Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
File: 3137372e36372e38382e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier: ijKOJIiapETQeiQigj2ezSi+XGLHn+2jmvv9oc+x0/k=
Subject key identifier: 9C:46:0B:0F:0C:02:5E:AE:5B:F6:7E:54:24:35:20:77:9C:1B:AA:25
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 551B568FFD0025949B09172030B086114134389B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
Signing time: Wed 21 Feb 2024 22:53:25 +0000
ROA not before: Wed 21 Feb 2024 22:48:25 +0000
ROA not after: Wed 19 Feb 2025 22:53:25 +0000
asID: 52674
IP address blocks: 177.67.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1b:56:8f:fd:00:25:94:9b:09:17:20:30:b0:86:11:41:34:38:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 21 22:48:25 2024 GMT
Not After : Feb 19 22:53:25 2025 GMT
Subject: CN=9C460B0F0C025EAE5BF67E54243520779C1BAA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:4b:df:61:71:09:63:5c:9f:5b:02:b0:6f:
54:78:91:8b:68:49:12:b5:7b:9b:cf:59:cb:95:1f:
b7:01:5c:f6:28:85:f1:71:f3:6e:b6:aa:63:3f:d7:
38:46:92:fd:ef:b7:c8:ef:20:4c:70:c4:b5:56:69:
07:c5:f4:77:e5:36:eb:c6:d4:89:dc:46:0f:37:57:
35:da:fa:bc:6e:00:b0:a7:c7:1d:46:a5:b9:88:76:
9b:3b:ec:23:13:34:93:fa:23:89:02:7f:c4:50:6d:
47:3b:9a:97:2d:8e:d9:ae:ab:56:26:a0:e8:95:f8:
1d:7c:38:d7:9b:bd:59:77:bd:4c:fe:ef:53:86:23:
15:66:ca:e6:30:ba:9b:27:99:24:2a:a8:8b:cf:a1:
9e:4b:e5:a0:d8:52:3b:4b:b1:32:8e:28:ed:1c:aa:
f3:72:e8:a8:72:d4:c3:06:4f:93:bf:80:86:1e:f1:
dc:d7:09:3a:82:06:cd:40:03:20:43:b5:c9:7d:b7:
20:40:1e:1f:5d:10:30:28:cb:54:a5:e2:b9:fb:8b:
b7:9a:44:cc:1b:d7:82:b7:4f:23:df:11:dc:9b:a6:
b6:b3:e6:10:ca:44:46:8f:a6:40:0a:d0:f9:2e:00:
da:76:90:d4:df:80:cf:83:b5:75:0f:b0:7e:fc:d5:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:0B:0F:0C:02:5E:AE:5B:F6:7E:54:24:35:20:77:9C:1B:AA:25
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:ad:be:b8:11:68:08:43:57:26:66:59:1c:03:23:89:b0:33:
67:6b:eb:08:b8:af:fa:57:8c:f1:65:59:24:88:93:f3:bb:92:
42:af:04:98:9c:26:80:25:3b:ad:4c:17:c8:d4:a2:b7:d5:37:
e6:76:b8:b0:58:43:94:bd:4d:ce:fd:98:98:02:db:51:d6:13:
e0:5d:3a:1f:8e:e8:8f:76:f8:97:e5:01:80:8e:d1:74:e8:78:
2d:5c:d5:44:41:ec:e5:52:29:99:c5:96:99:ac:bc:22:bb:4a:
79:be:b4:ec:e3:0a:05:60:83:86:7e:2e:0d:c8:a5:63:dd:a7:
fb:d5:69:d8:0e:10:4d:b3:ef:3e:a8:17:26:b8:4d:39:ea:e2:
e0:7c:c0:e7:07:a5:a1:bc:75:ee:c2:4d:e2:00:16:96:ab:0c:
04:66:31:a8:e6:07:bd:48:22:a6:9c:0f:f5:0a:f6:58:47:29:
5a:fe:04:fb:b5:7e:9a:59:00:40:a3:15:b2:e0:59:a7:f7:15:
2c:c1:12:05:04:69:af:b3:3b:d8:4a:96:33:9b:2d:8a:5e:0b:
24:e8:83:c3:57:70:44:58:09:be:6b:7d:cc:88:23:dd:d7:77:
5a:2b:5f:43:c8:03:07:82:ba:38:5a:74:7d:43:cf:0d:c1:ad:
7e:7a:73:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVRtWj/0AJZSbCRcgMLCGEUE0OJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMjEyMjQ4MjVaFw0yNTAyMTkyMjUzMjVaMDMxMTAvBgNV
BAMTKDlDNDYwQjBGMEMwMjVFQUU1QkY2N0U1NDI0MzUyMDc3OUMxQkFBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvt0vfYXEJY1yfWwKwb1R4kYto
SRK1e5vPWcuVH7cBXPYohfFx8262qmM/1zhGkv3vt8jvIExwxLVWaQfF9HflNuvG
1IncRg83VzXa+rxuALCnxx1GpbmIdps77CMTNJP6I4kCf8RQbUc7mpctjtmuq1Ym
oOiV+B18ONebvVl3vUz+71OGIxVmyuYwupsnmSQqqIvPoZ5L5aDYUjtLsTKOKO0c
qvNy6Khy1MMGT5O/gIYe8dzXCTqCBs1AAyBDtcl9tyBAHh9dEDAoy1Sl4rn7i7ea
RMwb14K3TyPfEdybpraz5hDKREaPpkAK0PkuANp2kNTfgM+DtXUPsH781aCvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnEYLDwwCXq5b9n5UJDUgd5wbqiUwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzNzM3MmUzNjM3MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFDWDANBgkqhkiG9w0BAQsFAAOCAQEAXa2+uBFoCENX
JmZZHAMjibAzZ2vrCLiv+leM8WVZJIiT87uSQq8EmJwmgCU7rUwXyNSit9U35na4
sFhDlL1Nzv2YmALbUdYT4F06H47oj3b4l+UBgI7RdOh4LVzVREHs5VIpmcWWmay8
IrtKeb607OMKBWCDhn4uDcilY92n+9Vp2A4QTbPvPqgXJrhNOeri4HzA5welobx1
7sJN4gAWlqsMBGYxqOYHvUgippwP9Qr2WEcpWv4E+7V+mlkAQKMVsuBZp/cVLMES
BQRpr7M72EqWM5stil4LJOiDw1dwRFgJvmt9zIgj3dd3WitfQ8gDB4K6OFp0fUPP
DcGtfnpzlA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:02 2025 by rpki-client