Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
File: 3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier: WFujqRPM4zudwazUbnKNg9zo8JUBUiNE2h0N85t4gnw=
Subject key identifier: AF:0B:4D:AA:29:0E:14:D0:E5:75:70:2E:01:1B:F4:C3:00:B3:3A:AF
Certificate issuer: /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial: 4681E4BFCEC972B537F0913014CE343F4577EE61
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
Signing time: Thu 06 Mar 2025 08:00:29 +0000
ROA not before: Thu 06 Mar 2025 07:55:29 +0000
ROA not after: Thu 05 Mar 2026 08:00:29 +0000
asID: 263263
IP address blocks: 170.244.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:81:e4:bf:ce:c9:72:b5:37:f0:91:30:14:ce:34:3f:45:77:ee:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Validity
Not Before: Mar 6 07:55:29 2025 GMT
Not After : Mar 5 08:00:29 2026 GMT
Subject: CN=AF0B4DAA290E14D0E575702E011BF4C300B33AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:b1:ae:bb:41:5a:cb:85:7e:b5:70:b5:8e:
0d:05:8b:94:8f:e5:b6:dc:03:b4:38:5d:ec:75:37:
07:ec:68:01:5c:bc:f6:f0:50:d8:2f:71:95:55:34:
84:08:92:61:d9:35:8f:db:a2:90:47:58:f8:5c:b7:
85:d7:ae:c4:72:10:a1:5b:50:77:ef:e6:1b:84:de:
98:ba:06:1c:ba:4d:09:fc:63:d8:97:cd:c9:82:01:
c1:0e:f8:2b:79:d5:af:bd:f2:da:04:3d:25:99:3f:
80:18:14:28:33:e1:0e:69:9c:88:6a:f5:51:30:4f:
36:3a:cd:85:76:2a:8f:54:f0:8d:c5:de:75:c2:17:
72:b8:95:63:e5:9a:f5:11:0e:7e:67:39:5a:f7:4f:
04:39:90:74:47:d2:10:e6:a3:d5:24:fb:96:7a:1e:
fe:68:97:71:ab:54:00:ea:ed:fd:d7:37:cb:17:28:
c6:f3:5b:c1:3a:db:37:c7:00:a4:de:2b:2a:7a:6c:
86:53:3b:04:6d:50:59:d5:95:a8:cd:e7:f9:0b:1d:
67:4b:fe:07:71:6d:a9:8f:b0:85:49:9a:3f:bf:6f:
c2:6f:23:b5:9e:70:b5:0c:c2:b7:2d:5a:31:4d:69:
71:52:11:dc:cf:86:b6:4c:2f:e8:b9:a5:03:24:c3:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:4D:AA:29:0E:14:D0:E5:75:70:2E:01:1B:F4:C3:00:B3:3A:AF
X509v3 Authority Key Identifier:
keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d2:68:e5:ef:58:4d:3d:bb:b4:6b:56:b4:2e:d7:49:21:fb:
80:e4:ad:46:e7:e1:ac:b9:ee:78:2f:34:c0:d0:0f:b5:33:53:
18:fc:28:a0:76:31:ba:b8:54:27:24:8d:6e:de:5f:9a:1b:10:
4b:73:a8:9b:5f:45:29:95:73:8d:0d:a9:12:b2:c4:25:59:fb:
1e:fb:89:c5:b0:d3:99:02:6e:99:18:13:ae:d3:59:db:d0:a3:
23:a8:5d:d7:8d:57:16:55:1e:25:52:42:3a:e9:15:49:f7:e1:
7e:d9:a6:ac:0c:1d:16:9b:63:2a:db:94:02:77:45:e6:fb:94:
3f:ea:bb:c1:26:70:72:4a:4b:94:a0:b7:dc:cc:d9:40:69:01:
2d:d5:5e:8d:9c:e3:62:b9:d7:43:80:e5:28:84:42:09:46:4a:
51:f7:89:8e:f8:91:d3:c7:17:78:db:97:7a:c9:57:0b:7a:a0:
85:c3:64:fd:00:cc:67:2f:dd:88:73:1a:a9:95:12:de:aa:f3:
38:99:8c:99:a5:a2:75:c8:ea:87:30:f9:83:86:6b:ee:91:f0:
e0:cb:77:cf:f1:38:5d:ae:31:d9:d8:01:9b:ef:b9:3a:a7:fe:
a7:a0:aa:84:cf:9b:fe:e8:87:f3:59:29:af:d1:57:3f:60:ce:
58:f8:17:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURoHkv87JcrU38JEwFM40P0V37mEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjlaFw0yNjAzMDUwODAwMjlaMDMxMTAvBgNV
BAMTKEFGMEI0REFBMjkwRTE0RDBFNTc1NzAyRTAxMUJGNEMzMDBCMzNBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKbGuu0Fay4V+tXC1jg0Fi5SP
5bbcA7Q4Xex1NwfsaAFcvPbwUNgvcZVVNIQIkmHZNY/bopBHWPhct4XXrsRyEKFb
UHfv5huE3pi6Bhy6TQn8Y9iXzcmCAcEO+Ct51a+98toEPSWZP4AYFCgz4Q5pnIhq
9VEwTzY6zYV2Ko9U8I3F3nXCF3K4lWPlmvURDn5nOVr3TwQ5kHRH0hDmo9Uk+5Z6
Hv5ol3GrVADq7f3XN8sXKMbzW8E62zfHAKTeKyp6bIZTOwRtUFnVlajN5/kLHWdL
/gdxbamPsIVJmj+/b8JvI7WecLUMwrctWjFNaXFSEdzPhrZML+i5pQMkwxs5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrwtNqikOFNDldXAuARv0wwCzOq8wHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr03DANBgkqhkiG9w0BAQsFAAOCAQEALdJo
5e9YTT27tGtWtC7XSSH7gOStRufhrLnueC80wNAPtTNTGPwooHYxurhUJySNbt5f
mhsQS3Oom19FKZVzjQ2pErLEJVn7HvuJxbDTmQJumRgTrtNZ29CjI6hd141XFlUe
JVJCOukVSffhftmmrAwdFptjKtuUAndF5vuUP+q7wSZwckpLlKC33MzZQGkBLdVe
jZzjYrnXQ4DlKIRCCUZKUfeJjviR08cXeNuXeslXC3qghcNk/QDMZy/diHMaqZUS
3qrzOJmMmaWidcjqhzD5g4Zr7pHw4Mt3z/E4Xa4x2dgBm++5Oqf+p6CqhM+b/uiH
81kpr9FXP2DOWPgXHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:02 2025 by rpki-client