Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
File: 3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier: dcHebYxjWlXAK0/wxRnIwbr/yMmD4jJINut3ktantAs=
Subject key identifier: 40:10:91:DF:43:CA:C8:9E:45:45:E4:2D:E9:E8:93:43:DC:10:8E:AB
Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial: 52A0A21D4364BB8193FE302F9CC97DDFBA766817
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
Signing time: Wed 05 Mar 2025 19:00:06 +0000
ROA not before: Wed 05 Mar 2025 18:55:06 +0000
ROA not after: Wed 04 Mar 2026 19:00:06 +0000
asID: 263512
IP address blocks: 191.243.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a0:a2:1d:43:64:bb:81:93:fe:30:2f:9c:c9:7d:df:ba:76:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Validity
Not Before: Mar 5 18:55:06 2025 GMT
Not After : Mar 4 19:00:06 2026 GMT
Subject: CN=401091DF43CAC89E4545E42DE9E89343DC108EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:73:46:94:c4:ee:87:10:a5:0f:38:1d:9a:
21:7b:19:16:96:52:58:df:bb:fc:53:5e:f6:0d:24:
a7:3a:98:9c:1d:aa:94:2b:9c:4e:ca:9e:f1:9d:36:
12:0c:58:cd:d3:be:9f:9d:3a:93:f6:ad:a8:e8:f6:
21:ee:19:3d:1d:bd:06:00:db:ff:b1:f0:e5:d8:bc:
f6:fc:17:35:e9:f7:32:fc:bf:57:41:de:a7:78:53:
da:b7:dd:8c:6f:d3:d3:86:fb:c6:04:08:aa:72:45:
66:54:42:1a:11:81:2f:e5:f2:9e:27:f1:7b:bd:6d:
a0:01:06:72:22:ef:47:92:a8:dd:3b:6a:51:fa:b8:
72:90:f4:22:82:d5:fd:06:93:b1:03:e6:3a:49:2f:
3f:16:9d:2f:2b:b7:20:56:1a:8b:80:ea:b1:ed:28:
54:7e:0f:ca:65:58:f1:a8:eb:f4:82:fd:d5:47:81:
70:e1:7a:00:20:ed:5c:7c:cf:30:cc:3c:b1:68:74:
62:b0:c9:11:5e:3b:23:bb:b0:fe:b2:cb:7a:c9:fb:
6e:26:2b:56:06:5b:b0:0b:d8:c7:88:11:bf:8e:da:
14:a6:60:31:d4:c1:6b:7d:8d:dd:be:59:71:55:b8:
86:80:0e:ea:42:b9:1e:32:69:a6:25:0f:e3:5e:a3:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:91:DF:43:CA:C8:9E:45:45:E4:2D:E9:E8:93:43:DC:10:8E:AB
X509v3 Authority Key Identifier:
keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:f5:07:ab:60:49:d5:94:f9:c7:a3:48:0f:5c:91:29:50:1b:
f6:83:aa:2b:9a:7e:c7:ca:59:be:10:35:e8:1f:00:cb:9b:0d:
d5:79:7d:36:40:2c:d1:3e:18:f7:05:a5:3a:87:0f:89:87:0c:
6b:1a:48:9d:cc:f2:c6:a5:14:14:80:bf:9e:aa:8b:d6:5d:53:
8a:73:6f:b8:02:dc:c3:cc:2d:5d:cf:ff:aa:90:5c:31:08:98:
56:9d:05:14:22:a5:f4:74:f6:fa:9e:55:7b:15:b0:73:8a:4c:
9e:2f:5f:28:7e:2d:68:7b:de:d9:d2:37:30:81:fb:87:ab:35:
0d:1c:19:34:6c:20:e3:12:5d:0d:ba:94:22:60:eb:27:e4:c4:
a2:22:68:33:c5:2a:69:9c:fa:6e:dd:15:0b:76:6a:fc:8e:c8:
a5:32:26:ed:19:8e:c0:a8:6e:5f:fa:61:c4:8c:fb:6c:4f:2e:
a4:54:f7:ea:87:4f:4f:54:df:ea:f8:79:e0:9a:8b:94:0b:bf:
62:b5:06:28:b5:91:df:b2:41:42:7c:31:3f:0b:41:94:0b:77:
3a:bf:48:c6:f6:95:fd:5b:86:a2:1c:ea:8b:22:94:8a:87:25:
93:7b:4a:19:9b:5a:44:36:aa:12:25:da:24:a5:25:67:51:69:
f7:0a:0d:2d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUqCiHUNku4GT/jAvnMl937p2aBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx
MEU0NDRBMjAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMDMxMTAvBgNV
BAMTKDQwMTA5MURGNDNDQUM4OUU0NTQ1RTQyREU5RTg5MzQzREMxMDhFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmDnNGlMTuhxClDzgdmiF7GRaW
Uljfu/xTXvYNJKc6mJwdqpQrnE7KnvGdNhIMWM3Tvp+dOpP2rajo9iHuGT0dvQYA
2/+x8OXYvPb8FzXp9zL8v1dB3qd4U9q33Yxv09OG+8YECKpyRWZUQhoRgS/l8p4n
8Xu9baABBnIi70eSqN07alH6uHKQ9CKC1f0Gk7ED5jpJLz8WnS8rtyBWGouA6rHt
KFR+D8plWPGo6/SC/dVHgXDhegAg7Vx8zzDMPLFodGKwyRFeOyO7sP6yy3rJ+24m
K1YGW7AL2MeIEb+O2hSmYDHUwWt9jd2+WXFVuIaADupCuR4yaaYlD+Neo0vRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQBCR30PKyJ5FReQt6eiTQ9wQjqswHwYDVR0j
BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG
RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/zyjANBgkqhkiG9w0BAQsFAAOCAQEAHvUH
q2BJ1ZT5x6NID1yRKVAb9oOqK5p+x8pZvhA16B8Ay5sN1Xl9NkAs0T4Y9wWlOocP
iYcMaxpInczyxqUUFIC/nqqL1l1TinNvuALcw8wtXc//qpBcMQiYVp0FFCKl9HT2
+p5VexWwc4pMni9fKH4taHve2dI3MIH7h6s1DRwZNGwg4xJdDbqUImDrJ+TEoiJo
M8UqaZz6bt0VC3Zq/I7IpTIm7RmOwKhuX/phxIz7bE8upFT36odPT1Tf6vh54JqL
lAu/YrUGKLWR37JBQnwxPwtBlAt3Or9IxvaV/VuGohzqiyKUioclk3tKGZtaRDaq
EiXaJKUlZ1Fp9woNLQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:48:49 2025 by rpki-client