Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa
File: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier: 3mVoAdKc3DhDxTTQpNLmlwUVFwsah0IQ3LxCK86Uz7A=
Subject key identifier: CC:6E:AE:64:82:DB:3D:DC:FC:67:8B:CD:39:83:D1:02:86:C0:FB:E4
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 168ADF2B3332D3AE4C7F6520F631CF32C8D50382
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 138.255.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8a:df:2b:33:32:d3:ae:4c:7f:65:20:f6:31:cf:32:c8:d5:03:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=CC6EAE6482DB3DDCFC678BCD3983D10286C0FBE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:0e:6f:80:17:33:47:6f:a7:c8:34:dd:d2:
83:59:ce:07:77:d0:3d:82:8c:8c:c8:af:2a:06:bb:
8b:aa:17:c6:66:f6:42:9c:a2:f2:ce:1a:40:26:0d:
ac:e7:f8:3f:0b:22:80:6f:13:ba:46:aa:2a:1c:f3:
fa:24:15:89:ae:e3:1d:c4:c7:fe:2d:7c:05:38:5e:
34:af:10:78:3f:65:fb:99:d4:d9:86:e2:03:d1:7f:
87:2c:53:3e:f4:c1:f8:b0:59:75:1b:f5:ed:8d:75:
f2:8d:d7:b9:bb:18:62:69:d8:cf:23:0a:65:0c:ed:
49:a8:d0:3a:26:8e:a5:91:a2:a4:a5:9d:bf:b5:79:
b0:fa:5e:8e:0b:4a:40:f0:31:27:e1:0d:f2:fb:2e:
af:06:f0:d8:7b:b7:5f:1b:d1:e8:08:10:d7:71:6d:
7b:8b:ec:9c:9f:c6:3e:7b:65:c6:85:02:0a:3a:7d:
a5:a4:99:28:82:95:39:a3:52:92:d3:83:9e:d8:00:
ab:f4:24:67:4c:50:19:af:da:85:c5:50:56:cc:f9:
52:a6:01:86:b8:a5:47:fa:15:d6:ed:61:ef:25:46:
0d:1f:90:96:41:7c:0f:80:91:a6:e0:45:97:ab:8f:
a2:5d:2a:16:9e:f6:08:58:65:b1:59:0d:ff:69:8c:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:AE:64:82:DB:3D:DC:FC:67:8B:CD:39:83:D1:02:86:C0:FB:E4
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.67.0/24
Signature Algorithm: sha256WithRSAEncryption
47:02:e8:7f:99:69:f7:f7:c6:21:fb:4b:ce:38:a9:45:19:7d:
c2:28:22:5d:64:83:61:7a:97:41:f3:d4:74:e3:c9:20:9d:76:
31:4e:5f:38:75:c6:75:76:50:9a:af:f4:ab:a6:db:d4:9f:f2:
f9:55:68:f0:ff:b1:fd:69:77:19:2f:21:5f:05:52:82:b6:34:
d5:2a:82:5c:23:9e:81:db:be:40:86:90:c7:14:80:8d:2a:6e:
2e:f0:9e:3a:f8:d6:a8:9b:fa:6f:32:3d:4f:cc:65:6e:13:f5:
83:ce:d0:df:e5:aa:74:da:32:a5:de:b8:2e:1d:b8:4a:2d:f5:
ef:c2:22:39:27:85:70:6c:a4:51:3d:57:3a:8d:45:f5:3b:04:
a5:cc:5f:a2:a4:de:9d:3e:00:05:af:c0:32:5b:32:5b:17:03:
e3:32:6b:a2:31:fc:e9:b4:98:38:77:e0:45:9d:20:55:82:ac:
95:00:ec:31:a2:b1:dd:55:a8:94:98:51:df:05:d3:cc:23:c4:
ac:6b:fc:20:b9:1e:fd:32:bf:81:35:73:2e:9e:bb:79:ff:73:
1f:43:b7:57:6c:cc:28:02:e6:28:e1:27:6b:60:9e:93:27:e1:
5e:be:c8:6c:c9:fe:ec:74:ec:96:26:47:5f:f3:dd:72:a5:b7:
f9:be:27:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUForfKzMy065Mf2Ug9jHPMsjVA4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDFaFw0yNjAxMTkxMTQ4MDFaMDMxMTAvBgNV
BAMTKENDNkVBRTY0ODJEQjNERENGQzY3OEJDRDM5ODNEMTAyODZDMEZCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Lg5vgBczR2+nyDTd0oNZzgd3
0D2CjIzIryoGu4uqF8Zm9kKcovLOGkAmDazn+D8LIoBvE7pGqioc8/okFYmu4x3E
x/4tfAU4XjSvEHg/ZfuZ1NmG4gPRf4csUz70wfiwWXUb9e2NdfKN17m7GGJp2M8j
CmUM7Umo0DomjqWRoqSlnb+1ebD6Xo4LSkDwMSfhDfL7Lq8G8Nh7t18b0egIENdx
bXuL7Jyfxj57ZcaFAgo6faWkmSiClTmjUpLTg57YAKv0JGdMUBmv2oXFUFbM+VKm
AYa4pUf6FdbtYe8lRg0fkJZBfA+AkabgRZerj6JdKhae9ghYZbFZDf9pjN1vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzG6uZILbPdz8Z4vNOYPRAobA++QwHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzEzMzM4MmUzMjM1MzUyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK/0MwDQYJKoZIhvcNAQELBQADggEBAEcC6H+Z
aff3xiH7S844qUUZfcIoIl1kg2F6l0Hz1HTjySCddjFOXzh1xnV2UJqv9Kum29Sf
8vlVaPD/sf1pdxkvIV8FUoK2NNUqglwjnoHbvkCGkMcUgI0qbi7wnjr41qib+m8y
PU/MZW4T9YPO0N/lqnTaMqXeuC4duEot9e/CIjknhXBspFE9VzqNRfU7BKXMX6Kk
3p0+AAWvwDJbMlsXA+Mya6Ix/Om0mDh34EWdIFWCrJUA7DGisd1VqJSYUd8F08wj
xKxr/CC5Hv0yv4E1cy6eu3n/cx9Dt1dszCgC5ijhJ2tgnpMn4V6+yGzJ/ux07JYm
R1/z3XKlt/m+Jxg=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:29:04 2025 by rpki-client