Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
File: 3137372e3133372e34302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: k0kcH0mhWei73QXrorcloMtUUo0qmj+5Y1TXU9nAUCM=
Subject key identifier: 00:6A:78:18:BD:F3:A5:DD:6F:DA:C6:C5:37:1B:E9:89:E8:E5:35:33
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 0BA387B38B32DD399FF3FED74430A3A0AB403EDC
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:09 +0000
ROA not before: Thu 06 Mar 2025 04:37:09 +0000
ROA not after: Thu 05 Mar 2026 04:42:09 +0000
asID: 28210
IP address blocks: 177.137.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a3:87:b3:8b:32:dd:39:9f:f3:fe:d7:44:30:a3:a0:ab:40:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:09 2025 GMT
Not After : Mar 5 04:42:09 2026 GMT
Subject: CN=006A7818BDF3A5DD6FDAC6C5371BE989E8E53533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:48:98:dd:06:10:a3:d5:70:28:26:2d:22:
ae:60:23:53:d1:8b:3f:87:33:d1:d6:07:99:4d:d4:
a7:d9:53:a9:98:79:40:ee:32:a5:62:88:f0:bb:68:
eb:9b:8f:5a:b8:ed:58:00:65:96:b9:39:14:2e:94:
7f:b4:f0:71:8e:b6:b0:d9:18:d2:8e:d7:7a:75:2b:
ac:3d:0b:6a:f1:bf:03:37:f3:e1:d8:e9:3f:3b:38:
b1:bc:27:17:19:e4:89:93:4c:83:ab:b6:28:14:09:
7b:c3:0d:71:cf:cb:5e:ef:70:2c:c2:98:be:13:1a:
88:fb:37:e2:52:fe:1f:45:bc:81:48:83:e3:f4:45:
f0:b7:6f:b1:2c:e3:80:36:1a:96:db:4b:2e:4e:56:
9f:4e:9e:d9:16:d8:2a:48:cf:6f:be:e9:7e:b2:35:
71:61:8c:34:98:ef:a9:ed:b3:d3:6d:c8:ae:42:0b:
c4:1f:e8:34:46:dd:bc:48:47:76:c3:6f:d8:fa:3b:
c3:9e:31:fb:e4:9a:6a:e6:8d:9e:a2:b4:43:d7:f8:
70:5f:cd:d0:ae:e0:b6:49:52:8b:31:f7:4b:77:46:
5b:2e:8a:e8:4b:14:83:ab:1b:36:0f:92:76:1d:5b:
39:49:74:8b:4a:ad:f2:5d:02:f7:8c:fd:b4:21:e6:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:78:18:BD:F3:A5:DD:6F:DA:C6:C5:37:1B:E9:89:E8:E5:35:33
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.40.0/24
Signature Algorithm: sha256WithRSAEncryption
22:df:f9:93:63:d5:47:41:25:61:8f:44:30:31:18:b6:83:b7:
7d:2f:50:db:94:01:6e:aa:2f:2f:a7:29:08:65:fe:ae:4c:53:
f0:82:b4:d8:e5:b5:fc:47:00:a8:14:2a:c5:27:2a:6b:35:ec:
88:29:01:dc:83:d2:24:4a:40:18:1b:ec:f9:6d:ba:a2:1a:e4:
d5:cb:6a:84:2b:c6:e6:fc:db:b1:32:63:60:80:99:f8:b0:f3:
e1:64:cb:4b:00:bd:a0:ab:1a:5f:02:66:1c:db:3e:14:c4:a4:
9e:a1:cd:41:0d:dc:fe:9f:57:91:77:2b:ab:87:2e:e0:06:9e:
48:8f:7d:3a:0b:db:e4:89:e1:43:f4:19:94:24:8c:60:ef:31:
a3:79:1b:d4:d7:56:2b:b0:31:1a:6f:9e:02:42:4c:d2:cd:3e:
e1:25:a8:41:f3:3d:4f:4e:51:bd:f5:65:59:aa:d8:f2:c4:bf:
7a:12:29:20:7d:72:1a:c8:34:1c:14:25:f0:6c:1d:14:09:51:
99:d0:ea:b1:af:ba:a3:6c:80:b6:48:b2:4f:59:33:a6:c2:48:
be:7f:e2:03:f7:3f:8c:37:00:b5:f7:d5:bd:ab:49:b1:e1:46:
f2:2c:9e:48:a7:d9:e4:be:1a:2a:45:91:2a:2a:76:51:ed:3c:
44:42:4d:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC6OHs4sy3Tmf8/7XRDCjoKtAPtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MDlaFw0yNjAzMDUwNDQyMDlaMDMxMTAvBgNV
BAMTKDAwNkE3ODE4QkRGM0E1REQ2RkRBQzZDNTM3MUJFOTg5RThFNTM1MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tEiY3QYQo9VwKCYtIq5gI1PR
iz+HM9HWB5lN1KfZU6mYeUDuMqViiPC7aOubj1q47VgAZZa5ORQulH+08HGOtrDZ
GNKO13p1K6w9C2rxvwM38+HY6T87OLG8JxcZ5ImTTIOrtigUCXvDDXHPy17vcCzC
mL4TGoj7N+JS/h9FvIFIg+P0RfC3b7Es44A2GpbbSy5OVp9OntkW2CpIz2++6X6y
NXFhjDSY76nts9NtyK5CC8Qf6DRG3bxIR3bDb9j6O8OeMfvkmmrmjZ6itEPX+HBf
zdCu4LZJUosx90t3RlsuiuhLFIOrGzYPknYdWzlJdItKrfJdAveM/bQh5i+HAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAGp4GL3zpd1v2sbFNxvpiejlNTMwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzM3MmUzMTMzMzcyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYkoMA0GCSqGSIb3DQEBCwUAA4IBAQAi3/mTY9VH
QSVhj0QwMRi2g7d9L1DblAFuqi8vpykIZf6uTFPwgrTY5bX8RwCoFCrFJyprNeyI
KQHcg9IkSkAYG+z5bbqiGuTVy2qEK8bm/NuxMmNggJn4sPPhZMtLAL2gqxpfAmYc
2z4UxKSeoc1BDdz+n1eRdyurhy7gBp5Ij306C9vkieFD9BmUJIxg7zGjeRvU11Yr
sDEab54CQkzSzT7hJahB8z1PTlG99WVZqtjyxL96EikgfXIayDQcFCXwbB0UCVGZ
0Oqxr7qjbIC2SLJPWTOmwki+f+ID9z+MNwC199W9q0mx4UbyLJ5Ip9nkvhoqRZEq
KnZR7TxEQk2/
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:14 2025 by rpki-client