Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
File: 3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: 50szpv0BBJrbZOCJIo4HsTV/6sHAzd2FRUTqaJpUkMU=
Subject key identifier: F5:4A:93:75:7B:01:41:80:F2:DD:BD:D6:9A:DF:81:9B:16:73:C0:B9
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 56BA7B8F2AB4C1D305EF91D4D8981DDCEB3DC2C5
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:16 +0000
ROA not before: Thu 07 Nov 2024 20:35:16 +0000
ROA not after: Thu 06 Nov 2025 20:40:16 +0000
asID: 271724
IP address blocks: 170.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ba:7b:8f:2a:b4:c1:d3:05:ef:91:d4:d8:98:1d:dc:eb:3d:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=F54A93757B014180F2DDBDD69ADF819B1673C0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:b0:66:4c:a0:d2:0b:c6:c9:03:f5:bf:da:
6e:f6:53:af:5d:29:86:41:71:e6:bc:03:9c:df:10:
06:75:85:1c:df:6c:ff:0e:ef:5b:4d:9a:9e:8d:55:
0b:09:96:16:0c:58:ac:0e:e8:68:f6:47:5b:3e:c5:
4c:81:8e:07:42:da:b5:24:92:92:fe:ca:89:54:ac:
a9:0b:0e:7b:70:06:6f:87:90:b8:49:71:86:2e:95:
34:48:fc:e9:8c:70:68:66:ed:31:08:66:d3:e8:de:
b1:b2:1c:2c:04:c8:33:c4:a4:e7:e7:ae:22:64:0a:
ce:6a:00:16:bd:27:59:e7:78:94:74:89:c4:59:31:
8f:91:b9:fe:6c:d4:67:0a:ed:d0:61:11:e3:41:d8:
94:18:b8:88:39:76:95:ed:dc:af:f6:b0:20:64:46:
b7:a3:d2:bf:fa:9e:b4:46:a8:69:2f:97:97:53:d1:
87:88:16:ec:e4:55:86:e7:c3:23:fe:8f:c4:da:15:
b6:b4:a8:dc:d3:54:22:83:60:b8:66:9b:ee:44:9c:
14:ce:2d:31:a2:52:25:6a:93:84:b2:7b:c7:74:59:
17:0e:15:e3:27:f4:c1:b2:e8:fb:d6:ea:c1:47:2b:
0f:12:03:9b:c5:00:f2:8e:32:0d:48:76:cf:76:82:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:93:75:7B:01:41:80:F2:DD:BD:D6:9A:DF:81:9B:16:73:C0:B9
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.100.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b5:9d:9d:5b:2d:e8:a8:0a:6a:f5:46:3d:64:36:56:f5:9c:
61:29:04:fc:2f:2f:1d:39:88:8c:b1:79:af:21:b0:36:dc:22:
66:3b:47:49:af:79:9e:18:cb:ee:4b:73:1a:34:b8:db:69:b7:
2f:9f:73:ea:43:fe:55:66:2e:70:fe:49:0d:16:68:c0:7a:e8:
8f:bc:46:3f:ab:9e:c6:15:0c:ff:98:4c:a6:76:43:ac:68:f8:
dc:9c:67:fe:9a:64:e1:4c:68:99:50:b3:48:a0:2e:0f:65:12:
12:fd:c2:9e:09:ad:6d:cf:07:f9:e5:5f:13:bc:2a:46:a6:bf:
a8:a4:0c:b7:bf:db:4f:f9:13:25:b4:fd:24:7b:04:01:5e:6d:
a2:52:a2:0b:41:3e:d5:ea:ac:b2:34:4a:1a:9b:5f:8a:89:9d:
a7:b0:94:fc:2b:86:60:d0:05:6e:d1:ba:91:98:8e:c7:b4:1f:
f7:ce:68:7a:57:c7:23:d8:b7:50:ef:5e:cf:ab:19:25:a8:09:
5a:b5:46:31:de:fb:87:ed:d1:e0:20:cb:1a:1f:c6:39:38:64:
63:34:53:43:d8:37:30:8b:f3:84:b6:e0:1b:d0:f2:4c:72:cd:
3f:e3:fc:d4:3c:0d:a8:e5:58:ba:27:e8:e0:73:21:e7:21:88:
60:a0:d3:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVrp7jyq0wdMF75HU2Jgd3Os9wsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTZaFw0yNTExMDYyMDQwMTZaMDMxMTAvBgNV
BAMTKEY1NEE5Mzc1N0IwMTQxODBGMkREQkRENjlBREY4MTlCMTY3M0MwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3rBmTKDSC8bJA/W/2m72U69d
KYZBcea8A5zfEAZ1hRzfbP8O71tNmp6NVQsJlhYMWKwO6Gj2R1s+xUyBjgdC2rUk
kpL+yolUrKkLDntwBm+HkLhJcYYulTRI/OmMcGhm7TEIZtPo3rGyHCwEyDPEpOfn
riJkCs5qABa9J1nneJR0icRZMY+Ruf5s1GcK7dBhEeNB2JQYuIg5dpXt3K/2sCBk
Rrej0r/6nrRGqGkvl5dT0YeIFuzkVYbnwyP+j8TaFba0qNzTVCKDYLhmm+5EnBTO
LTGiUiVqk4Sye8d0WRcOFeMn9MGy6PvW6sFHKw8SA5vFAPKOMg1Ids92gjMJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9UqTdXsBQYDy3b3Wmt+BmxZzwLkwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr1ZDANBgkqhkiG9w0BAQsFAAOCAQEAUbWd
nVst6KgKavVGPWQ2VvWcYSkE/C8vHTmIjLF5ryGwNtwiZjtHSa95nhjL7ktzGjS4
22m3L59z6kP+VWYucP5JDRZowHroj7xGP6uexhUM/5hMpnZDrGj43Jxn/ppk4Uxo
mVCzSKAuD2USEv3Cngmtbc8H+eVfE7wqRqa/qKQMt7/bT/kTJbT9JHsEAV5tolKi
C0E+1eqssjRKGptfiomdp7CU/CuGYNAFbtG6kZiOx7Qf985oelfHI9i3UO9ez6sZ
JagJWrVGMd77h+3R4CDLGh/GOThkYzRTQ9g3MIvzhLbgG9DyTHLNP+P81DwNqOVY
uifo4HMh5yGIYKDTEw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:18:06 2025 by rpki-client