Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e39322e302f32322d3234203d3e203238363436.roa
File: 3230312e37372e39322e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier: eEVNn1rQ3k5uCuGUpUKEA0pJrw1XkGwyMVKPYRMbrZA=
Subject key identifier: A8:89:2E:5A:CE:14:75:26:AE:A2:98:D3:AE:E1:04:65:28:F6:C4:AF
Certificate issuer: /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial: 0270B469E5926939A711B12C2F7F6688FA023137
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e39322e302f32322d3234203d3e203238363436.roa
Signing time: Thu 06 Mar 2025 11:33:11 +0000
ROA not before: Thu 06 Mar 2025 11:28:11 +0000
ROA not after: Thu 05 Mar 2026 11:33:11 +0000
asID: 28646
IP address blocks: 201.77.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:70:b4:69:e5:92:69:39:a7:11:b1:2c:2f:7f:66:88:fa:02:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Validity
Not Before: Mar 6 11:28:11 2025 GMT
Not After : Mar 5 11:33:11 2026 GMT
Subject: CN=A8892E5ACE147526AEA298D3AEE1046528F6C4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:9e:2f:07:42:05:07:f8:f4:33:4b:96:91:
7e:a3:ff:7e:3c:54:64:ab:7b:4a:ca:a8:21:ac:85:
30:ad:e0:81:62:39:6d:8e:1d:33:dc:bf:80:47:71:
4f:1f:7f:80:5d:b2:43:5e:42:b0:f4:2c:5e:a9:d7:
6e:91:a3:67:5d:20:20:b2:3f:a5:b1:0f:0c:f9:a1:
6b:11:1c:1b:24:dd:be:3d:0b:ec:6f:75:1c:e9:c5:
ba:88:b6:4f:2e:63:bc:61:2f:a1:7c:12:0a:58:88:
3f:98:53:ae:bf:56:59:5d:ac:cb:e4:fa:21:83:4b:
96:4e:15:af:9b:cb:10:c1:3a:8e:2a:b9:d4:7e:27:
26:82:e7:85:3b:a2:c2:7d:d1:a7:b3:73:d0:44:d7:
4e:84:07:fb:2e:94:9b:60:4b:62:6b:a1:a8:a5:96:
ab:66:22:83:d5:4a:ac:cc:61:c1:5e:e7:02:98:6f:
34:39:79:32:3f:e6:8f:3e:47:ae:b0:ae:74:58:4a:
71:0b:d0:3c:e9:1f:10:1b:26:8e:1c:69:0d:f9:0c:
81:22:2a:d7:a5:be:7e:a1:20:82:ac:ce:ce:d9:34:
7c:f1:d5:e3:18:ff:5d:5f:df:de:0a:f6:a2:81:6e:
ec:4d:11:f3:bf:88:96:10:47:f9:b2:36:3d:bb:0b:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:2E:5A:CE:14:75:26:AE:A2:98:D3:AE:E1:04:65:28:F6:C4:AF
X509v3 Authority Key Identifier:
keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e39322e302f32322d3234203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.92.0/22
Signature Algorithm: sha256WithRSAEncryption
10:3f:ff:75:c2:65:e9:98:a7:a0:e8:45:6f:49:6e:03:c4:33:
c6:3c:9e:4c:ff:16:2e:30:e6:23:12:92:7a:e5:3c:55:2c:03:
73:98:e1:9d:53:a8:ef:9f:92:10:7d:a2:8e:9b:ef:d3:9f:3d:
c0:14:07:df:e2:1f:6d:88:66:a9:a6:4f:37:c8:b7:28:6a:21:
