Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa
File: 3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa (raw, json)
Hash identifier: arIip+RaF0pFRAGM3y8ZG7+7QRE5T8/GKOERxO4vcvQ=
Subject key identifier: 37:31:D6:E7:4D:11:14:C0:96:D5:94:D5:48:F9:33:03:EC:83:D2:ED
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 2F7D9FBEE09239C9BE8F780CE1B618BC9AFA5D86
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 138.255.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:9f:be:e0:92:39:c9:be:8f:78:0c:e1:b6:18:bc:9a:fa:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=3731D6E74D1114C096D594D548F93303EC83D2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:ac:78:ae:69:17:01:f7:d8:ea:ab:9c:dc:
c9:12:5a:df:81:a7:44:ba:5f:57:96:24:59:c6:ed:
2b:13:5f:c1:ea:a7:17:f9:19:4a:99:fe:8d:3d:34:
c2:cc:e0:6a:82:8b:d0:15:5f:78:de:68:ea:36:04:
cd:73:3c:bf:69:ac:e7:fe:03:97:eb:2d:47:d6:52:
a9:83:37:02:c4:98:39:3e:4f:77:69:c8:bd:33:7d:
8c:01:7e:b5:8d:ab:2e:62:2c:db:8b:4c:a8:04:b9:
ed:b7:b6:8d:b9:00:ab:94:c1:d6:36:01:3f:a0:4a:
d9:5c:1c:28:b5:29:fd:c1:24:dc:f9:0a:34:c7:03:
86:ca:2e:b5:3d:ac:ba:48:37:12:0c:d4:42:13:7f:
08:8a:e6:65:fe:b6:90:4f:ae:03:2d:30:0d:53:e7:
36:18:ab:1f:d4:e8:e3:26:23:ee:19:25:ee:9b:de:
fe:fe:41:1a:19:8d:05:ff:d1:b1:24:c4:5e:c0:4a:
42:78:f3:2f:de:aa:7f:15:36:cb:26:7b:1d:db:4c:
92:1a:41:28:9f:92:7b:44:78:f7:3f:0c:1e:b2:2a:
c0:9d:bd:1b:a0:48:94:a1:62:c0:2c:3c:e9:71:13:
7b:28:9b:69:9b:87:5d:d4:a8:93:91:0d:8b:87:9b:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:D6:E7:4D:11:14:C0:96:D5:94:D5:48:F9:33:03:EC:83:D2:ED
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c6:32:90:13:ea:6a:d0:e4:12:93:9e:a6:3a:6e:7b:d1:cd:
97:b6:fd:e7:5d:0e:45:04:70:bd:c7:49:fc:52:b6:9d:a7:95:
a3:77:c8:05:9a:5a:d2:bf:6d:01:73:08:c1:05:e2:95:3b:89:
a6:68:6a:ce:bf:6f:d9:dd:b9:85:9f:fd:f3:6a:2b:47:e1:b4:
01:49:6c:7d:e3:b6:9f:46:7e:c9:19:18:48:1f:52:19:6b:50:
99:dc:eb:4f:5d:5d:7e:f5:fe:29:3a:21:37:03:d6:2d:a1:0b:
c8:ab:0d:7a:51:79:24:a7:ea:6b:f7:1a:d2:a0:a6:38:27:8e:
c7:83:a9:d2:f0:b0:42:4c:51:85:31:3e:1e:33:d1:8e:a4:08:
70:4b:88:7b:7f:a4:86:32:92:5f:eb:15:0a:a3:c9:2c:a1:a3:
20:61:ed:79:63:cc:92:d8:5b:3e:2d:16:9e:f8:78:a9:df:8b:
80:08:8b:7f:9b:58:36:e9:94:fb:20:af:48:8f:a6:4f:cc:53:
84:ff:71:af:eb:f5:b2:45:83:55:4e:b3:22:66:eb:a3:b3:e7:
de:79:4a:1c:e7:c1:09:6b:ac:ad:65:c8:af:c6:3b:13:7e:3a:
8e:e8:48:a2:2c:8e:32:b8:0e:cf:cb:82:b4:4c:b8:fb:bf:b0:
cc:d2:7d:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL32fvuCSOcm+j3gM4bYYvJr6XYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDFaFw0yNjAxMTkxMTQ4MDFaMDMxMTAvBgNV
BAMTKDM3MzFENkU3NEQxMTE0QzA5NkQ1OTRENTQ4RjkzMzAzRUM4M0QyRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZKx4rmkXAffY6quc3MkSWt+B
p0S6X1eWJFnG7SsTX8Hqpxf5GUqZ/o09NMLM4GqCi9AVX3jeaOo2BM1zPL9prOf+
A5frLUfWUqmDNwLEmDk+T3dpyL0zfYwBfrWNqy5iLNuLTKgEue23to25AKuUwdY2
AT+gStlcHCi1Kf3BJNz5CjTHA4bKLrU9rLpINxIM1EITfwiK5mX+tpBPrgMtMA1T
5zYYqx/U6OMmI+4ZJe6b3v7+QRoZjQX/0bEkxF7ASkJ48y/eqn8VNssmex3bTJIa
QSifkntEePc/DB6yKsCdvRugSJShYsAsPOlxE3som2mbh13UqJORDYuHm9A3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNzHW500RFMCW1ZTVSPkzA+yD0u0wHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzEzMzM4MmUzMjM1MzUyZTM2MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK/0AwDQYJKoZIhvcNAQELBQADggEBAG3GMpAT
6mrQ5BKTnqY6bnvRzZe2/eddDkUEcL3HSfxStp2nlaN3yAWaWtK/bQFzCMEF4pU7
iaZoas6/b9nduYWf/fNqK0fhtAFJbH3jtp9GfskZGEgfUhlrUJnc609dXX71/ik6
ITcD1i2hC8irDXpReSSn6mv3GtKgpjgnjseDqdLwsEJMUYUxPh4z0Y6kCHBLiHt/
pIYykl/rFQqjySyhoyBh7XljzJLYWz4tFp74eKnfi4AIi3+bWDbplPsgr0iPpk/M
U4T/ca/r9bJFg1VOsyJm66Oz5955ShznwQlrrK1lyK/GOxN+Oo7oSKIsjjK4Ds/L
grRMuPu/sMzSfdU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:18 2025 by rpki-client