Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier: YgVX0lCChidb8F1/4KH+QitMUUC5QZGQtT8NCEBdZKw=
Subject key identifier: CE:B0:B5:29:08:2F:C7:B2:89:63:A1:83:99:2F:37:7E:0A:F1:37:B1
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 193C574AD54BC1DD6D2921040B4BE027BE7FB128
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:20:01 +0000
ROA not before: Fri 10 Jan 2025 14:15:01 +0000
ROA not after: Fri 09 Jan 2026 14:20:01 +0000
asID: 28202
IP address blocks: 191.240.0.0/17 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3c:57:4a:d5:4b:c1:dd:6d:29:21:04:0b:4b:e0:27:be:7f:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:15:01 2025 GMT
Not After : Jan 9 14:20:01 2026 GMT
Subject: CN=CEB0B529082FC7B28963A183992F377E0AF137B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:36:4e:70:fb:04:8f:d4:1d:46:8a:37:13:
8e:c4:73:32:72:26:06:9d:8d:77:8d:25:24:a7:a0:
de:87:ce:f0:b2:4a:6e:0a:d3:6b:c5:64:72:8b:46:
03:70:b8:a8:c1:24:7b:0d:d4:2d:8e:06:f3:c4:c7:
04:c5:9a:d4:9d:c6:5d:50:c0:dd:7e:c2:6b:49:86:
24:e9:ca:d3:a0:8b:9f:2b:37:df:0c:5c:cc:5a:c9:
a1:5f:8f:1e:07:19:84:9c:d5:65:04:91:a4:5a:70:
10:f2:c2:58:9b:23:57:08:22:06:c8:d1:da:2d:18:
78:25:90:75:3c:f8:86:11:67:c2:1d:6f:13:7b:84:
97:6d:a3:7e:be:6c:c7:ff:e5:89:71:70:35:53:84:
01:a0:ba:1d:1a:22:b8:6c:9a:01:75:88:45:3c:af:
ef:40:5b:d2:70:27:fa:d0:a9:63:4f:7e:80:3e:ce:
da:6a:02:fd:dd:2a:4a:a4:4b:cf:6a:fb:a4:39:85:
38:f8:11:67:3d:d8:50:89:6b:0c:cf:64:04:d1:7d:
df:77:f0:93:c6:b1:4c:d0:2a:1e:48:7b:eb:d4:5a:
6e:67:be:f2:8c:e7:1b:48:bb:80:1d:27:70:84:a6:
5e:95:15:ee:4c:dd:eb:9c:22:da:49:26:0a:4c:92:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:B5:29:08:2F:C7:B2:89:63:A1:83:99:2F:37:7E:0A:F1:37:B1
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.0.0/17
Signature Algorithm: sha256WithRSAEncryption
70:c0:cf:99:9b:44:9c:73:6c:86:4f:90:05:e8:bf:93:c5:98:
b3:26:aa:de:43:0d:a9:0c:b4:1a:b4:52:7c:2a:28:02:d2:e0:
20:05:99:8d:8f:ae:27:b3:71:87:cf:96:d7:67:f5:06:8a:27:
72:69:51:36:a5:3b:83:a6:0d:97:ac:d8:ba:c8:b5:0f:41:15:
3c:dd:ba:a8:f1:fb:06:36:e0:7b:91:b0:1d:19:c2:b4:0d:8b:
a3:34:fd:9c:38:ab:99:98:ed:1d:e5:24:5a:84:cd:33:58:e3:
01:af:94:2c:2f:dd:a0:37:a1:6e:40:75:62:dc:77:5c:50:12:
8b:0b:20:9e:70:f1:7f:d0:3b:f8:1f:ad:53:85:95:4a:f7:5c:
4f:4f:40:1e:fa:40:42:18:63:5f:4f:75:ea:c1:00:07:bf:30:
42:43:cf:57:e5:3d:f1:13:61:c1:c2:1e:7f:42:54:24:71:77:
e9:99:c0:0e:c9:18:3a:1a:81:20:45:2c:90:d7:bb:cc:e6:e4:
86:e8:27:3b:ed:cd:16:2b:bf:2d:7c:d8:2b:07:aa:d1:03:8e:
2b:98:cc:15:54:60:91:65:25:ea:bb:a7:20:10:53:09:73:1c:
ce:ef:3c:3e:41:72:17:6b:8f:b2:d8:35:bd:16:c6:a4:0f:48:
1b:62:67:2b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGTxXStVLwd1tKSEEC0vgJ75/sSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE1MDFaFw0yNjAxMDkxNDIwMDFaMDMxMTAvBgNV
BAMTKENFQjBCNTI5MDgyRkM3QjI4OTYzQTE4Mzk5MkYzNzdFMEFGMTM3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxDZOcPsEj9QdRoo3E47EczJy
JgadjXeNJSSnoN6HzvCySm4K02vFZHKLRgNwuKjBJHsN1C2OBvPExwTFmtSdxl1Q
wN1+wmtJhiTpytOgi58rN98MXMxayaFfjx4HGYSc1WUEkaRacBDywlibI1cIIgbI
0dotGHglkHU8+IYRZ8IdbxN7hJdto36+bMf/5YlxcDVThAGguh0aIrhsmgF1iEU8
r+9AW9JwJ/rQqWNPfoA+ztpqAv3dKkqkS89q+6Q5hTj4EWc92FCJawzPZATRfd93
8JPGsUzQKh5Ie+vUWm5nvvKM5xtIu4AdJ3CEpl6VFe5M3eucItpJJgpMkhkBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzrC1KQgvx7KJY6GDmS83fgrxN7EwHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzEzOTMxMmUzMjM0MzAyZTMwMmUzMDJmMzEzNzJkMzIzNTIwM2QzZTIwMzIzODMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEB7/wADANBgkqhkiG9w0BAQsFAAOCAQEAcMDPmZtEnHNs
hk+QBei/k8WYsyaq3kMNqQy0GrRSfCooAtLgIAWZjY+uJ7Nxh8+W12f1BooncmlR
NqU7g6YNl6zYusi1D0EVPN26qPH7Bjbge5GwHRnCtA2LozT9nDirmZjtHeUkWoTN
M1jjAa+ULC/doDehbkB1Ytx3XFASiwsgnnDxf9A7+B+tU4WVSvdcT09AHvpAQhhj
X0916sEAB78wQkPPV+U98RNhwcIef0JUJHF36ZnADskYOhqBIEUskNe7zObkhugn
O+3NFiu/LXzYKweq0QOOK5jMFVRgkWUl6runIBBTCXMczu88PkFyF2uPstg1vRbG
pA9IG2JnKw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:06 2025 by rpki-client