Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138392e39312e302e302f31392d3235203d3e203238323032.roa
File: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier: lSUkQ1XUWeJttb2BySChmmVNskbN1hdbIq1eHIDahA4=
Subject key identifier: 2C:A8:2C:EA:6B:BF:5D:ED:F8:9B:82:DD:72:D3:12:45:52:A0:88:E0
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 32EC4EAEC9C0CE37EA2D8D5477086A9CC080638C
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138392e39312e302e302f31392d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:46 +0000
ROA not before: Fri 10 Jan 2025 14:14:46 +0000
ROA not after: Fri 09 Jan 2026 14:19:46 +0000
asID: 28202
IP address blocks: 189.91.0.0/19 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ec:4e:ae:c9:c0:ce:37:ea:2d:8d:54:77:08:6a:9c:c0:80:63:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:46 2025 GMT
Not After : Jan 9 14:19:46 2026 GMT
Subject: CN=2CA82CEA6BBF5DEDF89B82DD72D3124552A088E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:56:c1:1f:9a:ed:62:2d:4f:e8:1b:7c:e2:
19:6f:b1:09:93:8d:1a:4a:62:20:63:24:f0:1b:2b:
64:f3:00:a0:3c:63:a6:6f:1c:2f:c9:56:42:35:d7:
15:fd:e0:bb:b5:1f:4e:6d:11:b9:35:36:8a:6b:c2:
72:37:29:69:9e:38:9c:0b:29:db:a2:6b:ff:cb:64:
d8:b4:ec:8f:62:c0:96:48:ea:a7:ca:9d:c9:a3:73:
fb:74:7c:6e:07:2e:a7:cd:76:e0:d1:fd:a8:34:7b:
d9:25:7d:0b:71:8a:c7:5f:b1:03:93:2c:1a:0f:3d:
2a:cb:b9:98:df:ae:fc:1d:c0:4f:66:f7:ed:1c:91:
67:ee:20:27:ff:19:69:ca:2b:c1:41:65:ae:20:bc:
af:c7:78:cd:85:ee:8a:d8:1e:ce:94:21:2a:5d:2a:
fe:7e:98:6b:73:9d:4a:55:5b:16:e2:62:83:4f:b9:
46:10:00:67:85:0e:b9:f4:16:96:26:39:13:3c:dd:
6b:3f:7e:a8:bc:97:2a:2d:75:01:3c:b4:56:05:5a:
f1:ad:5e:d0:38:a5:7d:5a:d8:83:1d:1a:b8:1a:ec:
04:24:97:fe:79:22:5a:e9:fb:f2:3d:2c:25:83:e9:
9b:5c:d3:b9:2d:d9:ad:b1:2a:19:72:48:f2:8e:d5:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:2C:EA:6B:BF:5D:ED:F8:9B:82:DD:72:D3:12:45:52:A0:88:E0
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138392e39312e302e302f31392d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.91.0.0/19
Signature Algorithm: sha256WithRSAEncryption
11:64:b5:45:1e:b3:02:70:d9:d5:69:69:d9:53:44:3c:f5:f0:
0b:36:3e:eb:3d:27:99:e9:d6:39:c6:d0:df:09:d3:46:d4:4a:
7e:59:51:07:15:94:6c:cd:ec:4b:09:97:50:06:01:b7:4a:a1:
91:ac:29:8c:2f:56:c2:42:11:59:42:29:eb:80:51:4a:ba:a4:
74:25:a9:65:36:2d:63:8e:0e:fb:95:66:a7:ac:15:e3:8d:77:
5c:57:80:c2:cc:2c:8e:bf:ab:6f:fa:fb:d1:bc:73:c5:b0:a2:
fd:ca:20:9f:e5:e9:c6:a6:99:69:86:48:0e:20:84:b4:08:56:
bd:72:04:99:67:66:83:ab:5c:72:20:77:74:da:81:19:c0:1a:
f0:23:ca:05:4c:ea:6f:6d:94:7f:8d:b8:88:42:6b:d0:67:d4:
13:4a:d1:38:25:43:c5:33:cc:57:6a:e4:32:9b:7b:88:40:70:
77:a6:a4:3b:0a:2c:19:56:a4:4e:0a:a2:eb:2b:31:36:17:71:
fe:1d:e0:d7:4e:aa:7f:b8:1e:23:27:21:5e:f3:ca:3b:f8:9a:
1c:c8:dc:c1:a8:86:8d:ae:78:2b:77:ac:26:83:f1:1b:2f:f2:
62:57:6f:2e:30:28:2a:2d:2a:41:be:cc:08:a3:fa:44:f3:fb:
b4:78:98:80
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUMuxOrsnAzjfqLY1UdwhqnMCAY4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0NDZaFw0yNjAxMDkxNDE5NDZaMDMxMTAvBgNV
BAMTKDJDQTgyQ0VBNkJCRjVERURGODlCODJERDcyRDMxMjQ1NTJBMDg4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcFbBH5rtYi1P6Bt84hlvsQmT
jRpKYiBjJPAbK2TzAKA8Y6ZvHC/JVkI11xX94Lu1H05tEbk1NoprwnI3KWmeOJwL
Kduia//LZNi07I9iwJZI6qfKncmjc/t0fG4HLqfNduDR/ag0e9klfQtxisdfsQOT
LBoPPSrLuZjfrvwdwE9m9+0ckWfuICf/GWnKK8FBZa4gvK/HeM2F7orYHs6UISpd
Kv5+mGtznUpVWxbiYoNPuUYQAGeFDrn0FpYmORM83Ws/fqi8lyotdQE8tFYFWvGt
XtA4pX1a2IMdGrga7AQkl/55Ilrp+/I9LCWD6Ztc07kt2a2xKhlySPKO1a83AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQULKgs6mu/Xe34m4LdctMSRVKgiOAwHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzEzODM5MmUzOTMxMmUzMDJlMzAyZjMxMzkyZDMyMzUyMDNkM2UyMDMyMzgzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAW9WwAwDQYJKoZIhvcNAQELBQADggEBABFktUUeswJw2dVp
adlTRDz18As2Pus9J5np1jnG0N8J00bUSn5ZUQcVlGzN7EsJl1AGAbdKoZGsKYwv
VsJCEVlCKeuAUUq6pHQlqWU2LWOODvuVZqesFeONd1xXgMLMLI6/q2/6+9G8c8Ww
ov3KIJ/l6cammWmGSA4ghLQIVr1yBJlnZoOrXHIgd3TagRnAGvAjygVM6m9tlH+N
uIhCa9Bn1BNK0TglQ8UzzFdq5DKbe4hAcHempDsKLBlWpE4KousrMTYXcf4d4NdO
qn+4HiMnIV7zyjv4mhzI3MGoho2ueCt3rCaD8Rsv8mJXby4wKCotKkG+zAij+kTz
+7R4mIA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:41 2025 by rpki-client