Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa
File: 3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier: di7GHwp6ZS/LkuRFEidNvuGSL6QApkSwbOOsIJ1/Lw8=
Subject key identifier: 8C:BD:3E:F5:8D:38:28:36:A5:BA:BF:78:A8:AA:F8:EA:1E:E8:39:CE
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 136C83F6B7554B4EE67C3DC3DE329C14A7F03B5A
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:00 +0000
ROA not before: Mon 20 Jan 2025 11:43:00 +0000
ROA not after: Mon 19 Jan 2026 11:48:00 +0000
asID: 263970
IP address blocks: 138.255.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6c:83:f6:b7:55:4b:4e:e6:7c:3d:c3:de:32:9c:14:a7:f0:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:00 2025 GMT
Not After : Jan 19 11:48:00 2026 GMT
Subject: CN=8CBD3EF58D382836A5BABF78A8AAF8EA1EE839CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:d9:dc:89:a8:42:51:c1:21:01:4a:a4:02:
ce:23:98:cc:ff:d4:4f:1f:78:b1:ac:7e:65:fe:cb:
a8:f5:a2:b9:2f:30:5b:01:d3:6d:22:8e:5b:b7:9e:
d6:56:2d:72:70:ac:87:ce:e1:87:df:66:3c:af:ac:
34:d7:d8:a3:a1:eb:35:21:1c:41:b4:84:25:75:c8:
ea:bb:40:95:2f:3e:96:6c:99:9e:2a:4f:f2:b5:17:
50:1d:27:66:bc:7c:03:e4:6b:7c:36:db:34:30:a3:
c3:07:81:19:96:9c:be:9e:f2:2c:9a:93:64:97:b6:
13:e1:50:29:78:a7:87:24:41:10:4e:d6:0b:b0:f6:
8e:6c:dc:31:ba:19:94:ee:d7:e2:a0:db:d0:ba:fb:
64:40:d4:ca:39:b0:cf:4e:41:b4:87:41:bb:4a:09:
1f:f3:fa:e7:12:12:6b:ad:48:78:f1:87:d2:fb:0d:
1e:ad:e5:1e:ee:e4:63:56:ff:b0:9f:1f:dd:d1:11:
7b:16:10:57:6b:ac:26:0c:71:84:e5:68:1d:ff:c6:
b3:ae:42:e3:70:8d:75:4c:d8:9a:f9:48:c5:98:61:
f2:56:67:59:57:50:8d:54:5a:25:1b:47:6f:3f:59:
bd:f2:dc:1a:e6:38:fc:ef:ea:e3:b0:bd:58:c5:32:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:3E:F5:8D:38:28:36:A5:BA:BF:78:A8:AA:F8:EA:1E:E8:39:CE
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.65.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a5:af:3f:61:1f:64:17:2e:85:bd:66:92:8e:84:67:58:fa:
64:79:91:4f:c8:63:27:7a:ef:d3:10:66:ae:a2:47:f2:fa:55:
1d:00:45:93:43:95:eb:65:88:6e:b5:a4:4a:e6:57:0e:ec:54:
e7:ac:6d:5b:39:a5:80:37:fd:7f:95:e2:36:a9:af:6a:48:e6:
c3:fe:87:24:b8:72:c1:84:31:a7:b0:68:0a:fc:ab:60:b8:9a:
99:20:9b:25:c2:f9:8a:6f:eb:18:19:95:79:f0:01:61:d1:ba:
a4:f8:33:46:6d:d3:d3:a7:6b:43:77:4c:f6:64:f7:c3:66:e5:
4b:0a:e8:0f:2e:14:91:51:3f:bc:ba:be:6e:f9:11:7a:89:3b:
15:dd:55:91:10:a0:35:dd:9d:5b:87:3f:ca:16:ea:0a:54:82:
81:f8:39:65:33:16:3b:08:c0:a3:39:dd:04:71:45:14:c4:d6:
a8:d5:15:d4:83:88:48:db:b9:42:05:fa:3b:e7:c3:bf:6c:30:
7d:21:7d:f9:f6:e2:3e:43:22:86:a0:55:ab:a2:76:08:cb:22:
2a:c4:72:12:9a:9b:0d:08:d8:45:07:62:78:41:2d:96:8c:dd:
15:b2:32:cd:d3:77:57:6b:c1:ec:e1:2c:03:f4:71:5b:f8:40:
66:f7:8e:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE2yD9rdVS07mfD3D3jKcFKfwO1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDBaFw0yNjAxMTkxMTQ4MDBaMDMxMTAvBgNV
BAMTKDhDQkQzRUY1OEQzODI4MzZBNUJBQkY3OEE4QUFGOEVBMUVFODM5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6btnciahCUcEhAUqkAs4jmMz/
1E8feLGsfmX+y6j1orkvMFsB020ijlu3ntZWLXJwrIfO4YffZjyvrDTX2KOh6zUh
HEG0hCV1yOq7QJUvPpZsmZ4qT/K1F1AdJ2a8fAPka3w22zQwo8MHgRmWnL6e8iya
k2SXthPhUCl4p4ckQRBO1guw9o5s3DG6GZTu1+Kg29C6+2RA1Mo5sM9OQbSHQbtK
CR/z+ucSEmutSHjxh9L7DR6t5R7u5GNW/7CfH93REXsWEFdrrCYMcYTlaB3/xrOu
QuNwjXVM2Jr5SMWYYfJWZ1lXUI1UWiUbR28/Wb3y3BrmOPzv6uOwvVjFMnEnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjL0+9Y04KDalur94qKr46h7oOc4wHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzEzMzM4MmUzMjM1MzUyZTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK/0EwDQYJKoZIhvcNAQELBQADggEBACClrz9h
H2QXLoW9ZpKOhGdY+mR5kU/IYyd679MQZq6iR/L6VR0ARZNDletliG61pErmVw7s
VOesbVs5pYA3/X+V4japr2pI5sP+hyS4csGEMaewaAr8q2C4mpkgmyXC+Ypv6xgZ
lXnwAWHRuqT4M0Zt09Ona0N3TPZk98Nm5UsK6A8uFJFRP7y6vm75EXqJOxXdVZEQ
oDXdnVuHP8oW6gpUgoH4OWUzFjsIwKM53QRxRRTE1qjVFdSDiEjbuUIF+jvnw79s
MH0hffn24j5DIoagVauidgjLIirEchKamw0I2EUHYnhBLZaM3RWyMs3Td1drwezh
LAP0cVv4QGb3jt8=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:48:44 2025 by rpki-client