsU6fPi9lF58bBrKr5fUKFWT7Pdf6GNp4dlxEsjWmVjJ1Y
ulE/OgEeqvk+xXjosVXMFSYg+nKg571UYUj0OOWkMuRmrvBsQpVweIWNKWoE9QYz
Bb0N0fSn9uU/6+F9UR7gi75wgIC3mP3FBhh6ne2zOMgzIUQNjjj6TB4ypcY8F/oz
N1CPa6fsmIExhfyckSvUmE7lBe98pUw7CCBCF5ZKFvCFkqdi26f6uWv0Ye5BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrpLV+wIrFJBBV87i0kHJ0gbdQhYwHwYDVR0j
BBgwFoAUo7Y3jDje7wKaEoAKhn3mKfgy2SowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr
dzIvMS9BM0I2Mzc4QzM4REVFRjAyOUExMjgwMEE4NjdERTYyOUY4MzJEOTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzQjYzNzhDMzhERUVGMDI5
QTEyODAwQTg2N0RFNjI5RjgzMkQ5MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzEv
MzEzMzMxMmUzMjM1MzUyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/zQwDQYJKoZIhvcNAQELBQADggEBAIoBvOCI
brzJ7XduLQ9G6BGeRD799fcBcipOy2U3abfJHpXfVMbGm0IlHaxZbLo+KLQacpWU
18sX2pAiH8EVDDMNfReuzbgybdFZaujwap/J/gagNcHMgVgULy80BBYdPcBFPGy5
ghVn6Whs4SBwGhkIHI+8QBZCU4PPqqbT35/TSkyL70Z27nJfOZzMS5Q13FchAS4J
8krEsps7r2ByO3WNwuiMuH7ZBZYvyPTNZYp2GUrceWyNzCj/6L9r7GEz+ytGaAbE
gA/ljfmlCl3+irUCZ8Ala2ypMRjkAtQgn3oSY2rICmrMFrmIY/qJOQliTxQJYugM
cr4HRggFKyVNoOc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:27:41 2025 by rpki-client