Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35332e302f32342d3234203d3e20323635333134.roa
File: 3136382e39302e35332e302f32342d3234203d3e20323635333134.roa (raw, json)
Hash identifier: Tm0KKc6ynTRIIyMXXYQqee8XQIKbjfp5iwmsEiJ49Gg=
Subject key identifier: C6:E1:09:3F:96:86:5E:12:7B:2B:CC:C1:08:2D:60:DD:1A:59:CB:65
Certificate issuer: /CN=BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77
Certificate serial: 5310D1A85827535332717F0AFA761FEEB09A8D71
Authority key identifier: BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35332e302f32342d3234203d3e20323635333134.roa
Signing time: Fri 09 Sep 2022 13:00:57 +0000
ROA not before: Fri 09 Sep 2022 12:55:57 +0000
ROA not after: Fri 08 Sep 2023 13:00:57 +0000
asID: 265314
IP address blocks: 168.90.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:10:d1:a8:58:27:53:53:32:71:7f:0a:fa:76:1f:ee:b0:9a:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77
Validity
Not Before: Sep 9 12:55:57 2022 GMT
Not After : Sep 8 13:00:57 2023 GMT
Subject: CN=C6E1093F96865E127B2BCCC1082D60DD1A59CB65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:a8:40:ed:ea:03:ed:0d:7e:7a:6e:11:88:
ae:11:47:43:a0:06:8f:5e:fc:3d:f0:13:8f:07:2d:
6d:e9:64:21:17:46:c6:f1:0a:8b:16:dc:63:d6:e3:
71:74:17:33:cf:24:15:08:ce:70:f9:f3:01:18:5b:
b9:19:67:b3:c0:90:cd:dd:db:2c:b8:63:1e:cd:80:
eb:6c:c1:b9:fb:25:15:5b:55:5b:65:e9:4d:c7:5d:
95:04:e1:8e:f1:59:ba:53:dc:7d:ca:8a:da:b4:e6:
1b:67:e1:5d:5e:06:56:96:95:a0:a5:48:d7:c7:c7:
ca:42:cc:28:2c:45:d7:ff:c3:26:60:37:81:4a:13:
1d:f8:db:b0:da:b3:17:75:38:da:9b:e0:66:b2:ae:
e1:9f:d6:26:b1:fe:b6:f4:6f:38:30:a3:95:4d:b1:
1c:65:92:5d:96:9a:18:c6:bc:9c:cc:02:45:e5:e7:
d4:a5:d2:72:50:4e:0a:53:27:be:5c:58:81:f0:1a:
52:85:c6:7c:92:c5:8a:62:ed:32:e8:4b:15:94:d6:
02:9b:51:bd:52:6e:ba:a4:90:08:b7:57:1b:d0:b6:
34:f9:69:d9:41:00:77:59:ad:ac:fd:7f:b5:ca:65:
24:6e:15:92:25:80:36:cf:5b:bc:09:9a:2e:8a:34:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:09:3F:96:86:5E:12:7B:2B:CC:C1:08:2D:60:DD:1A:59:CB:65
X509v3 Authority Key Identifier:
keyid:BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35332e302f32342d3234203d3e20323635333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a0:9c:6c:11:8c:59:01:e4:a6:1e:18:d7:8b:70:1f:30:50:
a1:aa:58:65:25:8a:73:57:1a:2b:2f:3e:fc:02:97:f3:69:e5:
f9:04:9b:95:b4:a0:50:96:36:a2:98:93:c0:ed:67:97:03:04:
a0:7f:54:d9:da:a5:b9:d1:dd:96:de:b4:2e:1a:0b:88:75:ff:
