Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa
File: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (raw, json)
Hash identifier: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=
Subject key identifier: DB:55:FD:AF:E6:DD:D1:23:A2:DE:5B:43:C6:E2:06:C5:8B:7F:D4:6D
Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial: 165272203A8BA9D32838C4C5E92E5213AF01836A
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa
Signing time: Thu 07 Nov 2024 14:01:13 +0000
ROA not before: Thu 07 Nov 2024 13:56:13 +0000
ROA not after: Thu 06 Nov 2025 14:01:13 +0000
asID: 263528
IP address blocks: 170.254.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:52:72:20:3a:8b:a9:d3:28:38:c4:c5:e9:2e:52:13:af:01:83:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Validity
Not Before: Nov 7 13:56:13 2024 GMT
Not After : Nov 6 14:01:13 2025 GMT
Subject: CN=DB55FDAFE6DDD123A2DE5B43C6E206C58B7FD46D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:db:02:31:ec:7d:d2:2a:f2:0b:45:ca:d7:
ef:e4:05:27:50:66:2b:3d:7a:73:76:9a:a9:71:3f:
49:67:86:ad:2e:76:e6:97:1a:f5:96:c3:42:f3:7b:
f8:52:54:0b:e9:4b:60:5b:1c:d8:cd:8d:d7:3c:0d:
e3:34:ea:f0:b4:6a:f4:c6:61:33:31:17:dd:6a:0b:
f6:4a:c6:f8:49:67:25:1b:44:5c:69:b1:c9:13:5a:
a0:06:28:47:2d:df:f0:c4:db:d0:ee:82:8e:48:ef:
09:c2:48:38:77:d4:6b:db:67:4a:10:04:32:d6:a3:
a6:90:6c:ca:e1:f4:c8:1f:50:13:5e:2d:02:0f:15:
51:cc:70:54:6c:ca:73:bf:fd:14:71:57:36:01:09:
03:6a:c1:42:18:f1:55:7a:28:e1:50:84:80:b2:eb:
08:18:e8:62:da:a3:17:2d:c7:72:0f:fd:f5:00:1a:
ac:a6:e6:17:f1:34:13:6c:26:2d:20:31:24:08:6e:
be:c2:e5:bc:c4:56:09:99:97:0c:62:8b:77:b1:d9:
70:b3:d4:1d:bb:0a:f1:07:75:36:f6:7f:e5:1c:2d:
36:bf:75:18:10:e8:88:63:e0:db:b5:b6:c5:88:18:
a2:97:9d:38:c0:b7:1d:24:bc:65:4d:34:b3:fd:b9:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:FD:AF:E6:DD:D1:23:A2:DE:5B:43:C6:E2:06:C5:8B:7F:D4:6D
X509v3 Authority Key Identifier:
keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:83:73:2c:63:bd:26:ad:e7:fd:3d:2e:04:f3:d7:bd:48:85:
5b:ed:dc:69:67:0c:46:98:f7:86:c1:44:3a:cb:df:e3:5a:f3:
70:83:b0:1c:8e:67:fc:8d:07:5a:4c:80:19:41:63:2d:31:62:
6c:de:65:22:0a:7a:7f:a0:93:b7:1a:6b:f0:fb:52:70:85:74:
6c:0c:a6:9a:11:8f:59:7f:9f:c8:74:8f:26:ae:89:88:d2:37:
01:37:3b:9b:d5:f5:4f:41:2c:cc:ad:52:fb:9a:c0:bb:65:06:
6a:96:4d:82:37:03:1f:34:e6:16:f1:f3:0a:80:ce:36:d4:8a:
1c:d8:1e:54:b3:39:37:fa:46:b6:e6:f2:03:62:da:05:92:13:
76:1c:68:83:f8:02:d8:69:91:dc:6d:f5:3c:15:96:dc:1b:d7:
89:70:c9:ff:0d:18:cc:64:70:d7:1f:b9:83:96:b5:be:fd:1d:
d8:e8:01:30:24:ab:a1:20:ab:bd:58:bd:b4:61:18:39:61:42:
85:cb:7d:5a:b2:31:f8:2c:a8:82:75:5a:fc:1d:c9:29:c6:7e:
26:09:d6:0a:27:2a:78:76:ba:22:46:a7:9d:11:fc:30:4e:3b:
cb:1e:e9:1a:b7:a1:b6:d9:83:b4:22:6f:a5:a1:c6:8e:8b:5b:
b7:1a:df:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFlJyIDqLqdMoOMTF6S5SE68Bg2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF
REJFNzc4MDAeFw0yNDExMDcxMzU2MTNaFw0yNTExMDYxNDAxMTNaMDMxMTAvBgNV
BAMTKERCNTVGREFGRTZEREQxMjNBMkRFNUI0M0M2RTIwNkM1OEI3RkQ0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUNsCMex90iryC0XK1+/kBSdQ
Zis9enN2mqlxP0lnhq0uduaXGvWWw0Lze/hSVAvpS2BbHNjNjdc8DeM06vC0avTG
YTMxF91qC/ZKxvhJZyUbRFxpsckTWqAGKEct3/DE29Dugo5I7wnCSDh31GvbZ0oQ
BDLWo6aQbMrh9MgfUBNeLQIPFVHMcFRsynO//RRxVzYBCQNqwUIY8VV6KOFQhICy
6wgY6GLaoxctx3IP/fUAGqym5hfxNBNsJi0gMSQIbr7C5bzEVgmZlwxii3ex2XCz
1B27CvEHdTb2f+UcLTa/dRgQ6Ihj4Nu1tsWIGKKXnTjAtx0kvGVNNLP9ufTZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU21X9r+bd0SOi3ltDxuIGxYt/1G0wHwYDVR0j
BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5
RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF
NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtaVpuUTVHdUZCVmh2b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzAv
MzEzNzMwMmUzMjM1MzQyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqv4EMA0GCSqGSIb3DQEBCwUAA4IBAQBsg3MsY70m
ref9PS4E89e9SIVb7dxpZwxGmPeGwUQ6y9/jWvNwg7Acjmf8jQdaTIAZQWMtMWJs
3mUiCnp/oJO3Gmvw+1JwhXRsDKaaEY9Zf5/IdI8mromI0jcBNzub1fVPQSzMrVL7
msC7ZQZqlk2CNwMfNOYW8fMKgM421Ioc2B5Uszk3+ka25vIDYtoFkhN2HGiD+ALY
aZHcbfU8FZbcG9eJcMn/DRjMZHDXH7mDlrW+/R3Y6AEwJKuhIKu9WL20YRg5YUKF
y31asjH4LKiCdVr8Hckpxn4mCdYKJyp4droiRqedEfwwTjvLHukat6G22YO0Im+l
ocaOi1u3Gt9/
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:13 2025 by rpki-client