Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
File: 3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier: 8NbsC+YK9DCS1klgYEXKh6BGngLWUJVJcZWcDVAnBxE=
Subject key identifier: D4:E4:EF:F4:32:31:84:B8:7F:62:C3:8B:F7:C7:B3:4B:00:3D:7D:F0
Certificate issuer: /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial: 1F4FD9E40F7FF91C1BF63070F9E8B809D03C3485
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
Signing time: Thu 06 Mar 2025 08:00:29 +0000
ROA not before: Thu 06 Mar 2025 07:55:29 +0000
ROA not after: Thu 05 Mar 2026 08:00:29 +0000
asID: 263263
IP address blocks: 170.244.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4f:d9:e4:0f:7f:f9:1c:1b:f6:30:70:f9:e8:b8:09:d0:3c:34:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Validity
Not Before: Mar 6 07:55:29 2025 GMT
Not After : Mar 5 08:00:29 2026 GMT
Subject: CN=D4E4EFF4323184B87F62C38BF7C7B34B003D7DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:43:bb:69:54:39:fa:b1:ed:0b:49:cb:c0:
45:bc:72:2e:1d:57:9c:b7:c4:6f:3c:98:01:c7:9d:
84:2e:88:3e:b6:3e:70:88:66:e7:bf:74:9c:fb:53:
b1:d8:b2:b3:7f:6d:b4:99:5c:b6:b0:2a:3a:e5:e1:
dc:0a:15:d1:28:0b:1a:ec:c3:f7:5b:fe:31:da:44:
53:6a:e4:84:f0:20:53:22:0d:5b:a9:ce:74:28:ea:
3f:64:5f:b4:98:60:f3:8f:64:2e:1a:b3:d7:fd:bc:
2e:43:5e:4e:4d:ae:b2:81:58:69:ab:26:b8:7d:2b:
18:2b:eb:7c:89:d3:2d:d0:a4:0f:b6:dd:ba:ae:d1:
c2:5a:a8:de:9e:61:5e:60:26:18:ed:40:58:a5:8a:
53:c7:b0:61:30:4b:5b:cc:1f:30:b0:60:10:83:56:
05:14:9d:6a:27:09:c6:e9:1e:78:1c:0e:09:8f:7d:
06:ba:92:92:53:12:fd:28:30:3a:f5:7d:d2:1b:1e:
41:52:90:e1:d1:0b:47:b9:01:94:fd:4e:d4:d6:5b:
a0:fa:f1:67:86:2c:8c:64:00:49:9d:60:a9:74:2e:
76:a1:fc:9e:f6:5a:d9:2b:ed:a9:0e:ba:09:d9:5a:
cb:46:9e:b8:3d:aa:3c:ab:a6:4d:60:8a:1a:3a:e1:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E4:EF:F4:32:31:84:B8:7F:62:C3:8B:F7:C7:B3:4B:00:3D:7D:F0
X509v3 Authority Key Identifier:
keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.220.0/23
Signature Algorithm: sha256WithRSAEncryption
03:3b:b9:db:83:76:c7:0b:6c:87:7f:82:ae:dc:56:70:ce:d4:
3e:cd:47:4d:1a:b3:37:1b:e7:71:6c:42:c4:b0:b5:2b:46:9b:
2d:87:7a:44:9b:76:ce:b6:e9:6a:52:0c:d8:25:5a:93:92:0b:
57:31:da:84:a3:62:8c:de:ef:d4:e9:2f:50:c5:d9:1c:30:c2:
9a:63:92:d7:71:9d:b6:65:e5:03:d5:cd:7d:45:ee:e9:b8:9c:
26:04:3b:da:da:44:11:d9:f9:36:ff:9a:3b:a2:92:6f:29:78:
a3:6d:2a:30:f7:26:e9:3b:70:3b:01:0c:27:a6:1b:ce:11:0a:
a2:6b:20:e3:9b:fd:ee:70:71:6b:a9:1d:fd:26:e8:43:f1:e0:
b7:12:65:55:f3:ca:cc:3b:b5:7c:f2:86:75:3e:cd:0d:4b:b9:
98:c1:da:14:8f:52:99:29:22:af:e5:cd:b8:fa:4d:74:a7:da:
63:88:2e:8f:f8:18:a7:75:0c:f5:60:90:69:6f:6e:e1:d0:81:
93:11:b7:0f:92:d5:cd:c5:4e:33:6e:98:a7:dc:da:ce:06:45:
02:fd:ff:ef:2d:dd:e2:87:1b:41:27:90:01:19:dc:ad:ea:0c:
61:fc:7f:e5:e8:ff:c3:eb:cf:01:ac:c3:90:48:5f:86:18:56:
00:d7:8a:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH0/Z5A9/+Rwb9jBw+ei4CdA8NIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjlaFw0yNjAzMDUwODAwMjlaMDMxMTAvBgNV
BAMTKEQ0RTRFRkY0MzIzMTg0Qjg3RjYyQzM4QkY3QzdCMzRCMDAzRDdERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXUO7aVQ5+rHtC0nLwEW8ci4d
V5y3xG88mAHHnYQuiD62PnCIZue/dJz7U7HYsrN/bbSZXLawKjrl4dwKFdEoCxrs
w/db/jHaRFNq5ITwIFMiDVupznQo6j9kX7SYYPOPZC4as9f9vC5DXk5NrrKBWGmr
Jrh9Kxgr63yJ0y3QpA+23bqu0cJaqN6eYV5gJhjtQFililPHsGEwS1vMHzCwYBCD
VgUUnWonCcbpHngcDgmPfQa6kpJTEv0oMDr1fdIbHkFSkOHRC0e5AZT9TtTWW6D6
8WeGLIxkAEmdYKl0Lnah/J72Wtkr7akOugnZWstGnrg9qjyrpk1giho64UpPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1OTv9DIxhLh/YsOL98ezSwA9ffAwHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar03DANBgkqhkiG9w0BAQsFAAOCAQEAAzu5
24N2xwtsh3+CrtxWcM7UPs1HTRqzNxvncWxCxLC1K0abLYd6RJt2zrbpalIM2CVa
k5ILVzHahKNijN7v1OkvUMXZHDDCmmOS13GdtmXlA9XNfUXu6bicJgQ72tpEEdn5
Nv+aO6KSbyl4o20qMPcm6TtwOwEMJ6YbzhEKomsg45v97nBxa6kd/SboQ/HgtxJl
VfPKzDu1fPKGdT7NDUu5mMHaFI9SmSkir+XNuPpNdKfaY4guj/gYp3UM9WCQaW9u
4dCBkxG3D5LVzcVOM26Yp9zazgZFAv3/7y3d4ocbQSeQARncreoMYfx/5ej/w+vP
AazDkEhfhhhWANeKdQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:36:58 2025 by rpki-client