Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
File: 3139312e3234332e39312e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: chAOavIBaODNEmQAWurMf1vTWdUsJV5lXY3gL8yzcZQ=
Subject key identifier: D3:68:90:9E:C4:3F:9A:23:43:91:B4:EA:BA:A7:AE:D5:9A:F9:97:1E
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 7F433D613C9C9750CBFFC117D7902299FA110859
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:11 +0000
ROA not before: Thu 06 Mar 2025 04:37:11 +0000
ROA not after: Thu 05 Mar 2026 04:42:11 +0000
asID: 28210
IP address blocks: 191.243.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:43:3d:61:3c:9c:97:50:cb:ff:c1:17:d7:90:22:99:fa:11:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:11 2025 GMT
Not After : Mar 5 04:42:11 2026 GMT
Subject: CN=D368909EC43F9A234391B4EABAA7AED59AF9971E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:1e:c9:1a:e8:5a:b1:48:ed:41:be:de:2c:
a0:82:d3:32:08:3e:de:23:15:50:5d:ff:72:67:1b:
62:83:92:77:e2:16:98:23:fc:eb:66:73:ad:28:37:
2d:8c:3b:66:a6:85:52:d4:f9:86:8f:3d:05:30:59:
9c:0b:be:eb:5e:4a:b9:38:d1:1e:0f:b2:03:19:06:
e7:a5:8a:4b:a3:46:8b:05:34:59:6c:ad:25:19:bb:
ad:85:97:5a:64:b2:be:06:ec:49:94:1c:7c:32:4d:
98:5b:48:3e:1a:e9:42:92:fa:4d:1b:cd:1f:92:0a:
81:9f:85:e0:32:13:9e:a0:0a:6b:e8:1c:47:c3:52:
c4:9b:94:e5:24:6d:a5:ef:6f:c7:fc:50:71:21:ac:
f9:6b:1e:b1:13:ea:a0:fa:35:34:5a:ba:84:c1:bf:
2a:66:de:66:d9:8d:b6:17:79:ef:f6:c1:d7:b3:3c:
7a:68:cf:59:d5:10:76:d4:14:a3:36:25:e1:2a:f8:
60:7e:b1:51:4b:dc:b7:2a:2d:d2:ab:45:c9:60:05:
d3:15:2f:b4:33:4d:c3:aa:24:bd:fa:65:ad:72:7b:
06:ca:a3:91:6e:1a:36:3a:62:2a:4c:fc:27:b8:de:
8d:4c:ad:4f:5a:9e:ce:e7:c9:cf:3d:3e:c0:7b:bc:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:90:9E:C4:3F:9A:23:43:91:B4:EA:BA:A7:AE:D5:9A:F9:97:1E
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b6:20:80:5f:75:e6:a6:9d:ba:07:a5:55:35:5a:b6:95:9c:
5e:08:35:78:a2:c5:c6:a0:e4:fe:80:ec:3e:53:59:49:a7:24:
0d:65:07:fd:38:9e:79:b1:2b:56:03:68:a8:d2:22:e4:b1:3b:
32:57:ea:8d:3b:ba:bc:46:c2:41:74:31:ee:85:8f:29:71:9b:
f9:47:d2:36:e2:a4:d0:11:5b:3d:0c:16:dc:0c:92:59:a2:97:
12:2e:bd:0e:4e:a2:8e:a9:f2:5f:b6:9c:2e:dc:74:50:ed:b7:
b4:96:40:52:1d:f0:0c:78:55:99:3e:28:8b:a9:20:f0:37:e0:
71:c8:72:16:4c:52:66:6d:14:69:35:93:ee:12:ee:86:bc:f7:
96:ec:58:11:0f:f7:45:19:07:9b:b2:4e:ca:dc:5f:0d:86:af:
7e:f4:36:42:26:21:39:95:f0:01:9b:91:29:c8:d5:6a:49:84:
e7:17:06:43:1e:73:be:c9:76:90:cb:57:16:77:dd:f0:1b:14:
fd:41:0f:d1:2b:0b:a7:4b:26:99:2b:68:6f:b5:6f:70:2f:7f:
da:9e:94:bc:cf:14:19:3e:f9:e8:95:e3:8c:06:7e:ea:c1:d1:
c1:64:cc:22:8e:e3:d2:00:d2:78:d8:fc:ad:e2:25:c0:7a:52:
28:b1:16:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf0M9YTycl1DL/8EX15AimfoRCFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MTFaFw0yNjAzMDUwNDQyMTFaMDMxMTAvBgNV
BAMTKEQzNjg5MDlFQzQzRjlBMjM0MzkxQjRFQUJBQTdBRUQ1OUFGOTk3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpR7JGuhasUjtQb7eLKCC0zII
Pt4jFVBd/3JnG2KDknfiFpgj/Otmc60oNy2MO2amhVLU+YaPPQUwWZwLvuteSrk4
0R4PsgMZBuelikujRosFNFlsrSUZu62Fl1pksr4G7EmUHHwyTZhbSD4a6UKS+k0b
zR+SCoGfheAyE56gCmvoHEfDUsSblOUkbaXvb8f8UHEhrPlrHrET6qD6NTRauoTB
vypm3mbZjbYXee/2wdezPHpoz1nVEHbUFKM2JeEq+GB+sVFL3LcqLdKrRclgBdMV
L7QzTcOqJL36Za1yewbKo5FuGjY6YipM/Ce43o1MrU9ans7nyc89PsB7vHfdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU02iQnsQ/miNDkbTquqeu1Zr5lx4wHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzOTMxMmUzMjM0MzMyZTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAv/NbMA0GCSqGSIb3DQEBCwUAA4IBAQDDtiCAX3Xm
pp26B6VVNVq2lZxeCDV4osXGoOT+gOw+U1lJpyQNZQf9OJ55sStWA2io0iLksTsy
V+qNO7q8RsJBdDHuhY8pcZv5R9I24qTQEVs9DBbcDJJZopcSLr0OTqKOqfJftpwu
3HRQ7be0lkBSHfAMeFWZPiiLqSDwN+BxyHIWTFJmbRRpNZPuEu6GvPeW7FgRD/dF
GQebsk7K3F8Nhq9+9DZCJiE5lfABm5EpyNVqSYTnFwZDHnO+yXaQy1cWd93wGxT9
QQ/RKwunSyaZK2hvtW9wL3/anpS8zxQZPvnoleOMBn7qwdHBZMwijuPSANJ42Pyt
4iXAelIosRZZ
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:50:16 2025 by rpki-client