Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
File: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (raw, json)
Hash identifier: t3EpRKFHJrhlUhWYPmeT9vUH1N5PgTlIDPv+xWOrN0w=
Subject key identifier: E1:4E:1A:2B:AC:2F:5C:0E:74:05:C8:02:6F:F6:F0:86:18:D8:9A:5E
Certificate issuer: /CN=967EAC98B729C911A753A351D688123490AD5ACB
Certificate serial: 4FA567F814D11F2E35CB8AFA17F3D29E1868174A
Authority key identifier: 96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
Signing time: Tue 09 Jan 2024 12:18:52 +0000
ROA not before: Tue 09 Jan 2024 12:13:52 +0000
ROA not after: Tue 07 Jan 2025 12:18:52 +0000
asID: 271101
IP address blocks: 179.48.216.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a5:67:f8:14:d1:1f:2e:35:cb:8a:fa:17:f3:d2:9e:18:68:17:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967EAC98B729C911A753A351D688123490AD5ACB
Validity
Not Before: Jan 9 12:13:52 2024 GMT
Not After : Jan 7 12:18:52 2025 GMT
Subject: CN=E14E1A2BAC2F5C0E7405C8026FF6F08618D89A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:c3:04:a9:fb:e7:b5:e0:30:72:9d:68:4b:
73:65:56:02:37:df:31:41:a5:20:b3:d2:ff:cc:92:
c0:32:5a:39:4f:1a:c8:55:f5:9d:8a:14:3b:e5:05:
25:da:6f:be:58:51:00:8c:90:79:64:55:c1:df:39:
6e:2a:98:97:b2:51:52:6c:37:3c:ee:73:3a:30:55:
91:b9:99:86:26:72:3a:a1:85:7d:af:dd:47:cd:4f:
1e:39:e4:04:65:af:0c:76:92:9c:27:c4:04:0f:13:
24:a5:f8:4c:6c:c4:d6:e6:59:29:70:5b:0e:04:2d:
1e:b0:e5:d9:82:a7:5d:f6:08:1f:c1:73:bd:c9:42:
97:d1:17:98:a2:0a:11:58:98:b2:de:f2:e0:d8:48:
80:72:99:94:ff:2d:a9:77:ed:35:fe:65:30:fb:3c:
70:1d:8e:1f:36:38:ec:17:86:13:6f:52:46:4e:50:
c5:13:1b:ae:b0:49:b3:db:93:9b:2f:94:29:f4:de:
96:0d:f9:59:1e:cd:1f:a8:b6:a1:29:ef:02:04:d2:
32:a2:9f:35:80:a8:bf:88:42:4d:04:0f:83:81:2d:
1e:13:87:2a:4a:a2:d9:27:bd:d1:79:69:7c:37:44:
89:82:f1:c4:1c:bf:9a:37:0f:74:b9:5e:cc:b3:46:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:1A:2B:AC:2F:5C:0E:74:05:C8:02:6F:F6:F0:86:18:D8:9A:5E
X509v3 Authority Key Identifier:
keyid:96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/967EAC98B729C911A753A351D688123490AD5ACB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.48.216.0/22
Signature Algorithm: sha256WithRSAEncryption
32:6a:72:6c:62:d9:c4:ce:84:13:ec:b8:c3:0c:94:71:2f:17:
4f:c0:7c:64:d3:fc:c2:1d:0d:ee:d5:78:e0:86:92:65:5c:0a:
94:b5:42:61:4b:7e:ec:ed:73:73:29:43:d1:9d:55:00:7f:74:
