Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
File: 3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: 8eLWIHbkg5kOtb4tuDmcXN7JqqllP5rLO0NPIlW17K4=
Subject key identifier: 18:45:FE:4E:BA:F7:6D:5C:D7:2A:D1:E5:CF:2E:65:A4:20:9C:FF:C8
Certificate issuer: /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial: 5015464DCB3263414BEC6B26F1340FA2C3DBCDA8
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
Signing time: Sun 05 Jan 2025 18:58:44 +0000
ROA not before: Sun 05 Jan 2025 18:53:44 +0000
ROA not after: Sun 04 Jan 2026 18:58:44 +0000
asID: 262503
IP address blocks: 167.249.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:15:46:4d:cb:32:63:41:4b:ec:6b:26:f1:34:0f:a2:c3:db:cd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
Validity
Not Before: Jan 5 18:53:44 2025 GMT
Not After : Jan 4 18:58:44 2026 GMT
Subject: CN=1845FE4EBAF76D5CD72AD1E5CF2E65A4209CFFC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:30:c1:da:a2:bb:f5:cc:b0:31:99:43:3c:
f5:f3:2f:37:e4:b8:66:90:c6:35:af:11:03:a8:ab:
b0:6f:18:d3:d8:77:07:32:a8:ba:17:86:7e:e7:12:
27:c6:1f:6c:7e:a0:e5:96:94:95:40:86:3b:70:99:
7e:49:48:1c:5f:70:07:85:20:8d:74:8b:fa:84:24:
c4:c3:24:24:bb:88:9e:04:62:3f:b6:ae:91:ad:7e:
07:1e:b5:de:23:cf:d9:73:85:fc:cd:08:ee:fb:cd:
47:99:48:de:84:42:71:62:aa:ba:1a:c2:e1:14:2c:
03:18:69:7c:f8:a2:d3:99:a3:34:12:24:e5:37:ac:
10:89:65:34:cc:2c:89:06:a2:0c:c0:77:28:10:89:
02:d8:f6:ea:fb:dd:3e:b5:27:ce:fa:d9:8e:6f:5f:
e8:76:ff:3d:42:56:d6:c2:68:55:fb:08:cb:ce:31:
b6:37:24:48:b1:07:c2:f1:bf:8c:0a:fa:2f:e9:40:
a4:f2:75:aa:5e:b6:fb:0b:8e:78:6a:c0:ba:c6:0a:
8c:e4:ea:df:84:f5:35:d7:33:6f:8f:4a:9c:f9:06:
10:1e:c7:e9:6c:ee:aa:df:5e:9e:f6:2d:25:90:b8:
a5:03:31:6e:e8:24:2a:81:fd:37:2e:be:c5:87:37:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:FE:4E:BA:F7:6D:5C:D7:2A:D1:E5:CF:2E:65:A4:20:9C:FF:C8
X509v3 Authority Key Identifier:
keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0e:76:b5:ea:e1:5c:e8:bf:f9:82:98:4c:fe:64:3a:0e:72:
47:f1:9b:22:15:76:a9:2a:62:5f:25:3c:c3:c9:ee:19:79:2a:
74:f4:22:8e:78:f0:f7:d5:5a:dd:4d:dd:62:1f:1c:a0:39:cc:
27:ce:87:b6:24:9f:f2:d4:0d:9f:43:95:28:cd:11:c7:44:e5:
05:ed:49:78:45:05:b8:1d:e4:03:3d:b0:2a:ac:7b:1d:f1:48:
62:6c:46:3e:cb:de:ae:36:6b:84:55:91:f4:3d:28:6b:b9:4f:
02:4f:5a:bf:f5:cd:d9:0f:58:53:eb:66:a7:3d:7a:a5:99:cb:
ef:5b:5d:5a:30:be:d3:32:77:e8:39:c0:e7:0e:6a:c3:02:bb:
b0:22:60:4e:74:91:53:79:76:07:ba:6d:a1:23:b9:f7:2b:66:
6a:23:09:70:a4:cc:67:16:1f:6c:40:09:c9:e8:c6:01:af:4f:
6e:00:6e:ec:3e:98:22:4a:8c:f1:11:6f:dd:a9:57:c6:3e:6e:
8b:79:6c:72:8c:fd:ed:aa:de:5c:3a:58:77:6d:14:75:b5:cd:
4e:bf:5a:c9:9d:93:a8:3c:24:d3:31:ce:6e:80:9f:f4:66:f6:
9e:d7:f8:b3:68:d3:e5:0e:f3:e7:a7:16:c9:8e:09:70:c1:14:
ea:2e:2c:05
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUBVGTcsyY0FL7Gsm8TQPosPbzagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBNUU1NjNCNDYxQzAwMUVBNjY2ODc0MTg4MDEwMDc1
QjZDQTcwRDAeFw0yNTAxMDUxODUzNDRaFw0yNjAxMDQxODU4NDRaMDMxMTAvBgNV
BAMTKDE4NDVGRTRFQkFGNzZENUNENzJBRDFFNUNGMkU2NUE0MjA5Q0ZGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgjDB2qK79cywMZlDPPXzLzfk
uGaQxjWvEQOoq7BvGNPYdwcyqLoXhn7nEifGH2x+oOWWlJVAhjtwmX5JSBxfcAeF
II10i/qEJMTDJCS7iJ4EYj+2rpGtfgcetd4jz9lzhfzNCO77zUeZSN6EQnFiqroa
wuEULAMYaXz4otOZozQSJOU3rBCJZTTMLIkGogzAdygQiQLY9ur73T61J8762Y5v
X+h2/z1CVtbCaFX7CMvOMbY3JEixB8Lxv4wK+i/pQKTydapetvsLjnhqwLrGCozk
6t+E9TXXM2+PSpz5BhAex+ls7qrfXp72LSWQuKUDMW7oJCqB/TcuvsWHN6DFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGEX+Trr3bVzXKtHlzy5lpCCc/8gwHwYDVR0j
BBgwFoAUpaXlY7RhwAHqZmh0GIAQB1tspw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BNUE1RTU2M0I0NjFDMDAxRUE2NjY4NzQxODgwMTAwNzVCNkNBNzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTVFNTYzQjQ2MUMwMDFF
QTY2Njg3NDE4ODAxMDA3NUI2Q0E3MEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5qDANBgkqhkiG9w0BAQsFAAOCAQEAiQ52
terhXOi/+YKYTP5kOg5yR/GbIhV2qSpiXyU8w8nuGXkqdPQijnjw99Va3U3dYh8c
oDnMJ86HtiSf8tQNn0OVKM0Rx0TlBe1JeEUFuB3kAz2wKqx7HfFIYmxGPsverjZr
hFWR9D0oa7lPAk9av/XN2Q9YU+tmpz16pZnL71tdWjC+0zJ36DnA5w5qwwK7sCJg
TnSRU3l2B7ptoSO59ytmaiMJcKTMZxYfbEAJyejGAa9PbgBu7D6YIkqM8RFv3alX
xj5ui3lscoz97areXDpYd20UdbXNTr9ayZ2TqDwk0zHOboCf9Gb2ntf4s2jT5Q7z
56cWyY4JcMEU6i4sBQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:06 2025 by rpki-client