Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa
File: 3136382e3139352e322e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier: kx2PqgHyPL75FBT6vnPJ9ngl6TQsiJ63289AocZL6Bw=
Subject key identifier: EF:2B:C9:B5:4A:DA:E5:E0:E2:E9:4D:29:E9:78:CE:D4:16:09:71:51
Certificate issuer: /CN=54C4052D39431D563CCB2D911DC264CD61964490
Certificate serial: 1A552E770793CE19E4B544C0EA709AF584E7FB0E
Authority key identifier: 54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa
Signing time: Tue 12 Mar 2024 13:46:48 +0000
ROA not before: Tue 12 Mar 2024 13:41:48 +0000
ROA not after: Tue 11 Mar 2025 13:46:48 +0000
asID: 265410
IP address blocks: 168.195.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:55:2e:77:07:93:ce:19:e4:b5:44:c0:ea:70:9a:f5:84:e7:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C4052D39431D563CCB2D911DC264CD61964490
Validity
Not Before: Mar 12 13:41:48 2024 GMT
Not After : Mar 11 13:46:48 2025 GMT
Subject: CN=EF2BC9B54ADAE5E0E2E94D29E978CED416097151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fd:dc:44:85:2e:e0:4f:b1:dc:d0:d3:52:19:
51:37:31:5d:64:49:90:7f:08:ba:07:d3:4a:77:30:
60:c9:74:ba:be:1b:19:97:f5:74:d4:17:06:ec:0e:
d7:2a:c2:48:3f:ff:c9:d9:b1:5b:38:84:05:1d:07:
06:1f:dc:b2:c9:1f:68:a2:30:1a:cb:46:f6:ee:f3:
2c:1f:c4:d3:94:67:89:56:15:dd:7d:2d:71:81:88:
62:ab:45:3e:26:19:9f:5d:08:cb:ba:60:98:ab:40:
2c:ee:5c:4c:66:61:d5:2c:12:64:6d:b1:c2:b6:20:
47:0f:fa:43:23:3a:f2:4c:20:3e:17:11:eb:79:5a:
d5:f5:ef:66:6d:9b:ae:20:23:97:7b:a9:6e:86:bc:
17:eb:e7:60:5a:a6:0e:74:08:68:b7:e6:92:70:78:
4e:0f:e8:87:60:d3:8b:af:7b:3b:48:71:8e:74:b9:
52:2d:4e:e5:22:bf:6f:78:a5:b8:0e:bf:0a:ca:15:
d3:13:56:d6:8c:30:71:37:40:44:2d:e0:0b:e1:21:
90:63:f4:49:b5:96:15:64:ea:13:3e:bd:88:12:95:
b9:53:20:d3:eb:5e:e6:65:5c:ae:df:61:5b:08:d7:
21:32:de:da:56:69:40:89:db:5e:65:74:99:24:3d:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:C9:B5:4A:DA:E5:E0:E2:E9:4D:29:E9:78:CE:D4:16:09:71:51
X509v3 Authority Key Identifier:
keyid:54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.2.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:b1:58:0f:b4:ba:78:e9:9b:f0:e9:b6:9e:88:f0:ef:15:3c:
44:84:54:35:de:07:7a:3a:5f:83:f8:6b:2a:fa:0e:67:ba:9f:
07:91:a6:16:f8:94:06:2a:79:cc:81:08:93:99:f4:8a:b7:31:
5d:10:83:b2:be:27:69:20:28:51:0c:9e:37:47:e0:48:22:f0:
