Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa
File: 3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier: d76+tPfyc0q/YpbkkQgS2A5pTviDroFAjCtN6USS51E=
Subject key identifier: 5F:20:DB:E5:20:3A:35:84:13:AF:14:E1:FE:BF:8B:1E:3E:20:DB:77
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 5BB567655811A9F061D2FA4406C6D06B65B0A0EE
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:57 +0000
ROA not before: Fri 23 Feb 2024 23:35:57 +0000
ROA not after: Fri 21 Feb 2025 23:40:57 +0000
asID: 265485
IP address blocks: 168.197.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b5:67:65:58:11:a9:f0:61:d2:fa:44:06:c6:d0:6b:65:b0:a0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:57 2024 GMT
Not After : Feb 21 23:40:57 2025 GMT
Subject: CN=5F20DBE5203A358413AF14E1FEBF8B1E3E20DB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:59:55:df:d0:b2:2a:a3:a4:80:cc:7e:74:
51:ee:55:bd:a9:f0:e9:cc:19:e9:6e:aa:49:3f:f6:
74:e5:3d:b7:6e:3c:68:95:18:74:40:49:4c:03:5f:
28:dc:de:04:61:fa:bf:ac:92:39:e5:2f:57:8b:23:
30:90:33:e6:d5:cf:95:47:da:bd:87:e1:98:19:ea:
02:2f:12:9c:01:94:d8:29:b8:ae:33:14:4c:86:b4:
c5:99:4b:82:70:a3:d1:cf:56:0b:02:96:00:e3:16:
cd:2e:aa:1f:d0:48:21:c0:cb:77:f4:38:cf:64:93:
c9:57:d4:0a:24:83:5c:e5:7f:5b:fc:1f:2e:df:79:
d8:67:33:f7:14:d8:7c:9e:d8:33:c9:49:0d:0f:23:
44:c1:bf:4a:4e:fa:24:2a:2a:6c:6e:7a:e2:18:da:
e0:7a:0b:6e:94:c8:ea:69:9a:a3:7e:35:62:53:60:
2f:b5:75:f4:e4:14:28:9d:1d:bf:f2:f0:c9:24:24:
b3:75:32:0f:7a:ad:dd:f1:b5:6f:4b:51:a6:55:df:
12:60:8e:91:b4:18:63:9f:c5:8c:e7:02:3a:16:b8:
04:0c:ef:45:b0:c4:5e:75:c1:b0:86:06:9a:3b:d9:
eb:80:57:7d:ad:e6:cd:cd:81:82:72:bd:84:b4:21:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:DB:E5:20:3A:35:84:13:AF:14:E1:FE:BF:8B:1E:3E:20:DB:77
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.159.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a4:29:79:80:f5:f0:f2:98:9d:95:99:1a:7f:46:32:c8:96:
51:c4:a7:fc:1b:b6:20:e0:a7:e5:42:97:1b:4d:3d:7f:a9:57:
8b:85:71:98:cc:b6:4d:d5:36:c8:46:11:fb:ed:45:09:f5:7f:
ec:ad:0e:65:d8:52:27:cc:30:62:20:e3:d3:a6:f7:0b:6b:1c:
4e:8a:e1:10:60:f9:3a:74:a2:73:6f:ac:a0:e4:a1:57:7c:bd:
63:9e:f9:b3:52:b9:80:51:82:40:53:04:11:df:1e:07:de:a0:
aa:fc:96:98:da:d3:68:82:58:09:de:69:0c:63:a3:6c:b4:06:
b5:1e:81:f3:d8:50:e4:42:cc:b1:36:1c:e6:54:a8:ed:e6:0b:
52:ce:e7:c8:84:89:db:8d:bc:1c:f9:45:69:9e:a5:6e:1a:1f:
0a:16:7f:bd:e0:82:2b:b8:04:1c:fa:bf:5f:7d:64:3b:97:27:
6b:e1:c7:c6:bc:50:8e:be:bb:29:b7:b8:bb:7d:cc:6b:ea:4b:
6b:49:a8:45:41:fd:cc:e8:01:74:02:87:e7:d7:0d:07:51:7f:
3e:8b:b1:c7:8f:32:b9:01:b2:fb:08:53:61:05:87:c9:34:03:
92:2a:b1:28:80:14:82:e7:ee:47:a0:a9:6a:58:e9:10:f9:39:
a0:d3:d7:65
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW7VnZVgRqfBh0vpEBsbQa2WwoO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM1NTdaFw0yNTAyMjEyMzQwNTdaMDMxMTAvBgNV
BAMTKDVGMjBEQkU1MjAzQTM1ODQxM0FGMTRFMUZFQkY4QjFFM0UyMERCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KFlV39CyKqOkgMx+dFHuVb2p
8OnMGeluqkk/9nTlPbduPGiVGHRASUwDXyjc3gRh+r+skjnlL1eLIzCQM+bVz5VH
2r2H4ZgZ6gIvEpwBlNgpuK4zFEyGtMWZS4Jwo9HPVgsClgDjFs0uqh/QSCHAy3f0
OM9kk8lX1Aokg1zlf1v8Hy7fedhnM/cU2Hye2DPJSQ0PI0TBv0pO+iQqKmxueuIY
2uB6C26UyOppmqN+NWJTYC+1dfTkFCidHb/y8MkkJLN1Mg96rd3xtW9LUaZV3xJg
jpG0GGOfxYznAjoWuAQM70WwxF51wbCGBpo72euAV32t5s3NgYJyvYS0IflZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXyDb5SA6NYQTrxTh/r+LHj4g23cwHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKjFnzANBgkqhkiG9w0BAQsFAAOCAQEAI6QpeYD1
8PKYnZWZGn9GMsiWUcSn/Bu2IOCn5UKXG009f6lXi4VxmMy2TdU2yEYR++1FCfV/
7K0OZdhSJ8wwYiDj06b3C2scTorhEGD5OnSic2+soOShV3y9Y575s1K5gFGCQFME
Ed8eB96gqvyWmNrTaIJYCd5pDGOjbLQGtR6B89hQ5ELMsTYc5lSo7eYLUs7nyISJ
2428HPlFaZ6lbhofChZ/veCCK7gEHPq/X31kO5cna+HHxrxQjr67Kbe4u33Ma+pL
a0moRUH9zOgBdAKH59cNB1F/Pouxx48yuQGy+whTYQWHyTQDkiqxKIAUgufuR6Cp
aljpEPk5oNPXZQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:33:32 2025 by rpki-client