Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
File: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier: +CF7QANknCgkvB8Sei8FdTDebWZrX/HjlS/hpgnQNZ8=
Subject key identifier: 59:AD:F8:72:51:5F:3E:AC:AF:24:05:06:AA:39:56:7B:9B:54:18:58
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 294C062AF5874D9CC6BF0CC74C8FF98898F7D83C
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
Signing time: Thu 06 Mar 2025 00:58:54 +0000
ROA not before: Thu 06 Mar 2025 00:53:54 +0000
ROA not after: Thu 05 Mar 2026 00:58:54 +0000
asID: 203
IP address blocks: 168.195.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4c:06:2a:f5:87:4d:9c:c6:bf:0c:c7:4c:8f:f9:88:98:f7:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:54 2025 GMT
Not After : Mar 5 00:58:54 2026 GMT
Subject: CN=59ADF872515F3EACAF240506AA39567B9B541858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:ba:43:b8:37:79:25:ff:e4:97:86:e8:8c:
8f:59:dc:d5:be:00:9c:43:06:68:12:1a:14:10:ea:
aa:a0:e1:02:bc:aa:27:30:66:66:f1:0c:4c:49:6b:
bf:ee:b5:51:82:ca:70:ec:a5:a8:1c:64:5f:3a:64:
7d:11:86:ec:59:22:a2:6a:5f:38:eb:32:3b:1e:c6:
1f:98:98:2d:17:88:12:01:4c:c6:5e:48:de:cd:6e:
2c:f3:9c:41:58:c5:f5:40:51:65:d6:4e:e4:ff:66:
37:cd:03:7b:48:41:1e:28:bb:04:fb:83:db:87:75:
17:67:5e:4d:ea:22:84:98:84:27:b3:08:7f:54:51:
d6:71:82:7f:87:0f:c8:60:32:c1:75:ad:0f:05:14:
c1:14:8e:af:59:ce:46:29:3f:61:40:04:9b:bb:65:
14:da:2a:fc:9e:aa:aa:0d:bc:76:21:5b:52:c7:4e:
6b:01:93:33:49:b3:ac:c9:43:36:5d:90:7a:2b:d5:
68:19:44:4a:22:5a:e2:24:60:21:1b:55:47:83:c0:
22:a6:4d:ed:db:ca:27:75:41:c8:6e:89:6e:90:aa:
39:d1:3c:2a:4d:23:ff:08:00:24:ae:a7:52:9d:0f:
31:b6:5c:0d:1c:51:59:7d:99:e5:97:17:87:59:78:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:F8:72:51:5F:3E:AC:AF:24:05:06:AA:39:56:7B:9B:54:18:58
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1f:04:34:1f:ec:fb:59:89:7e:6c:49:0a:ae:c2:0b:d5:7c:
0a:67:27:0c:d7:17:df:97:9e:b1:69:36:fa:c7:2f:96:e4:95:
2d:4c:b1:42:e2:fc:15:d2:56:39:6d:af:3b:b9:42:60:44:a7:
b5:31:0b:c1:2e:dc:f1:8a:bd:13:5d:fa:36:1d:e8:18:c3:65:
aa:5c:75:40:bc:37:d7:0f:12:a4:d7:f6:24:4b:27:c4:ae:66:
7d:53:fe:0d:98:6b:ff:87:5b:af:05:89:52:a6:40:90:fe:0c:
7c:b3:4f:6f:d2:55:df:80:00:31:b1:9d:43:fc:03:b5:37:8c:
3a:f3:39:ec:79:94:f5:14:a9:96:2c:5b:bd:b0:fa:6a:20:af:
50:1a:7a:25:dc:c8:3a:ec:2d:98:af:88:7a:77:98:86:3e:37:
f1:4d:1d:ef:9d:77:66:92:92:b0:f2:57:66:63:9b:17:dd:03:
3c:ca:2a:53:d0:70:0b:fa:8d:06:86:16:96:6f:13:e7:f2:98:
bf:54:47:48:1b:ec:00:bb:84:2b:ec:7c:6f:fc:7f:e3:90:15:
2c:1e:b7:85:e0:dc:7d:d0:17:cc:a0:07:0d:c3:35:76:e5:b4:
0d:b7:ac:e2:dd:10:8e:9a:5e:67:24:88:fd:e7:4d:5f:35:b5:
ed:83:cd:32
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKUwGKvWHTZzGvwzHTI/5iJj32DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNTAzMDYwMDUzNTRaFw0yNjAzMDUwMDU4NTRaMDMxMTAvBgNV
BAMTKDU5QURGODcyNTE1RjNFQUNBRjI0MDUwNkFBMzk1NjdCOUI1NDE4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziLpDuDd5Jf/kl4bojI9Z3NW+
AJxDBmgSGhQQ6qqg4QK8qicwZmbxDExJa7/utVGCynDspagcZF86ZH0RhuxZIqJq
XzjrMjsexh+YmC0XiBIBTMZeSN7NbizznEFYxfVAUWXWTuT/ZjfNA3tIQR4ouwT7
g9uHdRdnXk3qIoSYhCezCH9UUdZxgn+HD8hgMsF1rQ8FFMEUjq9ZzkYpP2FABJu7
ZRTaKvyeqqoNvHYhW1LHTmsBkzNJs6zJQzZdkHor1WgZREoiWuIkYCEbVUeDwCKm
Te3byid1QchuiW6QqjnRPCpNI/8IACSup1KdDzG2XA0cUVl9meWXF4dZeJE1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWa34clFfPqyvJAUGqjlWe5tUGFgwHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjDcDANBgkqhkiG9w0BAQsFAAOCAQEAox8ENB/s+1mJ
fmxJCq7CC9V8CmcnDNcX35eesWk2+scvluSVLUyxQuL8FdJWOW2vO7lCYESntTEL
wS7c8Yq9E136Nh3oGMNlqlx1QLw31w8SpNf2JEsnxK5mfVP+DZhr/4dbrwWJUqZA
kP4MfLNPb9JV34AAMbGdQ/wDtTeMOvM57HmU9RSplixbvbD6aiCvUBp6JdzIOuwt
mK+IeneYhj438U0d7513ZpKSsPJXZmObF90DPMoqU9BwC/qNBoYWlm8T5/KYv1RH
SBvsALuEK+x8b/x/45AVLB63heDcfdAXzKAHDcM1duW0Dbes4t0QjppeZySI/edN
XzW17YPNMg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:13 2025 by rpki-client