23:02:58:99:d3:cb:86:77:94:0e:15:32:ec:b3:89:08:74:3c:
eb:4b:7a:a9:cb:b2:3a:4e:9b:18:9c:f4:09:ed:2e:3c:00:30:
17:4e:e2:f5:c5:56:1b:6b:39:57:36:64:db:fa:d2:ef:c3:f3:
47:7a:cf:f3:b6:cd:32:3e:ad:96:31:c2:d3:a8:ab:78:f4:b3:
0e:b2:94:03:e2:1d:4a:28:f1:ec:6f:ca:70:24:14:47:da:ae:
07:c9:6c:f9:fa:57:7a:7a:ce:1b:8a:aa:f0:97:54:50:44:51:
65:79:d8:d2:5b:39:18:f0:72:a7:8f:b4:f9:b9:2f:76:7a:cc:
5a:be:fe:9a:82:8b:cf:20:53:26:73:15:8d:5e:d4:3c:40:f6:
8e:e2:ec:f8:5d:93:08:32:ec:12:7e:b6:9c:0e:cc:c5:db:6a:
cb:19:a6:82:48:24:82:3d:f6:eb:27:7b:9a:73:54:df:8e:cd:
5d:bc:b9:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAnC0aeWSaTmnEbEsL39miPoCMTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ0MUNBQkY5MTI4QzFDQkFDNEJCNjQxRTc3Qjg2RDEz
MDk4QkM2RDAeFw0yNTAzMDYxMTI4MTFaFw0yNjAzMDUxMTMzMTFaMDMxMTAvBgNV
BAMTKEE4ODkyRTVBQ0UxNDc1MjZBRUEyOThEM0FFRTEwNDY1MjhGNkM0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEJ4vB0IFB/j0M0uWkX6j/348
VGSre0rKqCGshTCt4IFiOW2OHTPcv4BHcU8ff4BdskNeQrD0LF6p126Ro2ddICCy
P6WxDwz5oWsRHBsk3b49C+xvdRzpxbqItk8uY7xhL6F8EgpYiD+YU66/VlldrMvk
+iGDS5ZOFa+byxDBOo4qudR+JyaC54U7osJ90aezc9BE106EB/sulJtgS2Jroail
lqtmIoPVSqzMYcFe5wKYbzQ5eTI/5o8+R66wrnRYSnEL0DzpHxAbJo4caQ35DIEi
Ktelvn6hIIKszs7ZNHzx1eMY/11f394K9qKBbuxNEfO/iJYQR/myNj27Cy8lAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqIkuWs4UdSauopjTruEEZSj2xK8wHwYDVR0j
BBgwFoAUjUHKv5EowcusS7ZB53uG0TCYvG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFkc0dUc3hXQ3hQRUdUUVF1YWpOU2E0OFI0dkRFNE1nVnc1dkJhYmdF
THgvMS84RDQxQ0FCRjkxMjhDMUNCQUM0QkI2NDFFNzdCODZEMTMwOThCQzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENDFDQUJGOTEyOEMxQ0JB
QzRCQjY0MUU3N0I4NkQxMzA5OEJDNkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxZHNHVHN4V0N4UEVHVFFRdWFqTlNhNDhSNHZERTRNZ1Z3NXZCYWJnRUx4LzEv
MzIzMDMxMmUzNzM3MmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODM2
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAslNXDANBgkqhkiG9w0BAQsFAAOCAQEAED//dcJl6Zin
oOhFb0luA8QzxjyeTP8WLjDmIxKSeuU8VSwDc5jhnVOo75+SEH2ijpvv0589wBQH
3+IfbYhmqaZPN8i3KGohIwJYmdPLhneUDhUy7LOJCHQ860t6qcuyOk6bGJz0Ce0u
PAAwF07i9cVWG2s5VzZk2/rS78PzR3rP87bNMj6tljHC06irePSzDrKUA+IdSijx
7G/KcCQUR9quB8ls+fpXenrOG4qq8JdUUERRZXnY0ls5GPByp4+0+bkvdnrMWr7+
moKLzyBTJnMVjV7UPED2juLs+F2TCDLsEn62nA7Mxdtqyxmmgkgkgj326yd7mnNU
347NXby5Cg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:23 2025 by rpki-client