Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier: QJZvBRts+btvaZ7Tx08pSu9GgBk3t6VGUYUieqR2zjI=
Subject key identifier: 03:29:14:05:7C:49:3E:88:80:14:52:D2:D7:CE:D0:D2:AA:15:D7:3F
Certificate issuer: /CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Certificate serial: 075B413600702029775E35D7F4E5D232F47867BB
Authority key identifier: A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time: Sat 18 Jan 2025 13:55:09 +0000
ROA not before: Sat 18 Jan 2025 13:50:09 +0000
ROA not after: Sat 17 Jan 2026 13:55:09 +0000
asID: 262675
IP address blocks: 186.233.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5b:41:36:00:70:20:29:77:5e:35:d7:f4:e5:d2:32:f4:78:67:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Validity
Not Before: Jan 18 13:50:09 2025 GMT
Not After : Jan 17 13:55:09 2026 GMT
Subject: CN=032914057C493E88801452D2D7CED0D2AA15D73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:a5:62:dc:6f:9a:a7:a4:0a:71:fc:6a:c3:
d3:dd:06:bd:2e:c6:75:2f:0e:74:f0:6b:dd:e3:fe:
35:89:8c:e7:4a:05:d3:b7:49:2e:e2:08:7e:1e:27:
d5:45:f2:66:49:85:57:67:61:66:45:71:42:96:2c:
fd:5f:3e:36:62:f9:56:8d:68:c8:00:86:66:d8:8e:
cf:3e:54:0c:65:1f:e5:76:4b:dc:71:6d:b4:d2:3b:
54:69:51:b3:35:7a:47:64:b1:48:b9:f7:82:a7:d3:
45:1b:37:d0:a6:bc:3b:92:34:c8:d9:59:a9:58:05:
f7:21:48:08:fb:f2:45:3b:6f:71:19:7a:69:1d:ba:
e5:e4:fc:8b:1b:bf:66:3a:7b:92:ea:09:f0:12:15:
48:fa:c9:83:3c:e6:01:93:07:fd:d4:a5:96:b1:8f:
94:47:18:23:6c:15:e7:8d:c0:ee:85:35:47:c6:0d:
0a:98:1f:91:48:db:c8:04:d9:ab:ab:fb:6d:8b:14:
d5:5a:c3:1c:a3:77:7e:a9:c6:fc:8e:d7:d3:55:e2:
3c:63:13:36:c9:49:e2:2b:31:07:77:15:3e:aa:43:
8f:5e:7b:94:64:c0:3e:11:cd:7b:c0:13:44:b7:58:
0f:7f:78:35:60:95:6e:95:92:98:42:e0:56:c3:7c:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:14:05:7C:49:3E:88:80:14:52:D2:D7:CE:D0:D2:AA:15:D7:3F
X509v3 Authority Key Identifier:
keyid:A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/A3B6378C38DEEF029A12800A867DE629F832D92A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
33:4c:a6:b7:01:75:a3:04:12:e1:ae:02:7b:e6:39:10:36:4e:
4f:df:5f:2d:48:10:af:11:87:f0:5e:23:5f:18:52:af:b6:c5:
5f:40:a2:cf:b7:46:53:a2:b8:fe:23:79:73:fc:2b:4e:42:3e:
fb:e2:40:7a:8a:ac:6d:6f:cc:e4:3e:73:da:4e:1d:2e:01:79:
7a:e0:04:46:de:bd:25:a5:4d:e2:c8:d8:cd:b0:14:b8:11:29:
5c:01:c4:50:b9:37:46:ab:58:8b:f2:10:58:20:19:30:30:2b:
1b:47:8b:1f:fd:ba:7f:8a:72:1d:de:3e:04:33:43:2d:e2:ea:
5d:4c:84:80:88:cd:8a:9b:45:37:2f:b7:18:e5:ff:4a:7a:c4:
ae:85:ed:c8:f9:86:42:7f:f4:9b:16:8c:e0:49:4e:2d:4b:33:
a5:ac:cd:e6:11:34:d5:2b:1e:4b:9d:67:d6:e0:20:65:26:ef:
e6:d1:61:f1:30:0a:c8:20:9f:48:fb:5f:5f:3f:d3:ab:09:cf:
88:88:f7:f1:51:17:71:53:2b:0f:d0:3e:ed:b9:e2:f1:b7:c8:
cd:d4:39:fc:14:56:7b:17:01:25:df:30:13:c4:65:9f:c6:46:
53:96:3e:0a:2f:8e:79:dc:16:22:fc:5f:07:a2:d9:1b:c2:c8:
ae:28:be:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUB1tBNgBwICl3XjXX9OXSMvR4Z7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNCNjM3OEMzOERFRUYwMjlBMTI4MDBBODY3REU2MjlG
ODMyRDkyQTAeFw0yNTAxMTgxMzUwMDlaFw0yNjAxMTcxMzU1MDlaMDMxMTAvBgNV
BAMTKDAzMjkxNDA1N0M0OTNFODg4MDE0NTJEMkQ3Q0VEMEQyQUExNUQ3M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i6Vi3G+ap6QKcfxqw9PdBr0u
xnUvDnTwa93j/jWJjOdKBdO3SS7iCH4eJ9VF8mZJhVdnYWZFcUKWLP1fPjZi+VaN
aMgAhmbYjs8+VAxlH+V2S9xxbbTSO1RpUbM1ekdksUi594Kn00UbN9CmvDuSNMjZ
WalYBfchSAj78kU7b3EZemkduuXk/Isbv2Y6e5LqCfASFUj6yYM85gGTB/3UpZax
j5RHGCNsFeeNwO6FNUfGDQqYH5FI28gE2aur+22LFNVawxyjd36pxvyO19NV4jxj
EzbJSeIrMQd3FT6qQ49ee5RkwD4RzXvAE0S3WA9/eDVglW6VkphC4FbDfF2PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAykUBXxJPoiAFFLS187Q0qoV1z8wHwYDVR0j
BBgwFoAUo7Y3jDje7wKaEoAKhn3mKfgy2SowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr
dzIvMS9BM0I2Mzc4QzM4REVFRjAyOUExMjgwMEE4NjdERTYyOUY4MzJEOTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzQjYzNzhDMzhERUVGMDI5
QTEyODAwQTg2N0RFNjI5RjgzMkQ5MkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzEv
MzEzODM2MmUzMjMzMzMyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrp5DANBgkqhkiG9w0BAQsFAAOCAQEAM0ym
twF1owQS4a4Ce+Y5EDZOT99fLUgQrxGH8F4jXxhSr7bFX0Ciz7dGU6K4/iN5c/wr
TkI+++JAeoqsbW/M5D5z2k4dLgF5euAERt69JaVN4sjYzbAUuBEpXAHEULk3RqtY
i/IQWCAZMDArG0eLH/26f4pyHd4+BDNDLeLqXUyEgIjNiptFNy+3GOX/SnrEroXt
yPmGQn/0mxaM4ElOLUszpazN5hE01SseS51n1uAgZSbv5tFh8TAKyCCfSPtfXz/T
qwnPiIj38VEXcVMrD9A+7bni8bfIzdQ5/BRWexcBJd8wE8Rln8ZGU5Y+Ci+OedwW
IvxfB6LZG8LIrii+Sw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:17:17 2025 by rpki-client