fa:57:39:d3:c1:f7:a6:d4:3f:7c:df:ac:ee:a3:f3:d9:e9:52:
dd:36:9e:6a:c6:9c:20:b6:16:5d:6e:cb:c8:25:b3:74:8f:c6:
69:2d:12:58:3e:fc:27:c0:9b:f2:82:88:1d:40:ff:d7:72:3f:
d8:4b:1f:7c:f7:46:90:77:ba:7d:3f:c1:4d:60:64:1f:1d:d4:
6c:cc:7e:29:30:09:c9:33:61:62:ae:c3:3e:89:9d:9c:a0:ef:
f9:12:4a:f3:ee:39:6f:16:0a:4e:f2:97:6f:28:96:6d:23:82:
b0:37:f0:b4:f8:b1:ab:dd:92:f2:9f:3f:a3:20:b8:96:66:e1:
65:39:51:6c:1e:49:66:c2:e6:31:69:26:0d:89:1e:14:33:19:
52:bc:7c:72:a7:fa:99:ef:49:63:2a:ec:ee:0a:1d:99:6c:9e:
23:db:87:29:ac:c7:c5:00:61:da:e1:a0:55:29:d2:4b:dd:d8:
4b:fd:f2:9c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUxDRqFgnU1MycX8K+nYf7rCajXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFNkE1QTlFODJFNjA2QjA5NDc5MzFFQkIwMkM3MEZE
M0VEMUE3NzAeFw0yMjA5MDkxMjU1NTdaFw0yMzA5MDgxMzAwNTdaMDMxMTAvBgNV
BAMTKEM2RTEwOTNGOTY4NjVFMTI3QjJCQ0NDMTA4MkQ2MEREMUE1OUNCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDde6hA7eoD7Q1+em4RiK4RR0Og
Bo9e/D3wE48HLW3pZCEXRsbxCosW3GPW43F0FzPPJBUIznD58wEYW7kZZ7PAkM3d
2yy4Yx7NgOtswbn7JRVbVVtl6U3HXZUE4Y7xWbpT3H3Kitq05htn4V1eBlaWlaCl
SNfHx8pCzCgsRdf/wyZgN4FKEx3427Dasxd1ONqb4GayruGf1iax/rb0bzgwo5VN
sRxlkl2WmhjGvJzMAkXl59Sl0nJQTgpTJ75cWIHwGlKFxnySxYpi7TLoSxWU1gKb
Ub1SbrqkkAi3VxvQtjT5adlBAHdZraz9f7XKZSRuFZIlgDbPW7wJmi6KNHlRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUxuEJP5aGXhJ7K8zBCC1g3RpZy2UwHwYDVR0j
BBgwFoAUv+alqeguYGsJR5MeuwLHD9PtGncwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby83VDd0VzZQUXdKazFVRjRFVmM4WnZzSEdxaUhmSnlkenhGdmlRaWFyTUZv
LzAvQkZFNkE1QTlFODJFNjA2QjA5NDc5MzFFQkIwMkM3MEZEM0VEMUE3Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9CRkU2QTVBOUU4MkU2MDZCMDk0
NzkzMUVCQjAyQzcwRkQzRUQxQTc3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83
VDd0VzZQUXdKazFVRjRFVmM4WnZzSEdxaUhmSnlkenhGdmlRaWFyTUZvLzAvMzEz
NjM4MmUzOTMwMmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzMz
MTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAqFo1MA0GCSqGSIb3DQEBCwUAA4IBAQAroJxsEYxZAeSm
HhjXi3AfMFChqlhlJYpzVxorLz78ApfzaeX5BJuVtKBQljaimJPA7WeXAwSgf1TZ
2qW50d2W3rQuGguIdf/6VznTwfem1D9836zuo/PZ6VLdNp5qxpwgthZdbsvIJbN0
j8ZpLRJYPvwnwJvygogdQP/Xcj/YSx9890aQd7p9P8FNYGQfHdRszH4pMAnJM2Fi
rsM+iZ2coO/5Ekrz7jlvFgpO8pdvKJZtI4KwN/C0+LGr3ZLynz+jILiWZuFlOVFs
HklmwuYxaSYNiR4UMxlSvHxyp/qZ70ljKuzuCh2ZbJ4j24cprMfFAGHa4aBVKdJL
3dhL/fKc
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:34 2025 by rpki-client