Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137392e3139312e3139322e302f31392d3234203d3e203238323130.roa
File: 3137392e3139312e3139322e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier: OB6A5zPdhYKGWT2SHxtm26AS1vtXSMzSNPv4nVctePU=
Subject key identifier: 5A:79:5B:04:CE:C8:3B:D6:F2:6B:94:31:CF:EE:73:18:A4:50:13:EB
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 5907F7D6901D915329C37ABB751994F13AD6DEDE
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137392e3139312e3139322e302f31392d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:10 +0000
ROA not before: Thu 06 Mar 2025 04:37:10 +0000
ROA not after: Thu 05 Mar 2026 04:42:10 +0000
asID: 28210
IP address blocks: 179.191.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:07:f7:d6:90:1d:91:53:29:c3:7a:bb:75:19:94:f1:3a:d6:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:10 2025 GMT
Not After : Mar 5 04:42:10 2026 GMT
Subject: CN=5A795B04CEC83BD6F26B9431CFEE7318A45013EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:40:52:b2:ec:79:fc:98:a5:d5:ca:fa:9d:
61:de:7a:d9:bb:96:4a:42:d4:ae:73:13:6d:7e:18:
e2:f6:6d:ee:ea:5a:75:f1:2f:a5:ea:64:13:d0:53:
45:46:be:cc:05:01:20:98:91:97:b3:9e:f5:39:99:
f7:94:d4:74:dd:9e:2d:25:a3:87:8a:39:c3:0e:d3:
e8:13:41:7e:4e:0b:b7:f9:9a:23:d7:f2:3e:a8:33:
5c:d6:90:75:13:25:c8:64:80:4e:45:c0:7c:f8:f8:
e1:9a:0d:12:0f:7a:c1:a3:be:47:1b:1b:29:ff:b3:
1b:00:cc:f9:01:2e:8e:31:bd:d6:16:83:bb:90:2a:
53:31:36:1c:79:3a:43:a5:4c:1d:b5:1b:2b:38:27:
89:7f:0b:c1:97:cd:be:11:e2:0c:3e:17:21:2e:bd:
9b:f5:53:09:e9:82:5f:f7:19:69:bd:27:1c:be:da:
38:7a:22:e7:b1:a0:f7:47:a9:be:40:1e:b0:99:d3:
d6:8e:c4:82:46:90:30:3a:1b:93:51:95:ce:e4:4a:
cb:14:bc:b8:ea:36:30:fc:b2:ea:7a:f4:88:bf:e7:
8f:3c:7e:f9:9e:5c:d1:eb:cf:03:c3:f2:9f:55:2a:
f8:fe:da:15:7d:e2:77:30:f4:be:0b:4d:85:6a:b8:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:5B:04:CE:C8:3B:D6:F2:6B:94:31:CF:EE:73:18:A4:50:13:EB
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137392e3139312e3139322e302f31392d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.191.192.0/19
Signature Algorithm: sha256WithRSAEncryption
83:15:41:7c:c4:c8:d6:33:f0:58:b1:41:19:d8:42:6a:c2:ca:
31:d3:b2:3e:fe:30:33:0a:52:27:52:60:e4:2f:d0:10:7b:c7:
c6:50:b0:de:69:4e:42:16:2e:e0:a7:48:74:b9:c2:54:3d:61:
bb:31:69:7b:35:03:7f:68:ab:13:0f:0a:be:96:21:6b:ce:2a:
35:a8:25:a9:f6:2b:b3:e3:bb:6a:61:37:19:57:b4:87:9a:f0:
c3:5d:66:5c:c5:99:4e:5b:bd:d6:80:c6:9f:43:22:b0:80:28:
d5:72:8f:f4:21:a0:0e:3e:b9:bd:1d:ec:86:18:f1:65:ce:67:
21:a9:5f:11:8b:58:86:fd:61:79:49:c7:98:19:61:08:b5:94:
79:69:00:cb:bc:c3:94:00:e4:b8:23:38:c9:6b:4b:69:03:7f:
12:fc:ce:61:85:f7:ec:6a:32:20:fb:48:66:89:f7:b7:e5:28:
cb:f2:2d:d7:01:fb:c0:fd:a3:78:a0:de:6e:9e:36:52:ef:c7:
08:1f:74:c3:ad:3f:eb:8f:e5:4c:06:28:26:59:33:49:3e:b8:
29:c0:33:88:24:9a:5d:0e:b5:1d:f5:9a:12:94:6c:fb:3c:e3:
1b:d1:bf:c4:35:37:1e:e9:db:93:62:9f:71:fe:3d:dc:b6:53:
52:1b:78:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWQf31pAdkVMpw3q7dRmU8TrW3t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MTBaFw0yNjAzMDUwNDQyMTBaMDMxMTAvBgNV
BAMTKDVBNzk1QjA0Q0VDODNCRDZGMjZCOTQzMUNGRUU3MzE4QTQ1MDEzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMEBSsux5/Jil1cr6nWHeetm7
lkpC1K5zE21+GOL2be7qWnXxL6XqZBPQU0VGvswFASCYkZeznvU5mfeU1HTdni0l
o4eKOcMO0+gTQX5OC7f5miPX8j6oM1zWkHUTJchkgE5FwHz4+OGaDRIPesGjvkcb
Gyn/sxsAzPkBLo4xvdYWg7uQKlMxNhx5OkOlTB21Gys4J4l/C8GXzb4R4gw+FyEu
vZv1Uwnpgl/3GWm9Jxy+2jh6IuexoPdHqb5AHrCZ09aOxIJGkDA6G5NRlc7kSssU
vLjqNjD8sup69Ii/5488fvmeXNHrzwPD8p9VKvj+2hV94ncw9L4LTYVquBI7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWnlbBM7IO9bya5Qxz+5zGKRQE+swHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzM5MmUzMTM5MzEyZTMxMzkzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWzv8AwDQYJKoZIhvcNAQELBQADggEBAIMVQXzE
yNYz8FixQRnYQmrCyjHTsj7+MDMKUidSYOQv0BB7x8ZQsN5pTkIWLuCnSHS5wlQ9
YbsxaXs1A39oqxMPCr6WIWvOKjWoJan2K7Pju2phNxlXtIea8MNdZlzFmU5bvdaA
xp9DIrCAKNVyj/QhoA4+ub0d7IYY8WXOZyGpXxGLWIb9YXlJx5gZYQi1lHlpAMu8
w5QA5LgjOMlrS2kDfxL8zmGF9+xqMiD7SGaJ97flKMvyLdcB+8D9o3ig3m6eNlLv
xwgfdMOtP+uP5UwGKCZZM0k+uCnAM4gkml0OtR31mhKUbPs84xvRv8Q1Nx7p25Ni
n3H+Pdy2U1IbeN8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:34 2025 by rpki-client