Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
File: 3137372e382e31362e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: +SUzPeXZNx20d5vnZdAr1EAm2/lIuIjjo7pgMz2l96M=
Subject key identifier: 7E:C8:4D:E2:EC:7D:1B:DC:BE:D6:44:31:3B:9D:13:E6:6B:BD:3B:33
Certificate issuer: /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial: 60CB0A7844F2D57F61676DA1E0DF77A29169FC82
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
Signing time: Fri 10 Jan 2025 19:58:13 +0000
ROA not before: Fri 10 Jan 2025 19:53:13 +0000
ROA not after: Fri 09 Jan 2026 19:58:13 +0000
asID: 28360
IP address blocks: 177.8.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cb:0a:78:44:f2:d5:7f:61:67:6d:a1:e0:df:77:a2:91:69:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Validity
Not Before: Jan 10 19:53:13 2025 GMT
Not After : Jan 9 19:58:13 2026 GMT
Subject: CN=7EC84DE2EC7D1BDCBED644313B9D13E66BBD3B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:1b:43:a7:19:46:9f:91:ce:8c:6d:5f:85:
6e:dd:31:1f:39:e7:61:b4:6c:3a:94:16:1b:9d:0a:
19:84:e4:52:dd:f7:95:86:d3:11:ef:e8:33:f4:2b:
b5:72:91:dd:78:73:4e:b2:b9:51:82:01:e9:0f:7b:
ac:e1:ca:e9:0b:de:31:1c:4e:2a:d5:be:1e:a7:fb:
e6:96:f7:3e:73:22:0d:08:21:1c:54:4a:0c:e8:22:
16:74:ef:1e:9b:ee:2f:bb:a0:28:4d:3f:71:dc:10:
ce:3f:c0:63:76:43:17:57:2a:11:17:bd:bf:69:c4:
73:d4:16:9c:d9:1e:d0:74:1f:96:be:70:f1:b3:62:
d4:e0:ad:c0:bb:91:bc:4f:7c:47:a4:a7:3d:4d:f0:
7c:26:49:2a:29:b2:bd:c1:38:e0:73:56:79:a4:2a:
2c:ae:3d:c9:47:85:52:41:1d:fc:0b:6b:77:1f:d7:
57:6f:12:d0:a2:08:92:78:5c:eb:68:5b:84:ba:76:
63:2a:4e:81:81:e9:12:9b:25:52:eb:a4:17:97:c8:
c6:d2:8c:93:78:da:99:82:bd:63:40:d7:3b:0d:fa:
2e:c4:aa:9e:5e:e7:e1:75:9f:67:1f:ab:33:93:58:
88:8d:90:0f:26:24:dd:c6:e1:8d:e2:32:c8:bb:8a:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:4D:E2:EC:7D:1B:DC:BE:D6:44:31:3B:9D:13:E6:6B:BD:3B:33
X509v3 Authority Key Identifier:
keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:8b:1a:24:d6:e6:ef:64:65:38:f2:5f:2b:94:c2:34:ba:90:
13:d1:71:6c:fe:14:ac:1f:4c:e9:ab:9d:37:d0:5c:ca:40:c4:
c6:05:26:7d:62:5f:ca:f6:1c:80:58:27:db:43:75:cb:78:5e:
39:f9:0c:a2:98:fc:4e:1e:0e:ab:b9:8f:25:a7:df:76:80:60:
4c:19:7d:01:05:3c:78:12:5c:b2:5d:7a:70:7e:13:7d:03:21:
6f:db:56:2d:86:70:32:01:08:01:51:03:96:0f:81:48:15:e4:
8f:f7:57:8f:c5:be:e9:01:f9:5c:06:ad:4b:54:e6:69:a9:82:
eb:d3:ad:10:ea:ea:ca:fb:db:88:6d:7c:2d:43:53:36:a7:f6:
ea:06:ea:95:6c:98:be:6c:c9:dc:cf:02:dc:fc:4d:9a:4b:e9:
59:84:21:24:e9:c2:2a:06:4a:a2:9e:c7:7b:11:93:72:ae:b6:
6f:1e:c4:18:9b:15:df:48:59:80:fd:9d:48:ea:79:16:7f:71:
f0:1a:68:ec:3f:4f:97:df:28:ef:ca:0b:a2:84:f8:f3:a9:68:
4f:95:e0:64:7a:27:34:ae:52:fa:8b:ea:bd:a6:42:c6:35:1d:
bf:20:49:f2:e3:9e:48:1c:0c:8c:d4:50:02:dc:85:69:70:52:
a1:b8:1a:7e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUYMsKeETy1X9hZ22h4N93opFp/IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExRTAzQzkxNjlERUZGNjYyRjZCRTFEOUVCRjQzMEJG
QTlFMDQ1MzAeFw0yNTAxMTAxOTUzMTNaFw0yNjAxMDkxOTU4MTNaMDMxMTAvBgNV
BAMTKDdFQzg0REUyRUM3RDFCRENCRUQ2NDQzMTNCOUQxM0U2NkJCRDNCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RhtDpxlGn5HOjG1fhW7dMR85
52G0bDqUFhudChmE5FLd95WG0xHv6DP0K7Vykd14c06yuVGCAekPe6zhyukL3jEc
TirVvh6n++aW9z5zIg0IIRxUSgzoIhZ07x6b7i+7oChNP3HcEM4/wGN2QxdXKhEX
vb9pxHPUFpzZHtB0H5a+cPGzYtTgrcC7kbxPfEekpz1N8HwmSSopsr3BOOBzVnmk
KiyuPclHhVJBHfwLa3cf11dvEtCiCJJ4XOtoW4S6dmMqToGB6RKbJVLrpBeXyMbS
jJN42pmCvWNA1zsN+i7Eqp5e5+F1n2cfqzOTWIiNkA8mJN3G4Y3iMsi7iqKLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUfshN4ux9G9y+1kQxO50T5mu9OzMwHwYDVR0j
BBgwFoAUAR4DyRad7/Zi9r4dnr9DC/qeBFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wMTFFMDNDOTE2OURFRkY2NjJGNkJFMUQ5RUJGNDMwQkZBOUUwNDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxMUUwM0M5MTY5REVGRjY2
MkY2QkUxRDlFQkY0MzBCRkE5RTA0NTMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzEzNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCBAwDQYJKoZIhvcNAQELBQADggEBAB6LGiTW5u9kZTjy
XyuUwjS6kBPRcWz+FKwfTOmrnTfQXMpAxMYFJn1iX8r2HIBYJ9tDdct4Xjn5DKKY
/E4eDqu5jyWn33aAYEwZfQEFPHgSXLJdenB+E30DIW/bVi2GcDIBCAFRA5YPgUgV
5I/3V4/FvukB+VwGrUtU5mmpguvTrRDq6sr724htfC1DUzan9uoG6pVsmL5sydzP
Atz8TZpL6VmEISTpwioGSqKex3sRk3Kutm8exBibFd9IWYD9nUjqeRZ/cfAaaOw/
T5ffKO/KC6KE+POpaE+V4GR6JzSuUvqL6r2mQsY1Hb8gSfLjnkgcDIzUUALchWlw
UqG4Gn4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:21 2025 by rpki-client