Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
File: 3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier: QBktzrXufTLldGh2fgBfudtjOuyelWOTK8FJiHWIuDM=
Subject key identifier: B4:48:7E:32:5A:4D:F1:92:C5:61:65:66:6D:1F:7B:42:9B:D1:51:C3
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 285930F3DF89D9D261D044256665A43F7E8ED481
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
Signing time: Thu 16 Jan 2025 12:54:33 +0000
ROA not before: Thu 16 Jan 2025 12:49:33 +0000
ROA not after: Thu 15 Jan 2026 12:54:33 +0000
asID: 262868
IP address blocks: 177.20.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:59:30:f3:df:89:d9:d2:61:d0:44:25:66:65:a4:3f:7e:8e:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Jan 16 12:49:33 2025 GMT
Not After : Jan 15 12:54:33 2026 GMT
Subject: CN=B4487E325A4DF192C56165666D1F7B429BD151C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:93:d9:4e:da:e9:c8:53:2d:06:f1:6d:64:
24:13:0a:46:ed:ef:31:93:c6:50:70:41:d1:a4:71:
26:a9:a0:d9:64:a9:d5:6d:eb:02:ae:7b:72:ab:01:
6e:fc:38:1f:81:c0:9f:dc:c0:0f:c6:25:4a:09:5b:
be:be:91:47:33:14:29:df:70:d5:fa:9b:3b:b3:05:
92:4c:c8:8f:9a:82:5e:c6:8c:eb:f3:35:ea:0d:60:
ad:89:b1:c1:79:bf:20:f9:ba:e8:74:38:a4:78:6f:
53:37:e5:b2:0f:ab:98:3a:97:d1:56:ae:6e:cd:1f:
ed:d7:75:dc:52:24:3b:1b:36:f7:b3:90:7d:b7:d1:
1d:e8:59:98:38:31:b5:50:4d:c7:94:08:6a:f8:96:
3a:c0:63:e8:07:c3:1f:0a:98:ad:08:f3:ef:dc:2a:
02:c0:bc:45:05:06:8b:66:a8:5b:70:6c:22:a6:de:
63:a3:09:84:24:b4:26:7d:bb:d2:e0:3f:52:61:bc:
79:d0:a4:35:9a:8c:ed:1d:4c:0e:9d:d5:bd:25:a6:
74:d7:0a:03:c9:fa:bf:c3:e3:00:4d:5c:0c:7f:9b:
12:32:6f:73:ef:47:7c:79:00:fb:1e:21:04:e7:61:
0d:8e:68:72:af:83:79:ac:b1:97:ea:e2:ce:f5:9e:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:7E:32:5A:4D:F1:92:C5:61:65:66:6D:1F:7B:42:9B:D1:51:C3
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.20.213.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a3:ea:ca:1f:ef:fa:68:68:0a:b4:83:5b:35:c8:02:6a:4f:
a9:c8:3b:62:b9:ad:65:5c:cc:06:e3:e4:ca:2f:37:63:ee:44:
41:2e:f3:0e:62:14:c7:1b:5d:3c:e4:d1:52:d7:c3:d5:dc:13:
c0:36:b2:26:bf:41:81:00:37:7f:2e:ff:4f:aa:e7:09:aa:03:
24:f1:7f:1b:ed:9b:2d:ac:9d:00:ae:6b:4b:87:5f:0c:63:cc:
fd:c3:55:4b:e9:b2:c1:a8:e3:bf:9d:ca:57:ef:2a:fc:2b:7a:
24:99:13:3b:69:2f:54:0b:af:9c:aa:ff:c4:93:0a:d0:81:03:
a1:d0:6d:e9:56:91:f8:07:09:44:14:9f:82:82:0b:94:bf:ad:
ba:9c:1c:ec:5b:98:33:b7:a8:74:d6:90:84:88:9e:7d:bc:54:
44:ab:d7:07:72:29:f2:d7:ac:b4:4b:81:b8:87:d9:0f:b0:c5:
b4:6d:98:6f:a2:b1:d9:83:1f:b7:37:3a:35:37:12:65:75:9d:
62:51:6f:9b:5c:3c:cc:48:c9:eb:b8:07:3a:e0:7b:5d:17:4a:
9a:e0:92:0d:f8:45:0f:13:1f:a9:36:51:9a:35:ff:8a:39:8f:
83:ce:3f:da:02:38:c4:9b:9a:1d:12:b1:26:53:cb:77:a3:3a:
34:4f:da:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKFkw89+J2dJh0EQlZmWkP36O1IEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNTAxMTYxMjQ5MzNaFw0yNjAxMTUxMjU0MzNaMDMxMTAvBgNV
BAMTKEI0NDg3RTMyNUE0REYxOTJDNTYxNjU2NjZEMUY3QjQyOUJEMTUxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R5PZTtrpyFMtBvFtZCQTCkbt
7zGTxlBwQdGkcSapoNlkqdVt6wKue3KrAW78OB+BwJ/cwA/GJUoJW76+kUczFCnf
cNX6mzuzBZJMyI+agl7GjOvzNeoNYK2JscF5vyD5uuh0OKR4b1M35bIPq5g6l9FW
rm7NH+3XddxSJDsbNvezkH230R3oWZg4MbVQTceUCGr4ljrAY+gHwx8KmK0I8+/c
KgLAvEUFBotmqFtwbCKm3mOjCYQktCZ9u9LgP1JhvHnQpDWajO0dTA6d1b0lpnTX
CgPJ+r/D4wBNXAx/mxIyb3PvR3x5APseIQTnYQ2OaHKvg3mssZfq4s71nt/vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtEh+MlpN8ZLFYWVmbR97QpvRUcMwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNzM3MmUzMjMwMmUzMjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFNUwDQYJKoZIhvcNAQELBQADggEBAJej6sof
7/poaAq0g1s1yAJqT6nIO2K5rWVczAbj5MovN2PuREEu8w5iFMcbXTzk0VLXw9Xc
E8A2sia/QYEAN38u/0+q5wmqAyTxfxvtmy2snQCua0uHXwxjzP3DVUvpssGo47+d
ylfvKvwreiSZEztpL1QLr5yq/8STCtCBA6HQbelWkfgHCUQUn4KCC5S/rbqcHOxb
mDO3qHTWkISInn28VESr1wdyKfLXrLRLgbiH2Q+wxbRtmG+isdmDH7c3OjU3EmV1
nWJRb5tcPMxIyeu4Bzrge10XSprgkg34RQ8TH6k2UZo1/4o5j4POP9oCOMSbmh0S
sSZTy3ejOjRP2ho=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:34:44 2025 by rpki-client