Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File: 3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier: DL8q8Acz2/pWkW4UXJ/YnIyAsFi34j7j+GHEOqplih4=
Subject key identifier: D5:CC:E4:BB:1E:90:65:D5:71:FE:B4:36:AD:EE:18:64:79:B0:ED:21
Certificate issuer: /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial: 0B4D48959C9CA21CD2440023B5CF5A301399A008
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time: Tue 04 Mar 2025 06:47:13 +0000
ROA not before: Tue 04 Mar 2025 06:42:13 +0000
ROA not after: Tue 03 Mar 2026 06:47:13 +0000
asID: 265393
IP address blocks: 168.194.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4d:48:95:9c:9c:a2:1c:d2:44:00:23:b5:cf:5a:30:13:99:a0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Validity
Not Before: Mar 4 06:42:13 2025 GMT
Not After : Mar 3 06:47:13 2026 GMT
Subject: CN=D5CCE4BB1E9065D571FEB436ADEE186479B0ED21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:3c:94:a4:59:20:14:13:df:f5:59:12:b4:
e1:57:ac:69:52:40:e3:f7:6f:2d:bd:07:f2:f4:8e:
94:f6:22:f6:3b:09:1a:3b:8e:b5:e8:9d:fe:6b:19:
d9:1b:e6:a2:7d:f4:4a:9f:59:fa:6f:5c:11:c8:4f:
da:69:12:65:ee:28:8e:cc:d0:64:f6:e5:eb:9f:72:
24:11:00:25:5f:b3:8c:73:1a:72:2e:6f:f6:fd:df:
f2:34:da:2d:9c:c1:70:2f:f4:2c:f9:a1:ef:38:0c:
99:18:a0:4a:79:70:60:6f:a3:f2:6d:ed:7f:d4:3a:
0f:cd:be:f2:a9:68:37:e0:9f:d2:cf:e1:1b:c3:aa:
80:25:f5:e7:e5:6b:6f:94:14:6a:8c:4c:a0:17:77:
cc:4b:08:4a:10:92:d2:2b:78:f8:dd:e3:f1:62:71:
e6:c3:0a:fd:dd:1e:bb:1a:93:52:bb:ba:1e:62:11:
24:f7:9a:e2:9e:05:58:41:ed:41:1c:28:e4:c9:ef:
fa:13:64:a4:fc:b5:ab:6b:e9:bf:c3:ab:99:74:2a:
51:ae:dc:51:7a:f4:c9:a7:f8:65:5e:94:a8:e2:f0:
b1:db:20:6c:a6:d6:5f:d0:9d:23:f1:10:a5:8a:dd:
26:a1:9b:ad:bf:b8:c8:8e:bb:f3:b2:34:1e:c1:7a:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:E4:BB:1E:90:65:D5:71:FE:B4:36:AD:EE:18:64:79:B0:ED:21
X509v3 Authority Key Identifier:
keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.164.0/22
Signature Algorithm: sha256WithRSAEncryption
38:85:52:74:e1:5e:e3:a1:13:62:a6:4e:08:df:ea:cc:50:3e:
5b:b0:87:ad:df:dd:c8:14:f2:9d:01:20:75:b6:3e:06:6e:3c:
3b:b3:63:ec:b9:a7:b5:17:7d:92:f6:05:70:30:1c:fd:89:9c:
a1:ac:45:0b:bf:66:9c:52:36:df:ad:6d:4e:44:f7:d8:83:dd:
4c:73:da:df:75:5b:f5:ff:41:84:1f:ba:b0:2f:f5:56:bb:53:
d5:27:f7:04:8a:64:d8:ab:da:57:f9:45:1e:23:6f:25:88:d6:
60:9c:17:71:4d:51:50:12:36:a9:c8:fe:19:1a:b2:da:57:2b:
77:e2:a1:5a:56:a8:04:21:52:d3:75:08:10:12:84:4f:97:38:
6b:36:0b:65:07:1b:13:bf:14:97:6b:1b:3c:2f:93:f6:e6:66:
d8:c6:56:6b:0f:59:f1:96:56:20:38:3a:a0:9c:f1:ec:7a:59:
05:b4:46:dc:35:57:88:de:c5:98:86:25:a3:6a:80:7e:63:d4:
3b:ab:4c:da:6a:a1:5c:30:d5:6f:a9:54:84:27:07:f1:6c:1b:
9a:a4:f4:20:c1:e3:d9:4a:b4:43:cb:95:c3:02:ff:28:72:45:
0d:db:01:8d:99:b0:a2:91:7b:cd:14:b2:87:91:0c:6d:7f:de:
55:18:bf:9c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC01IlZycohzSRAAjtc9aMBOZoAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5RTg4MEMzODlEOTA1RDA1QTMzRkFFMDVDREExNEFE
MDNCNENFNzAeFw0yNTAzMDQwNjQyMTNaFw0yNjAzMDMwNjQ3MTNaMDMxMTAvBgNV
BAMTKEQ1Q0NFNEJCMUU5MDY1RDU3MUZFQjQzNkFERUUxODY0NzlCMEVEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35jyUpFkgFBPf9VkStOFXrGlS
QOP3by29B/L0jpT2IvY7CRo7jrXonf5rGdkb5qJ99EqfWfpvXBHIT9ppEmXuKI7M
0GT25eufciQRACVfs4xzGnIub/b93/I02i2cwXAv9Cz5oe84DJkYoEp5cGBvo/Jt
7X/UOg/NvvKpaDfgn9LP4RvDqoAl9efla2+UFGqMTKAXd8xLCEoQktIrePjd4/Fi
cebDCv3dHrsak1K7uh5iEST3muKeBVhB7UEcKOTJ7/oTZKT8tatr6b/Dq5l0KlGu
3FF69Mmn+GVelKji8LHbIGym1l/QnSPxEKWK3Sahm62/uMiOu/OyNB7BeppVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1czkux6QZdVx/rQ2re4YZHmw7SEwHwYDVR0j
BBgwFoAUoJ6IDDidkF0Foz+uBc2hStA7TOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC9BMDlFODgwQzM4OUQ5MDVEMDVBMzNGQUUwNUNEQTE0QUQwM0I0Q0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUU4ODBDMzg5RDkwNUQw
NUEzM0ZBRTA1Q0RBMTRBRDAzQjRDRTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCpDANBgkqhkiG9w0BAQsFAAOCAQEAOIVS
dOFe46ETYqZOCN/qzFA+W7CHrd/dyBTynQEgdbY+Bm48O7Nj7LmntRd9kvYFcDAc
/YmcoaxFC79mnFI2361tTkT32IPdTHPa33Vb9f9BhB+6sC/1VrtT1Sf3BIpk2Kva
V/lFHiNvJYjWYJwXcU1RUBI2qcj+GRqy2lcrd+KhWlaoBCFS03UIEBKET5c4azYL
ZQcbE78Ul2sbPC+T9uZm2MZWaw9Z8ZZWIDg6oJzx7HpZBbRG3DVXiN7FmIYlo2qA
fmPUO6tM2mqhXDDVb6lUhCcH8WwbmqT0IMHj2Uq0Q8uVwwL/KHJFDdsBjZmwopF7
zRSyh5EMbX/eVRi/nA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:14 2025 by rpki-client