Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa
File: 3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa (raw, json)
Hash identifier: AW64jgftUDUbAKilM27C6+r6qZKstiNaPXcK//BEz8s=
Subject key identifier: EE:1F:94:53:F1:3D:A3:1E:B6:B6:3C:5C:16:B4:A3:99:A0:29:0C:2B
Certificate issuer: /CN=1844D4ED4AC2671A7742257A35431ED55286D36F
Certificate serial: 0A50558C8BEDD840B30568FA168F074BAA3C396E
Authority key identifier: 18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa
Signing time: Thu 06 Mar 2025 18:00:48 +0000
ROA not before: Thu 06 Mar 2025 17:55:48 +0000
ROA not after: Thu 05 Mar 2026 18:00:48 +0000
asID: 266484
IP address blocks: 170.83.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:50:55:8c:8b:ed:d8:40:b3:05:68:fa:16:8f:07:4b:aa:3c:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1844D4ED4AC2671A7742257A35431ED55286D36F
Validity
Not Before: Mar 6 17:55:48 2025 GMT
Not After : Mar 5 18:00:48 2026 GMT
Subject: CN=EE1F9453F13DA31EB6B63C5C16B4A399A0290C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:84:41:85:67:5c:1a:af:a5:99:08:08:19:
8c:81:80:1b:28:6c:1f:6e:a9:e8:8d:fe:0d:44:7e:
2c:48:4a:5a:34:36:55:e6:0d:3d:74:70:a2:72:00:
4c:8d:9d:1f:c0:b2:91:92:e2:e3:81:cd:21:57:a8:
5e:81:d5:ca:6f:50:7e:9d:8f:8d:ef:51:e6:81:01:
5a:21:ab:10:8b:00:c6:6b:ce:ad:db:4f:9b:c7:a9:
8f:9a:4f:e6:34:7d:d6:31:e1:53:cb:a8:ff:a8:8c:
9a:51:60:68:76:e6:9a:6d:fe:7e:28:8b:56:21:e7:
2f:de:b9:4f:88:13:c5:9f:ae:5b:01:a5:a3:aa:69:
be:ef:3c:a1:97:f1:14:5a:66:3a:31:47:15:a0:1b:
d2:e9:27:41:f8:6d:17:05:23:83:dd:2c:1d:5c:d6:
23:e5:5e:31:84:58:1d:f5:b4:fb:5a:6a:f8:eb:56:
66:d4:a9:44:fe:68:25:db:dc:fc:df:95:56:63:b4:
65:3f:e2:0b:36:dc:d7:e2:7e:b2:78:b1:a1:d5:62:
ea:ca:30:72:84:30:98:63:62:33:5a:7c:08:c2:22:
9e:d7:69:04:a5:b6:c7:ed:f1:5c:42:47:d4:e5:02:
9e:f7:d9:ee:2a:8a:29:52:d0:94:6c:c9:75:ee:b2:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:94:53:F1:3D:A3:1E:B6:B6:3C:5C:16:B4:A3:99:A0:29:0C:2B
X509v3 Authority Key Identifier:
keyid:18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.168.0/22
Signature Algorithm: sha256WithRSAEncryption
79:5b:61:cc:25:ce:66:87:3c:55:09:fe:13:6a:9e:69:99:32:
60:09:59:3f:73:c2:c2:82:69:0a:6b:c5:cd:61:a3:53:77:b1:
6c:e8:43:51:98:27:32:a1:e9:a9:d8:22:08:f4:7d:32:5b:56:
3b:b1:82:1e:95:0e:ce:31:09:f5:32:e2:ea:28:c6:0f:d7:4b:
