Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
File: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (raw, json)
Hash identifier: gsgnsrmcAMo9Uh0v77cXLF7vjcShyal3Mn1aJs7V4Hw=
Subject key identifier: 30:9C:49:C3:2C:52:FD:2C:9A:AE:37:13:02:F8:57:55:16:12:C4:A5
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 541E8103DE0D5A8D4E8E0C0C28A00386670AE06C
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
Signing time: Thu 06 Mar 2025 00:58:53 +0000
ROA not before: Thu 06 Mar 2025 00:53:53 +0000
ROA not after: Thu 05 Mar 2026 00:58:53 +0000
asID: 52639
IP address blocks: 168.195.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1e:81:03:de:0d:5a:8d:4e:8e:0c:0c:28:a0:03:86:67:0a:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:53 2025 GMT
Not After : Mar 5 00:58:53 2026 GMT
Subject: CN=309C49C32C52FD2C9AAE371302F857551612C4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:f9:24:3f:c2:60:0c:76:42:b4:be:ae:b0:
11:ee:70:68:2d:92:ce:a7:d0:76:bf:6c:1b:23:4d:
0d:34:2d:99:c2:36:f4:d5:49:e0:37:40:b9:cf:dd:
4c:3e:a6:6f:8e:3a:16:fb:03:26:22:16:2b:5e:86:
75:b1:e3:64:b5:43:f5:34:91:54:d1:52:2c:b5:db:
12:d2:b0:10:7a:ed:c8:19:e1:ad:55:a4:cb:d6:71:
39:9b:96:ed:ed:10:03:d7:86:50:58:3c:f7:57:0f:
42:d4:4a:80:67:f0:ab:d3:2b:5e:d1:29:53:bc:b8:
de:9c:c9:ba:8e:54:cc:dd:d2:47:cc:6e:bd:d9:2b:
b8:16:82:ff:ab:b1:f4:f1:e1:5b:f7:45:e7:37:35:
68:bc:27:e1:a0:2d:0b:2e:fc:3e:d8:97:5c:b6:bd:
81:e6:60:ad:1a:ce:f1:72:59:56:6b:e9:d8:31:bd:
1e:65:fe:c8:31:18:41:51:25:dc:b1:bc:ff:48:20:
5f:3b:e5:e3:6f:d0:ff:34:64:ed:03:da:8f:ca:7c:
7a:2c:18:17:e9:05:28:ed:45:64:44:cc:34:5a:34:
39:ff:89:eb:12:0b:1d:b2:37:71:78:00:c2:5f:6c:
99:ee:dd:e5:7e:6b:2f:83:86:52:c0:76:7b:81:99:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:49:C3:2C:52:FD:2C:9A:AE:37:13:02:F8:57:55:16:12:C4:A5
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
43:82:d7:41:90:56:21:83:b3:09:37:6b:f9:52:76:35:72:d3:
d7:84:3d:c3:bd:3d:ca:b8:67:a0:a3:48:32:c6:25:94:8e:7f:
86:f9:1e:25:47:62:5b:89:f8:13:24:87:5e:dd:9e:a3:ad:0f:
8a:35:c7:08:ea:37:d5:1c:ad:99:2b:21:91:6e:32:7a:d0:cc:
0b:42:b3:07:7a:f9:b6:31:21:9d:f1:9d:f5:67:49:4f:44:d2:
c5:a0:de:fd:13:9c:b0:a4:79:2d:99:4b:f4:a9:20:8f:03:e9:
5c:d4:bb:f8:f7:08:7f:c5:85:e6:aa:db:86:a8:dd:ed:eb:3a:
b6:62:58:ae:d5:b3:a7:43:43:bf:ec:09:7e:2a:a2:8e:c7:fc:
f2:ae:8e:97:59:5c:34:fe:49:ef:81:5a:2a:6f:bf:04:3f:85:
53:d5:b0:dd:9c:61:ca:bc:6c:2f:e5:43:1b:d7:50:d8:3a:57:
3c:27:0a:b0:f7:0c:b8:61:c8:e5:7c:db:ba:3a:41:e1:07:f9:
bf:80:91:47:e8:c7:99:2c:12:16:71:06:0f:99:78:92:79:9c:
44:4a:27:98:a4:ac:f3:d8:87:53:1f:5c:26:89:60:5c:54:d2:
53:29:4c:e1:cd:a0:2c:b6:77:f4:40:8c:9d:40:5d:cc:89:d2:
59:31:48:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVB6BA94NWo1OjgwMKKADhmcK4GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNTAzMDYwMDUzNTNaFw0yNjAzMDUwMDU4NTNaMDMxMTAvBgNV
BAMTKDMwOUM0OUMzMkM1MkZEMkM5QUFFMzcxMzAyRjg1NzU1MTYxMkM0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTfkkP8JgDHZCtL6usBHucGgt
ks6n0Ha/bBsjTQ00LZnCNvTVSeA3QLnP3Uw+pm+OOhb7AyYiFitehnWx42S1Q/U0
kVTRUiy12xLSsBB67cgZ4a1VpMvWcTmblu3tEAPXhlBYPPdXD0LUSoBn8KvTK17R
KVO8uN6cybqOVMzd0kfMbr3ZK7gWgv+rsfTx4Vv3Rec3NWi8J+GgLQsu/D7Yl1y2
vYHmYK0azvFyWVZr6dgxvR5l/sgxGEFRJdyxvP9IIF875eNv0P80ZO0D2o/KfHos
GBfpBSjtRWREzDRaNDn/iesSCx2yN3F4AMJfbJnu3eV+ay+DhlLAdnuBmcBPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMJxJwyxS/SyarjcTAvhXVRYSxKUwHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKow3AwDQYJKoZIhvcNAQELBQADggEBAEOC10GQ
ViGDswk3a/lSdjVy09eEPcO9Pcq4Z6CjSDLGJZSOf4b5HiVHYluJ+BMkh17dnqOt
D4o1xwjqN9UcrZkrIZFuMnrQzAtCswd6+bYxIZ3xnfVnSU9E0sWg3v0TnLCkeS2Z
S/SpII8D6VzUu/j3CH/Fheaq24ao3e3rOrZiWK7Vs6dDQ7/sCX4qoo7H/PKujpdZ
XDT+Se+BWipvvwQ/hVPVsN2cYcq8bC/lQxvXUNg6VzwnCrD3DLhhyOV827o6QeEH
+b+AkUfox5ksEhZxBg+ZeJJ5nERKJ5ikrPPYh1MfXCaJYFxU0lMpTOHNoCy2d/RA
jJ1AXcyJ0lkxSME=
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:09:35 2025 by rpki-client