Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa
File: 3137372e382e302e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier: y380IzVropJ1/aN7oiZ2Auc3RTQr3/5R+bbSiZ9N/ng=
Subject key identifier: 44:60:3C:90:B6:E0:80:75:D3:75:13:8A:53:94:FF:EE:98:D3:94:DA
Certificate issuer: /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial: 0C2D72E10A0DF090040F0FF92181582E4E35B9D3
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa
Signing time: Mon 12 Aug 2024 20:02:45 +0000
ROA not before: Mon 12 Aug 2024 19:57:45 +0000
ROA not after: Mon 11 Aug 2025 20:02:45 +0000
asID: 28360
IP address blocks: 177.8.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2d:72:e1:0a:0d:f0:90:04:0f:0f:f9:21:81:58:2e:4e:35:b9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Validity
Not Before: Aug 12 19:57:45 2024 GMT
Not After : Aug 11 20:02:45 2025 GMT
Subject: CN=44603C90B6E08075D375138A5394FFEE98D394DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:c5:9c:d2:92:b8:90:0c:fb:a3:25:4a:81:
ca:d1:d2:41:f3:9b:9a:dc:d7:dd:4c:29:e2:6d:18:
3c:69:8a:be:3c:bf:66:66:38:0d:6f:42:c9:ed:06:
34:a9:6e:ea:ae:38:d0:db:57:5d:80:83:da:4f:d6:
db:f1:70:01:80:90:66:97:3c:60:4e:1a:d0:2d:1e:
93:75:5c:91:b6:ef:ff:f9:2e:63:c6:e5:d0:b7:bf:
3a:7f:af:10:f5:a1:b0:2a:d9:a8:a3:85:68:40:11:
a1:92:f4:47:83:a2:2d:50:58:4b:58:da:f7:f1:8b:
03:db:e0:43:98:1b:b9:b2:17:ec:56:25:ae:47:82:
d0:ca:ea:c5:70:32:d1:07:17:ef:c1:b7:8a:ad:3d:
63:19:1a:22:7f:d3:74:1a:c9:f2:46:47:75:bc:67:
d8:73:15:17:fe:b6:dd:17:ba:5e:e0:e0:9b:1a:b4:
69:99:86:79:20:55:cd:12:32:13:a0:4b:04:da:17:
34:b2:82:d2:a0:6a:f3:ff:ae:bc:a5:d7:1a:d2:cc:
79:cf:b1:56:e5:5e:0f:56:9b:91:13:33:22:9c:9b:
57:77:2e:b1:6d:db:5d:1d:a5:e4:99:3d:e7:44:b9:
69:09:8a:cd:ac:ad:c2:ba:37:fb:d7:08:19:3a:41:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:3C:90:B6:E0:80:75:D3:75:13:8A:53:94:FF:EE:98:D3:94:DA
X509v3 Authority Key Identifier:
keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.0.0/20
Signature Algorithm: sha256WithRSAEncryption
33:be:da:3a:73:11:86:5b:2b:e4:86:c9:a7:e7:a5:2d:a4:88:
a4:17:1b:1a:9c:de:5d:ee:36:cb:73:f8:4d:38:d7:89:a5:2c:
e4:99:f9:19:87:20:6f:8e:f4:b4:fa:ba:29:7f:76:8e:5b:eb:
44:7d:09:ac:ea:21:4d:51:9b:89:54:97:6c:94:14:4f:c7:91:
13:0e:b4:44:09:4b:65:69:7e:12:15:3d:a2:38:47:6e:54:02:
44:ea:16:ef:62:7c:28:00:3e:97:2e:16:e1:86:f9:6d:83:21:
29:0b:5f:bb:b6:c1:f1:ff:26:65:5e:4f:5e:cc:09:2f:59:3c:
3b:4d:fa:30:cb:c4:cc:d8:12:75:66:26:f4:5f:1d:8e:92:e0:
33:bd:ed:8a:de:5c:82:2c:be:10:2d:b9:ec:09:01:84:8b:8a:
93:83:62:11:05:e6:42:f2:19:17:74:99:ba:c2:f2:48:ca:3a:
1a:96:50:1f:86:d1:fd:03:f5:9c:72:c1:c4:ff:a4:05:56:af:
c5:61:49:4e:43:1c:0b:f8:6e:33:23:e3:e4:61:e1:58:5f:03:
92:db:8e:e0:8d:ac:bc:db:48:20:e9:bd:90:c2:76:ca:11:e5:
74:fe:a7:d0:a2:b3:27:8c:99:a3:c7:9a:80:e8:e2:fb:9f:84:
c8:35:e5:a2
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUDC1y4QoN8JAEDw/5IYFYLk41udMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIxOTU3NDVaFw0yNTA4MTEyMDAyNDVaMDMxMTAvBgNV
BAMTKDQ0NjAzQzkwQjZFMDgwNzVEMzc1MTM4QTUzOTRGRkVFOThEMzk0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGeMWc0pK4kAz7oyVKgcrR0kHz
m5rc191MKeJtGDxpir48v2ZmOA1vQsntBjSpbuquONDbV12Ag9pP1tvxcAGAkGaX
PGBOGtAtHpN1XJG27//5LmPG5dC3vzp/rxD1obAq2aijhWhAEaGS9EeDoi1QWEtY
2vfxiwPb4EOYG7myF+xWJa5HgtDK6sVwMtEHF+/Bt4qtPWMZGiJ/03QayfJGR3W8
Z9hzFRf+tt0Xul7g4JsatGmZhnkgVc0SMhOgSwTaFzSygtKgavP/rryl1xrSzHnP
sVblXg9Wm5ETMyKcm1d3LrFt210dpeSZPedEuWkJis2srcK6N/vXCBk6QUl/AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQURGA8kLbggHXTdROKU5T/7pjTlNowHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzMzNjMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQEsQgAMA0GCSqGSIb3DQEBCwUAA4IBAQAzvto6cxGGWyvkhsmn
56UtpIikFxsanN5d7jbLc/hNONeJpSzkmfkZhyBvjvS0+ropf3aOW+tEfQms6iFN
UZuJVJdslBRPx5ETDrRECUtlaX4SFT2iOEduVAJE6hbvYnwoAD6XLhbhhvltgyEp
C1+7tsHx/yZlXk9ezAkvWTw7Tfowy8TM2BJ1Zib0Xx2OkuAzve2K3lyCLL4QLbns
CQGEi4qTg2IRBeZC8hkXdJm6wvJIyjoallAfhtH9A/WccsHE/6QFVq/FYUlOQxwL
+G4zI+PkYeFYXwOS247gjay820gg6b2QwnbKEeV0/qfQorMnjJmjx5qA6OL7n4TI
NeWi
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:08 2025 by rpki-client