Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
File: 3137372e36372e302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: fgiDLoIXN38zgWr6reP5ojc6dhfB86nRcbUsyAhHmOU=
Subject key identifier: B6:B2:5E:78:2E:FC:29:91:D7:29:1F:1A:F7:B8:1C:F9:4F:2F:70:6B
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5A431775A0D71EB582CE9DFD07A6D2AFB6A1B454
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 177.67.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:43:17:75:a0:d7:1e:b5:82:ce:9d:fd:07:a6:d2:af:b6:a1:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=B6B25E782EFC2991D7291F1AF7B81CF94F2F706B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:d5:87:bb:36:e1:44:ca:24:57:17:aa:92:
fc:ac:7e:62:40:48:02:c0:64:3d:54:ca:95:1e:16:
0a:f6:32:e9:92:59:07:08:6c:6a:06:92:8e:af:08:
df:95:01:d2:55:79:17:7d:2d:4d:a9:af:0b:9f:d9:
e1:8e:ec:40:f0:d1:ce:81:79:f1:8d:fe:21:cf:17:
a1:07:17:fe:65:fd:a9:d7:26:fd:c9:d3:bb:e2:0b:
0a:1e:4c:83:1b:76:95:11:51:43:fa:58:19:67:53:
53:56:e2:9a:01:9a:bd:1d:81:0f:21:64:9b:08:dd:
e3:d6:54:a0:44:dc:f9:97:c3:3f:8e:fa:1f:f4:33:
9f:76:3c:d0:4b:73:d4:86:ac:e8:d1:0c:4d:c2:ae:
9c:8c:b7:82:53:ca:ed:24:98:d3:c4:fe:f4:06:c8:
36:66:fa:05:22:d3:48:2e:ab:fe:63:92:95:53:99:
0f:92:e2:95:4e:d6:60:08:35:98:50:cf:39:49:1e:
ba:a7:3e:07:7c:18:0a:9d:4a:c9:48:48:06:7a:62:
9d:7c:b5:24:78:ef:ea:35:ce:a4:74:09:59:9c:91:
79:ab:ac:81:aa:de:47:fe:cd:a2:95:47:dc:d2:26:
d8:97:e0:a6:e0:66:07:f2:8e:48:25:28:e7:b4:04:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:5E:78:2E:FC:29:91:D7:29:1F:1A:F7:B8:1C:F9:4F:2F:70:6B
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
16:ae:7c:62:a1:a2:d5:19:06:5f:b7:88:04:1a:b8:e8:a6:9f:
56:90:24:22:15:53:7b:68:14:dd:a4:fb:ea:73:65:fe:a0:dc:
0a:4a:74:cd:53:61:1d:2d:d4:02:3f:29:64:b1:cb:58:13:98:
d8:b0:47:07:a0:a6:a5:46:22:55:85:65:6b:c2:84:04:95:a7:
f2:93:a1:ec:60:a8:5b:fc:af:dc:68:55:cd:d8:23:a5:f5:47:
08:bf:d2:52:f7:e4:50:55:a8:52:3d:90:e0:74:43:aa:13:7a:
c2:93:0a:16:03:0a:78:19:89:4c:8e:1f:b0:25:04:98:20:4f:
8b:10:e1:0a:01:e7:b2:76:e7:f5:2d:5b:e9:bd:52:50:ab:4d:
0a:6f:0c:fb:c5:68:d6:92:13:ee:4b:a9:52:1b:0e:9e:e9:36:
28:0b:43:20:49:b8:c1:e8:22:8a:24:9f:74:88:fc:1b:2d:ff:
de:21:f1:26:52:0c:6e:5a:0b:44:dd:b0:b6:4a:48:d5:cf:17:
c9:39:41:b1:d1:45:19:97:c2:93:bc:b4:34:e1:6f:f9:fa:b3:
46:07:07:6f:de:46:ac:1c:ac:e2:77:84:66:71:14:af:d8:47:
b4:e6:b2:67:56:7c:5f:20:aa:19:b8:ec:85:85:67:94:4d:56:
5e:ef:74:98
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWkMXdaDXHrWCzp39B6bSr7ahtFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTVaFw0yNTExMDYyMDQwMTVaMDMxMTAvBgNV
BAMTKEI2QjI1RTc4MkVGQzI5OTFENzI5MUYxQUY3QjgxQ0Y5NEYyRjcwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrtWHuzbhRMokVxeqkvysfmJA
SALAZD1UypUeFgr2MumSWQcIbGoGko6vCN+VAdJVeRd9LU2prwuf2eGO7EDw0c6B
efGN/iHPF6EHF/5l/anXJv3J07viCwoeTIMbdpURUUP6WBlnU1NW4poBmr0dgQ8h
ZJsI3ePWVKBE3PmXwz+O+h/0M592PNBLc9SGrOjRDE3CrpyMt4JTyu0kmNPE/vQG
yDZm+gUi00guq/5jkpVTmQ+S4pVO1mAINZhQzzlJHrqnPgd8GAqdSslISAZ6Yp18
tSR47+o1zqR0CVmckXmrrIGq3kf+zaKVR9zSJtiX4KbgZgfyjkglKOe0BPqFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUtrJeeC78KZHXKR8a97gc+U8vcGswHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxQwAwDQYJKoZIhvcNAQELBQADggEBABaufGKhotUZBl+3
iAQauOimn1aQJCIVU3toFN2k++pzZf6g3ApKdM1TYR0t1AI/KWSxy1gTmNiwRweg
pqVGIlWFZWvChASVp/KToexgqFv8r9xoVc3YI6X1Rwi/0lL35FBVqFI9kOB0Q6oT
esKTChYDCngZiUyOH7AlBJggT4sQ4QoB57J25/UtW+m9UlCrTQpvDPvFaNaSE+5L
qVIbDp7pNigLQyBJuMHoIookn3SI/Bst/94h8SZSDG5aC0TdsLZKSNXPF8k5QbHR
RRmXwpO8tDThb/n6s0YHB2/eRqwcrOJ3hGZxFK/YR7TmsmdWfF8gqhm47IWFZ5RN
Vl7vdJg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:22 2025 by rpki-client