89:7b:16:e6:b0:78:54:a5:91:cb:eb:d8:6c:cc:9b:f5:96:83:
9c:5e:e6:f6:4d:10:9e:02:fd:40:7f:9d:23:e0:8a:9f:b8:37:
62:c5:ff:2a:e2:a9:c4:4c:82:36:9a:3c:82:36:39:a3:c9:52:
44:da:ca:c5:b7:14:d9:f3:6f:ed:2f:21:09:bb:89:2b:83:b7:
dc:e4:e4:fd:57:da:72:2a:94:4a:20:eb:7f:b0:86:ed:27:9f:
4b:e3:fc:9a:7f:20:c6:df:f0:90:84:fa:40:6c:fb:a8:45:b4:
74:b3:5b:32:55:d2:7d:ff:34:0f:05:87:d2:a3:82:cb:89:7c:
bd:96:3b:73:18:b9:8d:48:4c:ad:64:bd:a0:0a:24:8d:ad:45:
ed:96:5d:f0:f6:44:dd:c6:8c:78:1e:b6:d4:5f:aa:1f:f6:15:
7b:f7:67:91:d5:36:5b:c7:1d:bd:73:9f:fd:3d:a2:e3:35:d0:
64:2b:5f:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUClBVjIvt2ECzBWj6Fo8HS6o8OW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg0NEQ0RUQ0QUMyNjcxQTc3NDIyNTdBMzU0MzFFRDU1
Mjg2RDM2RjAeFw0yNTAzMDYxNzU1NDhaFw0yNjAzMDUxODAwNDhaMDMxMTAvBgNV
BAMTKEVFMUY5NDUzRjEzREEzMUVCNkI2M0M1QzE2QjRBMzk5QTAyOTBDMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZ4RBhWdcGq+lmQgIGYyBgBso
bB9uqeiN/g1EfixISlo0NlXmDT10cKJyAEyNnR/AspGS4uOBzSFXqF6B1cpvUH6d
j43vUeaBAVohqxCLAMZrzq3bT5vHqY+aT+Y0fdYx4VPLqP+ojJpRYGh25ppt/n4o
i1Yh5y/euU+IE8WfrlsBpaOqab7vPKGX8RRaZjoxRxWgG9LpJ0H4bRcFI4PdLB1c
1iPlXjGEWB31tPtaavjrVmbUqUT+aCXb3PzflVZjtGU/4gs23NfifrJ4saHVYurK
MHKEMJhjYjNafAjCIp7XaQSltsft8VxCR9TlAp732e4qiilS0JRsyXXusvhLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7h+UU/E9ox62tjxcFrSjmaApDCswHwYDVR0j
BBgwFoAUGETU7UrCZxp3QiV6NUMe1VKG028wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNQdWV2RFJxa245YnZRdmlNY0RHWHd4UnlLN0tCQ05vYXZoRWZvZ1pW
dDUvMi8xODQ0RDRFRDRBQzI2NzFBNzc0MjI1N0EzNTQzMUVENTUyODZEMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4NDRENEVENEFDMjY3MUE3
NzQyMjU3QTM1NDMxRUQ1NTI4NkQzNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTUHVldkRScWtuOWJ2UXZpTWNER1h3eFJ5SzdLQkNOb2F2aEVmb2daVnQ1LzIv
MzEzNzMwMmUzODMzMmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqU6gwDQYJKoZIhvcNAQELBQADggEBAHlbYcwl
zmaHPFUJ/hNqnmmZMmAJWT9zwsKCaQprxc1ho1N3sWzoQ1GYJzKh6anYIgj0fTJb
Vjuxgh6VDs4xCfUy4uooxg/XS4l7FuaweFSlkcvr2GzMm/WWg5xe5vZNEJ4C/UB/
nSPgip+4N2LF/yriqcRMgjaaPII2OaPJUkTaysW3FNnzb+0vIQm7iSuDt9zk5P1X
2nIqlEog63+whu0nn0vj/Jp/IMbf8JCE+kBs+6hFtHSzWzJV0n3/NA8Fh9KjgsuJ
fL2WO3MYuY1ITK1kvaAKJI2tRe2WXfD2RN3GjHgettRfqh/2FXv3Z5HVNlvHHb1z
n/09ouM10GQrXzc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:48 2025 by rpki-client