Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa
File: 3230312e38372e3135382e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier: CE1dxW9hzKKDdr3KgbY/jnUBYjAvPLjg95xkJ/MVSL8=
Subject key identifier: ED:5E:D7:CD:09:2A:57:C5:E8:DC:21:B5:18:7A:2D:EB:3E:73:FE:A0
Certificate issuer: /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial: 596AB0E7AF391AA32B58EAC06A6041BC31FB9226
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa
Signing time: Fri 07 Mar 2025 19:07:13 +0000
ROA not before: Fri 07 Mar 2025 19:02:13 +0000
ROA not after: Fri 06 Mar 2026 19:07:13 +0000
asID: 22381
IP address blocks: 201.87.158.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6a:b0:e7:af:39:1a:a3:2b:58:ea:c0:6a:60:41:bc:31:fb:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Validity
Not Before: Mar 7 19:02:13 2025 GMT
Not After : Mar 6 19:07:13 2026 GMT
Subject: CN=ED5ED7CD092A57C5E8DC21B5187A2DEB3E73FEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:d0:c7:a9:fb:78:44:b8:01:cc:61:81:0f:
f9:b8:3e:ba:ef:65:be:6c:2b:a7:b0:70:0a:e7:78:
25:8d:fc:4e:12:a9:2f:74:02:6f:63:db:32:9c:3c:
0a:05:fb:d1:a5:d9:82:b9:3a:03:56:d0:7e:ea:fd:
07:6a:95:98:8a:b3:cf:d8:81:47:a4:e6:73:2c:6d:
2b:26:a7:21:49:db:af:1d:b2:d6:9b:ad:4d:1c:ce:
bb:d1:aa:3b:10:bb:b7:c9:e0:ef:54:8f:13:c1:4b:
94:2d:dc:9c:64:0e:15:33:07:1d:6c:48:27:ed:5b:
20:23:89:09:7d:20:25:b6:fd:c6:ca:ca:7f:1e:90:
08:66:18:7a:ab:89:61:d3:56:d7:a0:b7:b6:4a:52:
ca:a3:26:fd:fc:df:63:d7:00:ec:39:ba:e6:42:f3:
51:d8:c3:e0:3c:65:29:e6:83:08:2a:c9:de:b7:90:
f3:67:c8:7b:d0:3e:44:ba:63:1b:c8:cc:67:c7:3f:
51:48:dd:a0:48:dc:56:7a:91:08:be:5c:62:4e:4b:
3c:9f:45:b7:d0:04:ba:11:a1:18:ed:d2:ef:2a:d4:
13:a8:6f:8b:8d:d2:90:c9:97:e2:8b:a2:b5:22:95:
b0:47:25:06:79:40:90:b6:c9:68:b4:cf:f5:b1:a2:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:D7:CD:09:2A:57:C5:E8:DC:21:B5:18:7A:2D:EB:3E:73:FE:A0
X509v3 Authority Key Identifier:
keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:8b:52:3c:fa:30:a4:3c:ed:75:bc:67:b0:a6:0b:5a:3c:72:
f5:da:f0:09:24:c9:cd:c5:3c:f1:53:22:bf:9d:86:ae:f4:d0:
9d:5e:8c:41:9c:fa:92:f7:2d:ef:10:93:cc:b8:55:35:ae:ff:
6d:fc:d1:fb:ac:e7:e3:93:78:c3:4b:97:77:82:6e:94:09:b3:
48:a9:6e:20:eb:a3:a8:0b:57:a0:a5:8f:74:84:01:9a:b2:23:
f1:52:4d:a9:f7:f6:f1:75:38:93:00:7e:ec:6b:2e:7d:86:c2:
68:97:54:e2:88:af:92:ee:1c:39:93:d6:4c:e4:89:d1:67:a9:
d8:05:5f:51:25:5c:f0:95:29:51:f7:82:1e:2a:6b:c6:a9:f6:
af:19:ae:7e:b0:6d:4e:d0:04:ee:bc:65:c7:4a:40:82:d2:81:
1a:3a:cf:a3:5b:37:24:c8:cf:55:20:3d:65:26:93:15:13:7e:
fe:8b:d7:91:6e:93:5e:cb:49:33:70:27:5f:c1:10:76:62:67:
18:01:19:e5:e1:23:41:5f:29:15:37:50:94:fb:b7:1c:55:7a:
98:03:72:10:06:01:81:08:a0:52:0e:a6:32:ef:91:48:7b:f3:
dc:68:d0:da:20:08:65:46:59:f6:5d:bc:e0:97:e7:f9:c8:a9:
2c:85:9f:10
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWWqw5685GqMrWOrAamBBvDH7kiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTAyMTNaFw0yNjAzMDYxOTA3MTNaMDMxMTAvBgNV
BAMTKEVENUVEN0NEMDkyQTU3QzVFOERDMjFCNTE4N0EyREVCM0U3M0ZFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6tDHqft4RLgBzGGBD/m4Prrv
Zb5sK6ewcArneCWN/E4SqS90Am9j2zKcPAoF+9Gl2YK5OgNW0H7q/QdqlZiKs8/Y
gUek5nMsbSsmpyFJ268dstabrU0czrvRqjsQu7fJ4O9UjxPBS5Qt3JxkDhUzBx1s
SCftWyAjiQl9ICW2/cbKyn8ekAhmGHqriWHTVtegt7ZKUsqjJv3832PXAOw5uuZC
81HYw+A8ZSnmgwgqyd63kPNnyHvQPkS6YxvIzGfHP1FI3aBI3FZ6kQi+XGJOSzyf
RbfQBLoRoRjt0u8q1BOob4uN0pDJl+KLorUilbBHJQZ5QJC2yWi0z/WxokY5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7V7XzQkqV8Xo3CG1GHot6z5z/qAwHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzIzMDMxMmUzODM3MmUzMTM1MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByVeeMA0GCSqGSIb3DQEBCwUAA4IBAQAvi1I8+jCk
PO11vGewpgtaPHL12vAJJMnNxTzxUyK/nYau9NCdXoxBnPqS9y3vEJPMuFU1rv9t
/NH7rOfjk3jDS5d3gm6UCbNIqW4g66OoC1egpY90hAGasiPxUk2p9/bxdTiTAH7s
ay59hsJol1TiiK+S7hw5k9ZM5InRZ6nYBV9RJVzwlSlR94IeKmvGqfavGa5+sG1O
0ATuvGXHSkCC0oEaOs+jWzckyM9VID1lJpMVE37+i9eRbpNey0kzcCdfwRB2YmcY
ARnl4SNBXykVN1CU+7ccVXqYA3IQBgGBCKBSDqYy75FIe/PcaNDaIAhlRln2Xbzg
l+f5yKkshZ8Q
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:08 2025 by rpki-client