Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa
File: 3139312e33372e34302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: 1R35SSEDeToQonZ5sE8hYhPynO/VXbuqjl5jDGiONhU=
Subject key identifier: BA:D7:D5:A8:18:FB:2C:84:6C:67:DF:52:F1:15:CA:19:76:07:A7:A3
Certificate issuer: /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial: 2FF1BFBDBF7AE11363F5F76DF78166B023F08F10
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa
Signing time: Fri 18 Aug 2023 11:00:05 +0000
ROA not before: Fri 18 Aug 2023 10:55:05 +0000
ROA not after: Fri 16 Aug 2024 11:00:05 +0000
asID: 263347
IP address blocks: 191.37.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f1:bf:bd:bf:7a:e1:13:63:f5:f7:6d:f7:81:66:b0:23:f0:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
Validity
Not Before: Aug 18 10:55:05 2023 GMT
Not After : Aug 16 11:00:05 2024 GMT
Subject: CN=BAD7D5A818FB2C846C67DF52F115CA197607A7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:f7:3b:0f:57:44:88:c9:f1:48:23:87:6f:
db:8f:a5:f8:ea:69:6f:c5:fd:99:7a:b5:46:22:c9:
93:e7:de:c4:e3:ee:7a:01:cc:09:b1:4b:d6:be:2f:
96:5c:14:fa:9d:6e:aa:a3:49:83:e7:43:03:4a:97:
b4:52:dd:67:39:2c:55:f5:51:ca:66:8c:af:f1:4f:
a7:da:28:a9:5b:3c:fb:ee:a2:f0:e1:e9:55:f5:24:
70:48:28:67:6f:28:2b:eb:6d:1a:06:70:d5:d6:49:
b3:6a:49:31:0b:1f:ad:76:e9:60:b0:6b:f7:75:6e:
d0:c4:a8:19:e8:0f:1c:05:d4:e1:83:4e:b7:ea:6c:
ba:5b:86:39:cc:da:d1:db:69:d7:9a:37:e0:23:aa:
59:c9:85:27:9f:07:92:83:24:fc:fa:64:6d:ed:a7:
30:5b:8d:53:3d:a7:73:32:d6:ea:75:e3:a8:d6:43:
cc:30:44:b4:36:18:cc:35:b1:e5:a3:fb:4b:1f:bf:
4d:84:bf:a3:7b:85:c4:0e:db:a3:db:2c:6e:59:71:
cc:9f:16:11:6a:55:20:50:b5:96:d3:1c:02:9e:e9:
b8:52:33:76:22:fa:96:6b:18:8c:8d:67:36:f1:0f:
de:06:8a:fd:5a:04:29:22:e5:4b:64:26:52:82:1f:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:D5:A8:18:FB:2C:84:6C:67:DF:52:F1:15:CA:19:76:07:A7:A3
X509v3 Authority Key Identifier:
keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.40.0/23
Signature Algorithm: sha256WithRSAEncryption
83:41:5a:0f:2f:d8:ac:d2:4c:9f:9d:d9:85:ad:a3:5e:2f:27:
5e:76:ca:dc:b1:f6:8a:d0:12:8a:05:6f:d4:18:dc:89:4d:2c:
2f:85:65:b8:89:ae:f8:0d:26:ff:0a:1f:b7:87:a8:20:99:59:
8c:db:31:1a:4b:29:96:24:97:1b:61:4f:98:03:14:a8:6a:eb:
98:15:84:2c:47:61:11:6d:0b:50:ac:95:7e:64:47:b6:de:08:
55:98:37:3b:ba:07:41:88:2c:08:cd:b1:22:a2:2a:a6:fc:e1:
96:c6:30:29:ec:b6:9c:8b:9d:90:e9:57:54:65:aa:80:60:d8:
d3:4c:43:ab:ab:0b:42:65:4b:00:e5:09:60:2b:6b:2f:4b:6c:
5d:d7:f5:d0:fe:55:67:62:7d:3e:20:63:43:db:a2:6c:65:8b:
23:0c:38:fe:92:b9:a9:80:ba:cf:d6:64:92:a9:cf:93:31:0b:
17:78:b2:b6:3a:c8:fb:0f:bc:3c:8c:b3:78:2f:45:26:02:28:
a9:7b:39:f2:5d:ae:28:5c:80:4b:24:a0:6b:97:2f:15:27:55:
fa:c1:d5:26:39:3c:93:77:1d:59:ee:98:1c:87:73:f0:48:11:
07:d0:d1:15:c9:12:9b:21:4b:dc:86:d2:24:46:e4:84:ac:bf:
13:29:a8:fe
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL/G/vb964RNj9fdt94FmsCPwjxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA4MTgxMDU1MDVaFw0yNDA4MTYxMTAwMDVaMDMxMTAvBgNV
BAMTKEJBRDdENUE4MThGQjJDODQ2QzY3REY1MkYxMTVDQTE5NzYwN0E3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTfc7D1dEiMnxSCOHb9uPpfjq
aW/F/Zl6tUYiyZPn3sTj7noBzAmxS9a+L5ZcFPqdbqqjSYPnQwNKl7RS3Wc5LFX1
UcpmjK/xT6faKKlbPPvuovDh6VX1JHBIKGdvKCvrbRoGcNXWSbNqSTELH6126WCw
a/d1btDEqBnoDxwF1OGDTrfqbLpbhjnM2tHbadeaN+AjqlnJhSefB5KDJPz6ZG3t
pzBbjVM9p3My1up146jWQ8wwRLQ2GMw1seWj+0sfv02Ev6N7hcQO26PbLG5Zccyf
FhFqVSBQtZbTHAKe6bhSM3Yi+pZrGIyNZzbxD94Giv1aBCki5UtkJlKCHwZ5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUutfVqBj7LIRsZ99S8RXKGXYHp6MwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUoMA0GCSqGSIb3DQEBCwUAA4IBAQCDQVoPL9is
0kyfndmFraNeLydedsrcsfaK0BKKBW/UGNyJTSwvhWW4ia74DSb/Ch+3h6ggmVmM
2zEaSymWJJcbYU+YAxSoauuYFYQsR2ERbQtQrJV+ZEe23ghVmDc7ugdBiCwIzbEi
oiqm/OGWxjAp7Laci52Q6VdUZaqAYNjTTEOrqwtCZUsA5QlgK2svS2xd1/XQ/lVn
Yn0+IGND26JsZYsjDDj+krmpgLrP1mSSqc+TMQsXeLK2Osj7D7w8jLN4L0UmAiip
eznyXa4oXIBLJKBrly8VJ1X6wdUmOTyTdx1Z7pgch3PwSBEH0NEVyRKbIUvchtIk
RuSErL8TKaj+
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:14:14 2025 by rpki-client