Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139372e302f32342d3234203d3e203238323130.roa
File: 3137302e3233382e3139372e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: ZzKqtnUOEKFUaWcTFgn/Wr9rsma1EHT4DjuatbCPVDQ=
Subject key identifier: 98:EB:4B:18:1F:45:B3:F0:C8:49:34:3F:A1:8B:AD:E1:D0:E6:01:7C
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 0EBD972DB0EEB88F10E45F8E753067F639D53EDD
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139372e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:09 +0000
ROA not before: Thu 06 Mar 2025 04:37:09 +0000
ROA not after: Thu 05 Mar 2026 04:42:09 +0000
asID: 28210
IP address blocks: 170.238.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bd:97:2d:b0:ee:b8:8f:10:e4:5f:8e:75:30:67:f6:39:d5:3e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:09 2025 GMT
Not After : Mar 5 04:42:09 2026 GMT
Subject: CN=98EB4B181F45B3F0C849343FA18BADE1D0E6017C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:81:c6:b3:23:4f:7d:61:0b:70:c5:c9:6f:
08:f1:3e:ca:9f:60:e0:8c:43:ca:a5:ee:ce:56:40:
94:d5:9d:c1:14:8c:2f:5e:7e:07:b3:82:af:74:8d:
35:a0:fc:2d:0e:59:61:db:d8:7e:63:18:7a:43:37:
f4:9d:58:da:65:4d:2a:3e:c1:d2:2d:19:71:1e:c0:
a7:24:31:ab:ef:03:79:37:e3:62:e4:4f:c8:09:2b:
24:a5:bb:23:01:e8:2b:0e:a4:4b:d8:9c:6c:96:01:
b2:b1:82:20:b7:be:be:15:7a:f8:79:49:4f:79:ed:
67:7b:cc:6f:5a:4c:c4:b9:2f:63:ae:67:4e:20:82:
3c:fd:90:08:62:b0:3a:57:2e:99:ef:ac:2c:f7:b9:
a1:93:a2:da:16:70:9c:2d:c2:ef:23:89:ab:b2:68:
61:f1:e6:f0:ea:49:16:d5:9d:c9:7e:4d:35:6c:ed:
08:4d:99:48:a2:70:d7:67:1b:6c:1c:bc:cc:dd:f0:
fb:8d:98:4c:5e:98:dc:4a:43:3f:b9:2a:59:0f:31:
0b:b8:38:f9:1c:f5:eb:bc:8b:ad:ff:88:57:2d:9d:
3c:69:8c:74:dd:ca:54:00:e9:3c:1c:6b:fc:3e:9b:
46:4c:2b:3e:2f:0a:94:5a:88:78:86:c2:f5:a0:1e:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:4B:18:1F:45:B3:F0:C8:49:34:3F:A1:8B:AD:E1:D0:E6:01:7C
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139372e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.197.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6a:e0:3c:86:98:2b:aa:91:32:8e:88:ed:dc:d9:ef:27:21:
53:eb:04:a8:2e:2f:2a:dc:f8:9b:4d:6c:70:89:c5:df:97:90:
b1:ef:61:a7:3e:73:cb:3c:92:56:93:8b:91:b0:5b:d6:c1:f3:
16:91:9e:3a:b6:bf:0e:1a:41:2d:41:8d:77:02:30:7f:ea:38:
00:fc:ee:a6:e5:7e:6d:4b:c6:d8:39:36:30:64:93:12:8b:5d:
10:94:77:01:a4:96:13:0c:12:b4:77:d0:8a:f0:74:29:87:a5:
67:b6:47:e4:91:1b:21:fb:a3:96:00:08:15:20:29:70:0b:b3:
9f:76:b0:2f:7e:3c:a6:54:e3:ae:9a:ca:9a:c5:bc:43:3b:10:
77:48:9a:f4:46:f2:ea:02:1a:5b:b9:88:21:e1:b9:f9:99:14:
bd:8e:3d:7d:85:25:c8:65:4c:e9:83:9a:3d:f7:0b:b2:db:5b:
41:8d:ff:93:38:ea:a9:57:bc:1a:3f:14:93:8c:ba:73:5d:fc:
b5:48:92:0f:f3:9c:34:4e:8f:ba:3b:56:b2:13:a2:cc:7d:dc:
2b:e3:87:44:4b:cf:53:43:ad:79:b0:c5:30:0d:2a:b6:88:2f:
a3:b7:80:9c:6b:ee:4e:5e:da:8e:a8:e8:e8:05:ba:65:a4:87:
86:34:46:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDr2XLbDuuI8Q5F+OdTBn9jnVPt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MDlaFw0yNjAzMDUwNDQyMDlaMDMxMTAvBgNV
BAMTKDk4RUI0QjE4MUY0NUIzRjBDODQ5MzQzRkExOEJBREUxRDBFNjAxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1oHGsyNPfWELcMXJbwjxPsqf
YOCMQ8ql7s5WQJTVncEUjC9efgezgq90jTWg/C0OWWHb2H5jGHpDN/SdWNplTSo+
wdItGXEewKckMavvA3k342LkT8gJKySluyMB6CsOpEvYnGyWAbKxgiC3vr4Vevh5
SU957Wd7zG9aTMS5L2OuZ04ggjz9kAhisDpXLpnvrCz3uaGTotoWcJwtwu8jiauy
aGHx5vDqSRbVncl+TTVs7QhNmUiicNdnG2wcvMzd8PuNmExemNxKQz+5KlkPMQu4
OPkc9eu8i63/iFctnTxpjHTdylQA6Twca/w+m0ZMKz4vCpRaiHiGwvWgHjnxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmOtLGB9Fs/DISTQ/oYut4dDmAXwwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzMwMmUzMjMzMzgyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq7sUwDQYJKoZIhvcNAQELBQADggEBAHJq4DyG
mCuqkTKOiO3c2e8nIVPrBKguLyrc+JtNbHCJxd+XkLHvYac+c8s8klaTi5GwW9bB
8xaRnjq2vw4aQS1BjXcCMH/qOAD87qblfm1Lxtg5NjBkkxKLXRCUdwGklhMMErR3
0IrwdCmHpWe2R+SRGyH7o5YACBUgKXALs592sC9+PKZU466ayprFvEM7EHdImvRG
8uoCGlu5iCHhufmZFL2OPX2FJchlTOmDmj33C7LbW0GN/5M46qlXvBo/FJOMunNd
/LVIkg/znDROj7o7VrITosx93Cvjh0RLz1NDrXmwxTANKraIL6O3gJxr7k5e2o6o
6OgFumWkh4Y0RuQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:50:18 2025 by rpki-client