Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
File: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=
Subject key identifier: 7D:1C:A7:5D:93:B4:23:1D:C8:64:C9:F6:35:63:EC:27:0D:25:89:92
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 67C393DAC89F5D15CBE767950387AF39A3AABB93
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
Signing time: Wed 26 Mar 2025 11:43:46 +0000
ROA not before: Wed 26 Mar 2025 11:38:46 +0000
ROA not after: Wed 25 Mar 2026 11:43:46 +0000
asID: 263424
IP address blocks: 131.108.8.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c3:93:da:c8:9f:5d:15:cb:e7:67:95:03:87:af:39:a3:aa:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Mar 26 11:38:46 2025 GMT
Not After : Mar 25 11:43:46 2026 GMT
Subject: CN=7D1CA75D93B4231DC864C9F63563EC270D258992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:eb:36:4f:18:5b:c6:a0:3c:3f:66:98:59:
b1:ed:22:3c:b7:74:6c:c8:2d:25:b6:bb:65:3a:79:
a4:6b:72:b7:da:ce:d0:bc:63:5d:40:73:37:23:31:
72:82:21:83:90:ea:87:ed:f2:89:7a:71:6d:09:30:
91:35:23:67:79:be:46:b1:1d:b4:30:aa:6a:de:95:
0d:b3:49:bd:dd:5c:27:99:1d:b0:58:f9:e1:45:ae:
62:41:fe:cf:c1:0a:86:90:bf:39:40:e6:0c:02:f0:
31:1b:f7:d9:2e:73:14:f1:e3:a7:d1:29:13:bd:fe:
44:4b:7f:c4:a2:33:02:82:a9:ae:93:66:13:16:22:
d9:46:c2:d5:10:fb:91:95:10:e2:f3:b3:17:e9:e6:
bb:82:68:88:b6:94:9d:f1:64:d6:d1:2a:1d:f7:9b:
71:9d:41:d3:d5:bc:fe:a9:bd:ae:2d:7b:04:8e:64:
a9:04:9d:e0:ad:c4:23:16:85:41:bb:6a:3b:39:b3:
ce:c3:42:77:28:b8:d3:a7:76:ca:55:cc:c4:eb:d8:
0a:09:16:5b:9d:5e:8c:f4:51:a1:b6:18:dc:4d:1e:
ea:55:4b:02:c1:f1:99:93:44:31:82:7d:ce:47:51:
b8:c2:47:1c:33:d8:95:98:c3:29:5d:e8:38:72:e1:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:A7:5D:93:B4:23:1D:C8:64:C9:F6:35:63:EC:27:0D:25:89:92
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.8.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ba:f9:fb:d8:d4:3b:e8:c7:24:1d:1b:e9:5b:1a:b7:85:28:
3f:db:a9:2f:c5:43:2e:f2:83:ee:8f:86:02:49:33:66:cb:4b:
34:89:dc:8a:c9:34:f7:d6:ad:fe:3f:5a:22:ac:97:e9:bb:3f:
a0:71:80:15:53:c3:73:9d:90:4e:99:cb:46:66:bf:c8:52:c6:
c8:da:09:51:81:59:ad:36:ab:09:1f:97:3f:3e:10:a9:00:a1:
37:c1:20:24:96:6c:e6:5a:13:98:e7:3c:bf:7a:74:7c:89:5f:
af:b2:df:73:d1:a0:9a:e0:a0:46:c9:4d:1e:cf:95:fc:7e:d9:
6b:07:90:5f:6f:f5:2c:64:8a:f3:74:09:46:74:69:d8:e6:0a:
3d:c0:ce:49:3a:c6:49:ef:25:08:22:ee:84:57:e7:4f:32:b8:
7f:60:64:10:86:a4:d0:3d:ce:e0:4d:1c:d9:b4:88:25:3f:6e:
ef:68:2f:2e:58:3b:db:18:2b:9d:fd:e4:d1:e8:cb:b4:17:cc:
16:10:2f:c1:81:a1:15:ac:d1:5b:7b:60:4d:78:af:ac:d2:5d:
0a:c9:bd:db:11:25:ac:03:60:c1:b1:6c:6c:67:59:3f:59:3a:
42:4a:0b:24:d8:43:ab:de:04:3d:47:96:8c:44:a9:3a:6c:45:
2b:bb:84:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ8OT2sifXRXL52eVA4evOaOqu5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4
NEVERUNEMjAeFw0yNTAzMjYxMTM4NDZaFw0yNjAzMjUxMTQzNDZaMDMxMTAvBgNV
BAMTKDdEMUNBNzVEOTNCNDIzMURDODY0QzlGNjM1NjNFQzI3MEQyNTg5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7us2TxhbxqA8P2aYWbHtIjy3
dGzILSW2u2U6eaRrcrfaztC8Y11AczcjMXKCIYOQ6oft8ol6cW0JMJE1I2d5vkax
HbQwqmrelQ2zSb3dXCeZHbBY+eFFrmJB/s/BCoaQvzlA5gwC8DEb99kucxTx46fR
KRO9/kRLf8SiMwKCqa6TZhMWItlGwtUQ+5GVEOLzsxfp5ruCaIi2lJ3xZNbRKh33
m3GdQdPVvP6pva4tewSOZKkEneCtxCMWhUG7ajs5s87DQncouNOndspVzMTr2AoJ
FludXoz0UaG2GNxNHupVSwLB8ZmTRDGCfc5HUbjCRxwz2JWYwyld6Dhy4W/5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfRynXZO0Ix3IZMn2NWPsJw0liZIwHwYDVR0j
BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr
TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4
QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv
MzEzMzMxMmUzMTMwMzgyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2wIMA0GCSqGSIb3DQEBCwUAA4IBAQBTuvn72NQ7
6MckHRvpWxq3hSg/26kvxUMu8oPuj4YCSTNmy0s0idyKyTT31q3+P1oirJfpuz+g
cYAVU8NznZBOmctGZr/IUsbI2glRgVmtNqsJH5c/PhCpAKE3wSAklmzmWhOY5zy/
enR8iV+vst9z0aCa4KBGyU0ez5X8ftlrB5Bfb/UsZIrzdAlGdGnY5go9wM5JOsZJ
7yUIIu6EV+dPMrh/YGQQhqTQPc7gTRzZtIglP27vaC8uWDvbGCud/eTR6Mu0F8wW
EC/BgaEVrNFbe2BNeK+s0l0Kyb3bESWsA2DBsWxsZ1k/WTpCSgsk2EOr3gQ9R5aM
RKk6bEUru4Td
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:24:41 2025 by rpki-client