a2:79:ab:95:92:1d:85:fe:54:f1:dd:e3:b3:f6:38:f0:67:d0:
ea:08:7f:96:51:f0:6a:a5:49:76:ee:4b:7b:b7:fe:1f:c4:ad:
74:93:88:4e:32:b3:b6:74:d8:88:75:f0:3d:ab:c5:1e:81:d2:
23:26:eb:5c:74:a4:6f:06:41:cc:aa:45:be:1f:5c:a6:4d:f6:
55:94:4e:21:c7:73:a4:8c:1e:de:ce:fe:df:d5:e7:9e:b7:60:
09:88:b7:f6:35:a6:47:34:68:a4:a4:2f:51:4e:69:b8:84:89:
14:91:fe:fa:e0:19:ca:cb:1d:9d:eb:74:22:7d:37:58:60:0b:
42:44:cb:2a:26:f6:04:bb:bc:57:e6:1e:08:63:e7:84:a8:e5:
69:49:0d:20:f5:4e:8f:3e:8b:8d:38:ac:24:52:b0:04:af:ba:
d6:72:82:0d:0d:b5:90:c2:82:4e:e3:a8:a7:00:e7:3a:f4:54:
d5:40:a9:fd:c0:39:f7:cb:40:c1:a0:44:ea:7e:14:2e:21:96:
10:a2:25:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT6Vn+BTRHy41y4r6F/PSnhhoF0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY3RUFDOThCNzI5QzkxMUE3NTNBMzUxRDY4ODEyMzQ5
MEFENUFDQjAeFw0yNDAxMDkxMjEzNTJaFw0yNTAxMDcxMjE4NTJaMDMxMTAvBgNV
BAMTKEUxNEUxQTJCQUMyRjVDMEU3NDA1QzgwMjZGRjZGMDg2MThEODlBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJ8MEqfvnteAwcp1oS3NlVgI3
3zFBpSCz0v/MksAyWjlPGshV9Z2KFDvlBSXab75YUQCMkHlkVcHfOW4qmJeyUVJs
NzzuczowVZG5mYYmcjqhhX2v3UfNTx455ARlrwx2kpwnxAQPEySl+ExsxNbmWSlw
Ww4ELR6w5dmCp132CB/Bc73JQpfRF5iiChFYmLLe8uDYSIBymZT/Lal37TX+ZTD7
PHAdjh82OOwXhhNvUkZOUMUTG66wSbPbk5svlCn03pYN+VkezR+otqEp7wIE0jKi
nzWAqL+IQk0ED4OBLR4ThypKotknvdF5aXw3RImC8cQcv5o3D3S5XsyzRtD3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4U4aK6wvXA50BcgCb/bwhhjYml4wHwYDVR0j
BBgwFoAUln6smLcpyRGnU6NR1ogSNJCtWsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4
MkYvMC85NjdFQUM5OEI3MjlDOTExQTc1M0EzNTFENjg4MTIzNDkwQUQ1QUNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2N0VBQzk4QjcyOUM5MTFB
NzUzQTM1MUQ2ODgxMjM0OTBBRDVBQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3cTVmWVVWcUF6YnJrTFFvNFBvWVMya0d2OEdYc0tuTjhxQVl3NVJHeDJGLzAv
MzEzNzM5MmUzNDM4MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMNgwDQYJKoZIhvcNAQELBQADggEBADJqcmxi
2cTOhBPsuMMMlHEvF0/AfGTT/MIdDe7VeOCGkmVcCpS1QmFLfuztc3MpQ9GdVQB/
dKJ5q5WSHYX+VPHd47P2OPBn0OoIf5ZR8GqlSXbuS3u3/h/ErXSTiE4ys7Z02Ih1
8D2rxR6B0iMm61x0pG8GQcyqRb4fXKZN9lWUTiHHc6SMHt7O/t/V5563YAmIt/Y1
pkc0aKSkL1FOabiEiRSR/vrgGcrLHZ3rdCJ9N1hgC0JEyyom9gS7vFfmHghj54So
5WlJDSD1To8+i404rCRSsASvutZygg0NtZDCgk7jqKcA5zr0VNVAqf3AOffLQMGg
ROp+FC4hlhCiJcU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:31 2025 by rpki-client