Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3332203d3e20323633343237.roa
File: 3137372e39312e34342e302f32322d3332203d3e20323633343237.roa (raw, json)
Hash identifier: VmYG6Td8OWpdD0na5SM8IfZP2wRPbQlYgcyws1lnm6Q=
Subject key identifier: 71:FE:12:03:36:98:0C:3F:45:52:4D:70:0B:03:E2:87:08:84:8D:AD
Certificate issuer: /CN=52BFE68872F7B80B9A500C430D620459628C64FC
Certificate serial: 74BE276AC4E61AC951DED44F372040D28A38DC54
Authority key identifier: 52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3332203d3e20323633343237.roa
Signing time: Tue 28 Feb 2023 13:32:44 +0000
ROA not before: Tue 28 Feb 2023 13:27:44 +0000
ROA not after: Tue 27 Feb 2024 13:32:44 +0000
asID: 263427
IP address blocks: 177.91.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:be:27:6a:c4:e6:1a:c9:51:de:d4:4f:37:20:40:d2:8a:38:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52BFE68872F7B80B9A500C430D620459628C64FC
Validity
Not Before: Feb 28 13:27:44 2023 GMT
Not After : Feb 27 13:32:44 2024 GMT
Subject: CN=71FE120336980C3F45524D700B03E28708848DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:50:4e:ce:73:80:8c:74:da:cf:86:a9:6c:
07:09:01:59:b3:69:fe:95:14:c4:b9:2c:fa:11:e4:
92:29:13:94:57:f7:1f:56:4a:c2:ca:58:a4:f1:c1:
83:d5:99:d4:d8:54:3d:a5:25:b0:5f:0c:9c:ff:0a:
8f:91:de:52:fe:56:36:b2:17:92:cc:ca:c0:02:0e:
07:e4:b2:f2:58:e9:88:57:85:ef:33:88:f2:67:5c:
9a:4a:c3:06:f4:ae:40:89:2c:b4:0d:eb:f8:50:c9:
07:2f:0f:26:86:e6:3a:a7:a3:65:7a:03:41:6f:88:
17:b5:3b:42:fe:16:77:87:ac:3b:bf:65:6a:04:e6:
ba:8b:df:ba:c6:a2:93:c6:27:99:ae:2e:f4:a1:31:
12:66:d0:82:31:80:03:5f:d2:60:29:60:b4:a3:e2:
81:11:b9:fc:e1:fa:22:73:4e:32:88:a4:8c:4e:be:
cd:58:3e:cb:02:2e:b5:ea:e7:cf:da:f3:f8:80:a1:
8f:4b:ed:8d:2a:20:b5:12:d0:70:6d:86:6d:f9:7c:
6e:bd:20:9e:a5:10:ef:4c:19:e3:69:fa:13:3c:39:
30:20:0a:73:81:a6:cf:21:73:25:51:66:f3:69:03:
b0:69:e1:bb:fd:7c:d8:8e:08:97:22:7a:73:d4:d4:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:12:03:36:98:0C:3F:45:52:4D:70:0B:03:E2:87:08:84:8D:AD
X509v3 Authority Key Identifier:
keyid:52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/52BFE68872F7B80B9A500C430D620459628C64FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3332203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:84:92:12:b7:8b:5c:4a:f7:8b:14:67:a3:d9:4a:37:05:dd:
52:ac:9c:9b:79:9c:b3:0e:2e:84:30:ea:40:7b:ee:75:fe:88:
32:9e:09:7c:97:fe:14:bd:ab:13:5d:a9:a1:d8:b4:ca:5b:24:
e9:f1:4f:47:33:63:3f:38:4a:04:2d:7a:fe:03:06:9f:4a:81:
39:53:58:1b:14:2b:88:83:ce:73:53:85:c7:c7:0e:c3:24:85:
2d:63:af:f3:67:5a:83:0b:d6:05:fa:37:c2:78:20:f7:cf:fd:
9b:fc:1a:ca:9d:a5:b5:2a:0a:7d:04:11:a8:0b:72:7b:05:e4:
5f:3b:77:2f:9d:67:4c:0c:48:ca:27:b3:fe:3e:17:b7:0f:2a:
f2:71:5f:01:c2:9c:0d:89:94:f7:85:b2:dd:cd:13:7b:cc:0d:
27:00:4b:67:94:a9:07:67:4b:b8:e9:33:07:99:db:82:f7:72:
92:61:56:0b:b3:c5:5d:e3:f3:b7:04:3e:6f:54:f7:55:b7:ab:
e6:63:eb:1c:43:43:dd:b5:f9:00:1d:c5:bb:66:e4:30:f9:a0:
f7:c0:46:e3:e0:f9:bb:1e:27:73:16:4c:84:dc:4f:fc:99:ee:
54:14:d9:2b:2c:30:3b:c2:07:9a:ac:3e:c7:64:60:7f:08:c0:
41:81:f1:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdL4nasTmGslR3tRPNyBA0oo43FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJCRkU2ODg3MkY3QjgwQjlBNTAwQzQzMEQ2MjA0NTk2
MjhDNjRGQzAeFw0yMzAyMjgxMzI3NDRaFw0yNDAyMjcxMzMyNDRaMDMxMTAvBgNV
BAMTKDcxRkUxMjAzMzY5ODBDM0Y0NTUyNEQ3MDBCMDNFMjg3MDg4NDhEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmVBOznOAjHTaz4apbAcJAVmz
af6VFMS5LPoR5JIpE5RX9x9WSsLKWKTxwYPVmdTYVD2lJbBfDJz/Co+R3lL+Vjay
F5LMysACDgfksvJY6YhXhe8ziPJnXJpKwwb0rkCJLLQN6/hQyQcvDyaG5jqno2V6
A0FviBe1O0L+FneHrDu/ZWoE5rqL37rGopPGJ5muLvShMRJm0IIxgANf0mApYLSj
4oERufzh+iJzTjKIpIxOvs1YPssCLrXq58/a8/iAoY9L7Y0qILUS0HBthm35fG69
IJ6lEO9MGeNp+hM8OTAgCnOBps8hcyVRZvNpA7Bp4bv9fNiOCJcienPU1GF9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcf4SAzaYDD9FUk1wCwPihwiEja0wHwYDVR0j
BBgwFoAUUr/miHL3uAuaUAxDDWIEWWKMZPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC81MkJGRTY4ODcyRjdCODBCOUE1MDBDNDMwRDYyMDQ1OTYyOEM2NEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyQkZFNjg4NzJGN0I4MEI5
QTUwMEM0MzBENjIwNDU5NjI4QzY0RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzM3MmUzOTMxMmUzNDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVssMA0GCSqGSIb3DQEBCwUAA4IBAQCwhJISt4tc
SveLFGej2Uo3Bd1SrJybeZyzDi6EMOpAe+51/ogyngl8l/4UvasTXamh2LTKWyTp
8U9HM2M/OEoELXr+AwafSoE5U1gbFCuIg85zU4XHxw7DJIUtY6/zZ1qDC9YF+jfC
eCD3z/2b/BrKnaW1Kgp9BBGoC3J7BeRfO3cvnWdMDEjKJ7P+Phe3DyrycV8BwpwN
iZT3hbLdzRN7zA0nAEtnlKkHZ0u46TMHmduC93KSYVYLs8Vd4/O3BD5vVPdVt6vm
Y+scQ0PdtfkAHcW7ZuQw+aD3wEbj4Pm7HidzFkyE3E/8me5UFNkrLDA7wgearD7H
ZGB/CMBBgfHc
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:49 2025 by rpki-client