Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa
File: 3133382e39372e33322e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier: T/IL62dmIkKn88UDNFKv1uP9HjR8jMJXMadBBmcAqoU=
Subject key identifier: ED:B5:CE:35:2E:5B:B4:29:E8:E8:9C:8A:0D:AF:02:43:CB:A2:B6:15
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 3BB88D77C7B0FF7207B01E91436A69586A0A7727
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:08:14 +0000
ROA not before: Tue 17 Dec 2024 17:03:14 +0000
ROA not after: Tue 16 Dec 2025 17:08:14 +0000
asID: 61900
IP address blocks: 138.97.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b8:8d:77:c7:b0:ff:72:07:b0:1e:91:43:6a:69:58:6a:0a:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:03:14 2024 GMT
Not After : Dec 16 17:08:14 2025 GMT
Subject: CN=EDB5CE352E5BB429E8E89C8A0DAF0243CBA2B615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:e2:9c:8b:bc:2e:eb:7e:9c:10:51:7d:8d:
b4:b9:f1:d7:56:4e:df:9c:45:13:9e:4c:99:8c:f9:
9c:68:d0:78:f4:20:6c:e8:3f:da:20:a4:7d:3e:f7:
23:08:c3:6b:78:de:b9:14:d1:a4:fc:8d:31:f2:82:
7a:3c:e6:93:19:95:f0:5d:43:23:16:dc:93:90:41:
29:37:92:8a:3f:90:5f:4b:79:a1:14:a7:e0:d2:99:
da:00:1f:0d:3e:b8:8b:9e:8f:d0:34:29:b8:0e:3a:
e1:3e:ea:b2:b8:43:83:1b:bc:57:0c:a0:ed:f7:68:
c1:36:51:bc:f6:c7:14:4c:09:de:5f:42:21:f6:34:
11:db:c9:28:2a:43:5d:62:0b:8e:b3:9f:ae:12:cf:
54:06:1a:39:13:26:91:15:80:dc:e9:5d:79:90:d0:
0c:45:c4:80:44:a8:ec:2d:91:67:24:87:d1:fa:39:
5d:1e:e1:c2:8d:ce:71:82:e5:5c:3c:15:cd:14:03:
f0:26:dc:07:80:14:bb:fc:49:82:12:89:64:57:85:
06:3f:05:d5:7e:52:14:fa:35:e0:1e:fb:26:3e:c1:
02:56:00:53:8b:1e:66:82:9d:57:04:2f:56:28:17:
45:52:f8:54:d2:de:c1:29:b1:6f:00:a1:68:1b:28:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:CE:35:2E:5B:B4:29:E8:E8:9C:8A:0D:AF:02:43:CB:A2:B6:15
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.32.0/23
Signature Algorithm: sha256WithRSAEncryption
86:9d:fe:bf:08:3d:de:af:56:20:3a:e6:59:50:a0:29:06:be:
b6:f4:7a:73:18:01:0f:8c:7f:4f:ed:f0:86:66:f3:9a:3d:28:
ec:4d:34:c2:8b:ea:fa:49:5a:55:79:79:bf:4f:1b:f6:8f:37:
29:50:59:0a:4c:f7:3c:1e:7e:ae:5f:41:40:2f:6d:76:d8:31:
10:5d:31:1a:aa:7a:15:ac:49:d1:7c:9a:50:14:d3:77:7b:74:
bc:96:45:7e:7e:41:00:9a:aa:09:17:2c:35:17:aa:f9:e0:12:
61:66:f2:bf:4e:1d:00:f2:a5:40:54:a5:26:88:19:5d:80:4f:
06:36:f7:22:02:d7:0d:84:3f:6c:47:f0:8a:c3:f3:2b:02:a2:
2f:9b:d4:ae:80:ce:b0:37:69:b5:54:79:f5:7d:9a:96:d2:ac:
df:bb:20:73:2b:00:da:c2:aa:d9:c5:f2:18:2c:49:4a:e5:71:
8e:6f:e5:26:3c:ae:76:2a:53:fd:d9:23:6e:9f:68:ba:a3:51:
43:43:16:25:e7:40:6b:15:21:81:2c:b0:8f:be:6c:74:f1:97:
4f:a9:0c:03:5f:38:70:72:66:84:a9:c9:4c:35:45:43:38:4c:
44:4b:a2:f7:2f:31:e5:77:b8:b6:8e:c0:2a:32:1d:ce:6a:d9:
69:69:4f:bf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUO7iNd8ew/3IHsB6RQ2ppWGoKdycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAzMjM2NUM3ODI0NjVEQjYyMjgzOTQ1REM5RTcyRjZC
QUE2QkYwQTAeFw0yNDEyMTcxNzAzMTRaFw0yNTEyMTYxNzA4MTRaMDMxMTAvBgNV
BAMTKEVEQjVDRTM1MkU1QkI0MjlFOEU4OUM4QTBEQUYwMjQzQ0JBMkI2MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMuKci7wu636cEFF9jbS58ddW
Tt+cRROeTJmM+Zxo0Hj0IGzoP9ogpH0+9yMIw2t43rkU0aT8jTHygno85pMZlfBd
QyMW3JOQQSk3koo/kF9LeaEUp+DSmdoAHw0+uIuej9A0KbgOOuE+6rK4Q4MbvFcM
oO33aME2Ubz2xxRMCd5fQiH2NBHbySgqQ11iC46zn64Sz1QGGjkTJpEVgNzpXXmQ
0AxFxIBEqOwtkWckh9H6OV0e4cKNznGC5Vw8Fc0UA/Am3AeAFLv8SYISiWRXhQY/
BdV+UhT6NeAe+yY+wQJWAFOLHmaCnVcEL1YoF0VS+FTS3sEpsW8AoWgbKD61AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7bXONS5btCno6JyKDa8CQ8uithUwHwYDVR0j
BBgwFoAUcDI2XHgkZdtiKDlF3J5y9rqmvwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MDMyMzY1Qzc4MjQ2NURCNjIyODM5NDVEQzlFNzJGNkJBQTZCRjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMzIzNjVDNzgyNDY1REI2
MjI4Mzk0NURDOUU3MkY2QkFBNkJGMEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzMzM4MmUzOTM3MmUzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYphIDANBgkqhkiG9w0BAQsFAAOCAQEAhp3+vwg93q9W
IDrmWVCgKQa+tvR6cxgBD4x/T+3whmbzmj0o7E00wovq+klaVXl5v08b9o83KVBZ
Ckz3PB5+rl9BQC9tdtgxEF0xGqp6FaxJ0XyaUBTTd3t0vJZFfn5BAJqqCRcsNReq
+eASYWbyv04dAPKlQFSlJogZXYBPBjb3IgLXDYQ/bEfwisPzKwKiL5vUroDOsDdp
tVR59X2altKs37sgcysA2sKq2cXyGCxJSuVxjm/lJjyudipT/dkjbp9ouqNRQ0MW
JedAaxUhgSywj75sdPGXT6kMA184cHJmhKnJTDVFQzhMREui9y8x5Xe4to7AKjId
zmrZaWlPvw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:32 2025 by rpki-client