Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3234203d3e203532363835.roa
File: 3137372e3133362e3230382e302f32312d3234203d3e203532363835.roa (raw, json)
Hash identifier: W+j3Zos9VdialDHEe9dWVeBHtbRU92zpi3v/IH4tTzI=
Subject key identifier: DC:52:A8:D5:C3:DA:B7:90:C0:AB:F2:AD:BC:8D:29:2B:B1:92:F1:67
Certificate issuer: /CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
Certificate serial: 6887177438A659DD6613851A1F1FB46FB69FBB06
Authority key identifier: 4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3234203d3e203532363835.roa
Signing time: Wed 29 Mar 2023 20:08:41 +0000
ROA not before: Wed 29 Mar 2023 20:03:41 +0000
ROA not after: Wed 27 Mar 2024 20:08:41 +0000
asID: 52685
IP address blocks: 177.136.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:87:17:74:38:a6:59:dd:66:13:85:1a:1f:1f:b4:6f:b6:9f:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
Validity
Not Before: Mar 29 20:03:41 2023 GMT
Not After : Mar 27 20:08:41 2024 GMT
Subject: CN=DC52A8D5C3DAB790C0ABF2ADBC8D292BB192F167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:30:e3:5d:8f:5d:39:e4:df:d4:80:89:4b:
05:bb:cb:c3:13:83:ee:49:76:d1:af:ba:98:73:44:
4c:ae:3a:ca:b2:30:a0:6e:0e:99:c4:d7:3f:7a:af:
86:65:ce:29:af:b7:bb:e3:4c:29:0b:69:e5:73:3d:
55:79:4f:85:79:ba:4f:16:79:dd:a5:06:5f:0a:29:
9a:84:52:b2:a6:06:59:fa:e2:8f:30:c4:a6:00:35:
a4:d4:b3:83:6f:30:43:4b:c0:04:00:2d:19:0a:57:
32:b4:a9:a0:39:5e:fc:ed:30:e0:9d:fa:69:28:00:
f0:33:b2:ec:6f:e2:77:c4:ea:bc:b4:fc:e0:57:24:
a3:a0:64:f0:10:b8:81:75:ec:26:f4:80:aa:b7:14:
99:47:a8:ef:78:9e:f7:ab:8d:6a:c2:d8:89:6b:72:
21:8f:59:7a:1a:e5:00:38:e8:ed:fc:f2:aa:09:02:
3e:f3:7d:eb:11:83:de:de:e8:4b:08:e1:b3:d8:a4:
7b:80:1d:dd:46:91:98:72:a2:95:3a:5e:86:6c:d6:
cf:08:60:6f:8e:4b:40:73:bb:9a:7d:0d:b7:af:1d:
21:41:2e:d2:1a:6e:c4:53:a4:8a:6f:ed:4e:74:b5:
4e:e3:a8:13:65:29:ad:8a:cd:ae:cb:dc:b8:a2:b3:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:A8:D5:C3:DA:B7:90:C0:AB:F2:AD:BC:8D:29:2B:B1:92:F1:67
X509v3 Authority Key Identifier:
keyid:4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3234203d3e203532363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.208.0/21
Signature Algorithm: sha256WithRSAEncryption
55:15:86:f7:41:7f:26:3b:1f:7a:51:66:65:48:39:c8:0d:84:
d5:eb:15:87:6f:0d:b5:07:42:14:e8:82:b7:da:be:3a:e7:08:
38:c2:7d:d4:5a:66:71:f5:5e:e7:df:66:3b:35:d5:ae:2e:99:
ef:0e:96:1b:54:54:d0:83:be:28:ea:ad:ab:88:2e:a0:4d:87:
26:1c:73:5e:31:5b:77:3f:2a:98:9d:3e:cd:9b:dc:81:b4:ba:
4d:02:a1:92:1a:d0:e1:c3:99:00:6a:04:1a:8a:df:4a:54:a3:
0d:9c:3d:43:0d:b5:ee:41:65:b0:36:52:47:88:76:11:85:18:
d9:e0:74:3f:b2:51:de:87:7a:52:af:9d:95:20:17:53:dc:d3:
83:ff:fe:2c:88:cd:7d:f6:71:0b:0e:99:b3:c6:0e:3e:be:8f:
f0:6d:3a:7e:8b:4e:3b:dc:89:af:71:4c:11:4d:5a:90:be:c7:
19:19:d2:d7:a9:bd:0a:55:4e:12:8b:a0:63:ff:82:c1:bf:58:
02:d7:47:2a:d3:4e:7d:4a:42:44:3b:ef:44:84:ec:1b:4e:21:
8a:a4:b0:71:3f:ad:54:75:ed:e0:86:88:64:d5:50:e6:fb:5a:
52:1e:6c:a8:bd:4b:dd:74:09:55:22:ab:a3:2f:dc:ab:66:13:
8f:e2:e8:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaIcXdDimWd1mE4UaHx+0b7afuwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZCQjJBNjdCNjM2MkM1RjFDMUUzRDZCQzgzM0Q4RkRE
M0Q4NDk3RTAeFw0yMzAzMjkyMDAzNDFaFw0yNDAzMjcyMDA4NDFaMDMxMTAvBgNV
BAMTKERDNTJBOEQ1QzNEQUI3OTBDMEFCRjJBREJDOEQyOTJCQjE5MkYxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8zDjXY9dOeTf1ICJSwW7y8MT
g+5JdtGvuphzREyuOsqyMKBuDpnE1z96r4Zlzimvt7vjTCkLaeVzPVV5T4V5uk8W
ed2lBl8KKZqEUrKmBln64o8wxKYANaTUs4NvMENLwAQALRkKVzK0qaA5XvztMOCd
+mkoAPAzsuxv4nfE6ry0/OBXJKOgZPAQuIF17Cb0gKq3FJlHqO94nverjWrC2Ilr
ciGPWXoa5QA46O388qoJAj7zfesRg97e6EsI4bPYpHuAHd1GkZhyopU6XoZs1s8I
YG+OS0Bzu5p9DbevHSFBLtIabsRTpIpv7U50tU7jqBNlKa2Kza7L3Liis+N9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3FKo1cPat5DAq/KtvI0pK7GS8WcwHwYDVR0j
BBgwFoAUT7sqZ7Y2LF8cHj1ryDPY/dPYSX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMC80RkJCMkE2N0I2MzYyQzVGMUMxRTNENkJDODMzRDhGREQzRDg0OTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGQkIyQTY3QjYzNjJDNUYx
QzFFM0Q2QkM4MzNEOEZERDNEODQ5N0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzAv
MzEzNzM3MmUzMTMzMzYyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxiNAwDQYJKoZIhvcNAQELBQADggEBAFUVhvdB
fyY7H3pRZmVIOcgNhNXrFYdvDbUHQhTogrfavjrnCDjCfdRaZnH1XuffZjs11a4u
me8OlhtUVNCDvijqrauILqBNhyYcc14xW3c/KpidPs2b3IG0uk0CoZIa0OHDmQBq
BBqK30pUow2cPUMNte5BZbA2UkeIdhGFGNngdD+yUd6HelKvnZUgF1Pc04P//iyI
zX32cQsOmbPGDj6+j/BtOn6LTjvcia9xTBFNWpC+xxkZ0tepvQpVThKLoGP/gsG/
WALXRyrTTn1KQkQ770SE7BtOIYqksHE/rVR17eCGiGTVUOb7WlIebKi9S910CVUi
q6Mv3KtmE4/i6Fg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:42:07 2025 by rpki-client