Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa
File: 3138362e3235312e392e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier: rZ9UiB45/rgREGo1nfflE2RtsgtWiYZgyCRlvykjfik=
Subject key identifier: 17:E9:60:B1:6A:5A:5F:12:FE:CD:AA:2E:48:61:8F:04:22:18:6F:5E
Certificate issuer: /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial: 125AE1559BE324B5B4129F9F0E206E8EC06C0E4B
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access: rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa
Signing time: Mon 13 Jan 2025 14:17:22 +0000
ROA not before: Mon 13 Jan 2025 14:12:22 +0000
ROA not after: Mon 12 Jan 2026 14:17:22 +0000
asID: 262988
IP address blocks: 186.251.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5a:e1:55:9b:e3:24:b5:b4:12:9f:9f:0e:20:6e:8e:c0:6c:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Validity
Not Before: Jan 13 14:12:22 2025 GMT
Not After : Jan 12 14:17:22 2026 GMT
Subject: CN=17E960B16A5A5F12FECDAA2E48618F0422186F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:d9:b0:04:0d:0c:22:b1:23:3c:07:d6:8a:
7c:cb:58:fb:6f:63:06:8e:7e:ad:f1:f6:96:76:58:
e1:d0:ab:c8:45:35:3b:94:43:3f:57:3f:d5:79:48:
64:00:14:4c:91:0d:d9:40:d1:07:37:b7:87:13:1a:
c9:5c:e7:e1:20:72:73:48:1c:b3:aa:48:e6:57:23:
93:a0:43:64:03:04:a8:11:37:9c:b4:c9:eb:4b:5a:
df:65:e6:56:41:57:73:2e:12:a6:62:cd:4d:1c:9a:
97:55:cf:8d:67:46:b9:79:68:82:27:f6:a3:86:6f:
4a:e8:13:59:61:e8:df:51:ea:53:2e:3f:e1:ce:82:
f9:f0:90:bd:a5:e1:db:22:7a:83:ae:3f:c3:e6:64:
e9:9f:11:66:c5:c1:93:71:81:37:b7:ad:77:c0:ca:
09:3c:c6:d4:89:be:1f:e6:04:06:88:ef:8d:de:86:
fe:e4:af:7e:ec:3e:ef:d8:ae:e9:83:7d:40:38:49:
b4:6b:5e:f0:eb:1f:17:5e:e6:f7:5b:9a:7a:7e:d4:
eb:e8:7c:4c:fa:bf:29:4a:1d:34:be:79:5b:ca:db:
15:1c:62:d8:68:cc:b5:52:12:d8:11:a7:43:03:72:
2b:80:cd:87:35:46:df:11:74:a7:83:68:23:bf:e3:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:60:B1:6A:5A:5F:12:FE:CD:AA:2E:48:61:8F:04:22:18:6F:5E
X509v3 Authority Key Identifier:
keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.251.9.0/24
Signature Algorithm: sha256WithRSAEncryption
02:09:03:ec:58:59:47:9f:da:be:b1:05:7d:9f:5c:4b:34:e9:
d6:3b:c5:d2:df:f9:53:1d:c3:8f:02:12:f1:3e:d0:b0:2c:dd:
96:0c:e1:97:3c:f2:f3:8c:3e:e8:66:39:7b:4b:d4:cc:71:d0:
6a:9c:2c:cd:8d:5b:cc:8c:84:09:17:d3:2c:4d:0f:29:99:dd:
bf:8b:21:a3:aa:fc:54:ff:de:cf:31:81:dd:5e:a0:3d:14:c5:
ae:e5:84:a0:e3:56:df:1d:43:c6:8c:b9:ab:23:59:d8:d8:1c:
ef:00:ee:d0:64:22:32:9c:a2:bb:33:f9:7c:6c:12:dc:43:1e:
3b:15:24:d2:73:1f:7c:a1:7d:3a:e6:80:25:e5:14:3f:a9:bc:
2a:82:0b:87:a9:19:6b:6b:23:fd:31:d9:b7:35:86:b2:6b:93:
50:c0:ff:fd:37:28:8e:cc:01:9b:49:9c:82:00:77:a3:64:c4:
af:07:9b:7c:97:84:c1:5e:41:20:06:3e:4c:fc:d2:9f:a5:e9:
5b:a1:55:ae:fd:88:d8:46:04:b2:59:1f:8d:42:f2:51:43:e3:
52:33:37:87:cf:17:7a:e2:3f:30:fe:32:3a:69:f5:e7:90:32:
d0:75:a7:ac:67:3d:11:6e:e5:c2:77:07:3c:6a:4f:60:93:79:
93:33:10:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUElrhVZvjJLW0Ep+fDiBujsBsDkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyREI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJE
QjM3NkUwMjAeFw0yNTAxMTMxNDEyMjJaFw0yNjAxMTIxNDE3MjJaMDMxMTAvBgNV
BAMTKDE3RTk2MEIxNkE1QTVGMTJGRUNEQUEyRTQ4NjE4RjA0MjIxODZGNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpNmwBA0MIrEjPAfWinzLWPtv
YwaOfq3x9pZ2WOHQq8hFNTuUQz9XP9V5SGQAFEyRDdlA0Qc3t4cTGslc5+EgcnNI
HLOqSOZXI5OgQ2QDBKgRN5y0yetLWt9l5lZBV3MuEqZizU0cmpdVz41nRrl5aIIn
9qOGb0roE1lh6N9R6lMuP+HOgvnwkL2l4dsieoOuP8PmZOmfEWbFwZNxgTe3rXfA
ygk8xtSJvh/mBAaI743ehv7kr37sPu/YrumDfUA4SbRrXvDrHxde5vdbmnp+1Ovo
fEz6vylKHTS+eVvK2xUcYthozLVSEtgRp0MDciuAzYc1Rt8RdKeDaCO/44mbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUF+lgsWpaXxL+zaouSGGPBCIYb14wHwYDVR0j
BBgwFoAUJS23mXq5/B67j38wt1WDAts3bgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yNTJEQjc5OTdBQjlGQzFFQkI4RjdGMzBCNzU1ODMwMkRCMzc2RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MkRCNzk5N0FCOUZDMUVC
QjhGN0YzMEI3NTU4MzAyREIzNzZFMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzODM2MmUzMjM1MzEyZTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuvsJMA0GCSqGSIb3DQEBCwUAA4IBAQACCQPsWFlH
n9q+sQV9n1xLNOnWO8XS3/lTHcOPAhLxPtCwLN2WDOGXPPLzjD7oZjl7S9TMcdBq
nCzNjVvMjIQJF9MsTQ8pmd2/iyGjqvxU/97PMYHdXqA9FMWu5YSg41bfHUPGjLmr
I1nY2BzvAO7QZCIynKK7M/l8bBLcQx47FSTScx98oX065oAl5RQ/qbwqgguHqRlr
ayP9Mdm3NYaya5NQwP/9NyiOzAGbSZyCAHejZMSvB5t8l4TBXkEgBj5M/NKfpelb
oVWu/YjYRgSyWR+NQvJRQ+NSMzeHzxd64j8w/jI6afXnkDLQdaesZz0RbuXCdwc8
ak9gk3mTMxBI
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:08 2025 by rpki-client