Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
File: 3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier: 08Xc50ykfh9wfoHbUN6H4sI1VuHuMBOoUOuD39nszxY=
Subject key identifier: 99:74:5A:7E:96:6A:3C:75:AB:AD:3A:43:D8:C3:83:FF:92:BD:F7:99
Certificate issuer: /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial: 1FE2EE3333A4B704DB19DE24DA12AD3F05532A7A
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
Signing time: Fri 07 Mar 2025 14:41:01 +0000
ROA not before: Fri 07 Mar 2025 14:36:01 +0000
ROA not after: Fri 06 Mar 2026 14:41:01 +0000
asID: 265485
IP address blocks: 168.197.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e2:ee:33:33:a4:b7:04:db:19:de:24:da:12:ad:3f:05:53:2a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Validity
Not Before: Mar 7 14:36:01 2025 GMT
Not After : Mar 6 14:41:01 2026 GMT
Subject: CN=99745A7E966A3C75ABAD3A43D8C383FF92BDF799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:d4:ef:6f:1e:cd:06:b4:e1:6e:7d:6e:83:
cd:eb:30:39:8b:d5:e2:29:38:fd:9b:4e:33:a6:19:
15:4f:14:41:3e:62:e6:ef:1c:65:75:89:18:53:19:
19:da:94:4c:b8:12:5a:3b:18:62:6b:8a:a0:6d:ff:
f0:51:69:17:f0:f0:d0:46:b5:ec:29:d2:17:69:fe:
de:73:2a:85:88:3e:2b:03:b4:67:b9:b9:6f:32:f7:
e0:96:d0:da:ef:e0:5b:ed:77:ff:20:10:7e:15:c6:
4d:54:ea:52:3d:6f:b9:7e:4a:ba:2c:6f:06:35:46:
9b:76:89:2f:ab:37:7e:99:ff:8e:b3:f9:06:8a:30:
cd:5b:6b:39:4f:6c:37:a5:6f:c1:68:87:ac:b6:a5:
16:7b:94:52:31:d9:34:0a:30:d4:0c:c8:b0:9e:b5:
88:df:28:d6:2a:f2:cd:8a:9e:a3:33:8c:b6:64:3a:
4e:23:5c:a1:af:1d:ad:39:a6:2a:20:85:78:f2:1a:
c0:4b:9c:f7:9d:72:8c:b5:de:f0:73:3c:94:4d:d8:
89:f8:e8:93:9a:07:71:d2:93:95:7e:97:22:cc:05:
76:dd:c6:e2:d4:42:62:db:7e:3d:79:33:a7:f2:ce:
fd:c4:48:c7:b1:af:4f:25:39:2f:4e:45:fe:35:c2:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:5A:7E:96:6A:3C:75:AB:AD:3A:43:D8:C3:83:FF:92:BD:F7:99
X509v3 Authority Key Identifier:
keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.158.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:5c:c2:7f:b1:ed:5b:24:ae:e8:70:12:0e:1f:9d:a1:68:75:
37:2b:bc:fc:c0:ad:94:ca:ca:b5:da:a9:8d:3f:7b:90:bc:ab:
96:38:2c:e7:c8:df:a0:7b:f5:58:ef:ba:62:cd:d2:97:40:fd:
df:26:06:57:7b:f6:48:17:86:3e:00:60:03:d6:9b:99:18:84:
ef:c3:95:a2:86:a2:8e:7b:47:0a:4d:c6:c4:4f:63:65:b7:56:
df:98:a6:4b:ad:36:c0:7a:dd:c5:f3:d2:de:2a:98:4b:1d:b4:
b9:fd:c4:dd:87:56:52:44:32:89:55:b0:a4:db:9e:ba:37:3a:
a6:1f:f2:fe:76:8b:35:7a:f0:95:37:51:61:ba:8c:04:d3:50:
4a:1f:4c:ab:12:35:53:2a:1b:4f:6c:6b:52:8c:01:28:0c:70:
c0:16:0c:cd:59:66:1d:08:6e:e4:cb:84:86:d4:42:14:74:4e:
49:d6:0d:91:fb:e2:30:6c:03:39:e6:5a:f9:60:59:c0:2d:2c:
f9:88:14:0e:37:86:33:c5:4b:db:ad:9f:8c:c5:f1:3c:b9:9a:
73:3b:93:c9:21:cb:61:3e:02:9b:fd:61:62:3c:91:f7:ef:cc:
98:e8:50:df:ad:7c:85:61:34:b0:f3:4f:12:0e:41:32:7c:50:
17:7c:df:eb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH+LuMzOktwTbGd4k2hKtPwVTKnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRC
M0I5OUVCRTAeFw0yNTAzMDcxNDM2MDFaFw0yNjAzMDYxNDQxMDFaMDMxMTAvBgNV
BAMTKDk5NzQ1QTdFOTY2QTNDNzVBQkFEM0E0M0Q4QzM4M0ZGOTJCREY3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhNTvbx7NBrThbn1ug83rMDmL
1eIpOP2bTjOmGRVPFEE+YubvHGV1iRhTGRnalEy4Elo7GGJriqBt//BRaRfw8NBG
tewp0hdp/t5zKoWIPisDtGe5uW8y9+CW0Nrv4Fvtd/8gEH4Vxk1U6lI9b7l+Sros
bwY1Rpt2iS+rN36Z/46z+QaKMM1bazlPbDelb8Foh6y2pRZ7lFIx2TQKMNQMyLCe
tYjfKNYq8s2KnqMzjLZkOk4jXKGvHa05pioghXjyGsBLnPedcoy13vBzPJRN2In4
6JOaB3HSk5V+lyLMBXbdxuLUQmLbfj15M6fyzv3ESMexr08lOS9ORf41wqxZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmXRafpZqPHWrrTpD2MOD/5K995kwHwYDVR0j
BBgwFoAU8MELy58C2CR6oCo+3qlN1LO5nr4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzEvRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRCM0I5OUVCRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEMxMEJDQjlGMDJEODI0N0FB
MDJBM0VERUE5NERENEIzQjk5RUJFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzEvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAajFnjANBgkqhkiG9w0BAQsFAAOCAQEAn1zCf7Ht
WySu6HASDh+doWh1Nyu8/MCtlMrKtdqpjT97kLyrljgs58jfoHv1WO+6Ys3Sl0D9
3yYGV3v2SBeGPgBgA9abmRiE78OVooaijntHCk3GxE9jZbdW35imS602wHrdxfPS
3iqYSx20uf3E3YdWUkQyiVWwpNueujc6ph/y/naLNXrwlTdRYbqMBNNQSh9MqxI1
UyobT2xrUowBKAxwwBYMzVlmHQhu5MuEhtRCFHROSdYNkfviMGwDOeZa+WBZwC0s
+YgUDjeGM8VL262fjMXxPLmaczuTySHLYT4Cm/1hYjyR9+/MmOhQ3618hWE0sPNP
Eg5BMnxQF3zf6w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:24 2025 by rpki-client