b9:b6:cd:d9:c2:b6:2a:f4:30:7d:f8:18:db:8a:62:70:23:bc:
27:e4:60:82:b6:cc:13:3a:e6:ec:04:a8:98:93:c8:e9:d2:f4:
d6:d0:43:ef:f4:f6:5b:bf:53:dd:63:9c:9f:6f:31:00:e6:4c:
3d:2f:0f:7c:c8:09:11:fc:67:ef:da:d0:93:16:f8:3f:d5:3e:
81:91:80:9e:ef:9b:d5:53:b2:0d:9b:a3:cf:90:11:9e:9f:0e:
fb:ab:c2:d3:46:d5:19:57:d6:44:f2:2b:db:a5:d2:ba:f4:db:
df:f2:d4:81:a0:29:b7:4a:ad:7d:9f:48:31:08:48:49:86:0e:
57:24:2a:66:4d:7a:a8:c3:88:70:19:27:24:8d:d6:e9:e5:f1:
b3:5f:95:95:b6:34:14:eb:4d:30:8c:43:39:5f:0f:01:08:a0:
86:1f:44:94:e9:f7:96:41:46:05:9f:3e:12:9c:ae:7c:b8:16:
d4:8c:3c:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGlUudweTzhnktUTA6nCa9YTn+w4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDNDA1MkQzOTQzMUQ1NjNDQ0IyRDkxMURDMjY0Q0Q2
MTk2NDQ5MDAeFw0yNDAzMTIxMzQxNDhaFw0yNTAzMTExMzQ2NDhaMDMxMTAvBgNV
BAMTKEVGMkJDOUI1NEFEQUU1RTBFMkU5NEQyOUU5NzhDRUQ0MTYwOTcxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5/dxEhS7gT7Hc0NNSGVE3MV1k
SZB/CLoH00p3MGDJdLq+GxmX9XTUFwbsDtcqwkg//8nZsVs4hAUdBwYf3LLJH2ii
MBrLRvbu8ywfxNOUZ4lWFd19LXGBiGKrRT4mGZ9dCMu6YJirQCzuXExmYdUsEmRt
scK2IEcP+kMjOvJMID4XEet5WtX172Ztm64gI5d7qW6GvBfr52Bapg50CGi35pJw
eE4P6Idg04uveztIcY50uVItTuUiv294pbgOvwrKFdMTVtaMMHE3QEQt4AvhIZBj
9Em1lhVk6hM+vYgSlblTINPrXuZlXK7fYVsI1yEy3tpWaUCJ215ldJkkPVR7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7yvJtUra5eDi6U0p6XjO1BYJcVEwHwYDVR0j
BBgwFoAUVMQFLTlDHVY8yy2RHcJkzWGWRJAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FaalpMejh6M29ucWlWS240WWFXRUxyUFRSZVFVRnlHUHhxQnEyMjdM
NncvMC81NEM0MDUyRDM5NDMxRDU2M0NDQjJEOTExREMyNjRDRDYxOTY0NDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0QzQwNTJEMzk0MzFENTYz
Q0NCMkQ5MTFEQzI2NENENjE5NjQ0OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxWmpaTHo4ejNvbnFpVktuNFlhV0VMclBUUmVRVUZ5R1B4cUJxMjI3TDZ3LzAv
MzEzNjM4MmUzMTM5MzUyZTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1
MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqMMCMA0GCSqGSIb3DQEBCwUAA4IBAQAtsVgPtLp4
6Zvw6baeiPDvFTxEhFQ13gd6Ol+D+Gsq+g5nup8HkaYW+JQGKnnMgQiTmfSKtzFd
EIOyvidpIChRDJ43R+BIIvC5ts3ZwrYq9DB9+BjbimJwI7wn5GCCtswTOubsBKiY
k8jp0vTW0EPv9PZbv1PdY5yfbzEA5kw9Lw98yAkR/Gfv2tCTFvg/1T6BkYCe75vV
U7INm6PPkBGenw77q8LTRtUZV9ZE8ivbpdK69Nvf8tSBoCm3Sq19n0gxCEhJhg5X
JCpmTXqow4hwGSckjdbp5fGzX5WVtjQU600wjEM5Xw8BCKCGH0SU6feWQUYFnz4S
nK58uBbUjDzZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client