Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
File: 3137372e3132352e38302e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier: 1ZchSTWnvCoOMocOZ01gJpy3sWyGzcSwUILugoz+0OU=
Subject key identifier: C2:42:F5:0E:C3:B8:01:49:48:6E:D3:03:A1:F5:ED:D1:CF:F4:D7:05
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 6636F562DD3CF09FC290C0FBF54E879823401415
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
Signing time: Wed 12 Mar 2025 13:33:22 +0000
ROA not before: Wed 12 Mar 2025 13:28:22 +0000
ROA not after: Wed 11 Mar 2026 13:33:22 +0000
asID: 28201
IP address blocks: 177.125.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:36:f5:62:dd:3c:f0:9f:c2:90:c0:fb:f5:4e:87:98:23:40:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 12 13:28:22 2025 GMT
Not After : Mar 11 13:33:22 2026 GMT
Subject: CN=C242F50EC3B80149486ED303A1F5EDD1CFF4D705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:09:9c:e0:68:cb:52:04:8c:fd:7c:9f:5f:
21:aa:fc:00:1b:9c:e8:f9:c6:47:9f:a3:c1:d9:8e:
71:66:1b:86:ee:db:87:a7:57:f2:f8:43:15:de:c8:
42:6a:ff:62:c5:8c:15:b5:0d:8e:bc:ab:6f:7c:0a:
03:2d:9c:8b:e4:8c:d0:6a:64:5c:3a:f3:12:7d:6f:
5f:57:37:03:4f:b5:fb:a2:e5:29:6f:6b:ad:e1:48:
cb:c1:d5:34:84:63:a0:ec:c3:ca:92:67:10:4c:86:
d4:6c:3e:fb:93:89:8c:65:02:af:3d:40:86:51:8e:
bc:aa:84:59:bd:6e:10:ff:30:2e:78:e5:a3:86:44:
40:d8:3b:3f:ee:52:f5:f8:73:60:ed:6f:1f:8e:c3:
0a:83:98:6e:4b:6e:8f:18:17:e5:d6:69:55:b3:71:
58:5c:02:18:7c:31:37:ee:cb:e9:04:4f:4c:a9:30:
f0:6e:b5:0e:3f:34:95:48:e9:f2:dd:12:05:8e:c0:
cb:aa:32:09:02:89:58:96:26:c8:6a:26:89:57:fa:
33:04:6d:03:4a:1a:65:b7:0e:0e:93:3b:59:b2:fd:
08:9d:e8:14:80:64:bd:6d:bc:9f:32:31:8a:31:a1:
ed:10:1e:9d:c8:e3:95:0f:89:a1:6e:10:4c:77:b4:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:F5:0E:C3:B8:01:49:48:6E:D3:03:A1:F5:ED:D1:CF:F4:D7:05
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.80.0/21
Signature Algorithm: sha256WithRSAEncryption
52:7f:b5:d9:4f:ff:6d:3c:4d:c6:3f:1c:18:62:09:0e:99:19:
5c:e0:aa:56:3d:70:00:31:69:60:57:33:5a:d3:b4:c0:ee:50:
f9:af:dc:04:c2:1f:48:a3:06:58:6d:73:22:b8:a6:a3:24:69:
62:93:70:0d:77:19:d1:b5:98:3c:af:96:b6:f6:23:ec:81:cd:
bd:94:38:9c:c1:d8:33:0e:51:32:2d:f6:74:50:2d:5d:19:9f:
11:d2:73:53:ad:b2:a2:9e:2c:72:fe:88:13:f3:a2:f8:e2:05:
a4:b5:0a:8e:28:e9:73:6d:41:ef:9e:50:89:8b:4e:06:53:18:
e5:c4:07:8e:d5:5e:19:1f:f9:b9:5e:46:53:1c:97:67:78:26:
3c:3a:dc:74:7e:cf:06:77:e7:e2:16:b4:e3:f2:9a:0d:6e:52:
12:bc:3f:bb:28:db:bd:42:cd:b4:59:df:8c:77:59:23:a5:76:
ba:f7:f2:60:00:e7:a9:30:71:9f:d1:f6:32:7e:20:3e:3b:dd:
19:32:f9:e8:2c:51:c2:f6:b8:19:a8:f3:ad:f0:31:70:7c:0e:
eb:f4:6f:a0:53:92:7f:80:4d:35:67:73:e2:1d:24:8c:29:20:
8d:ed:1b:20:04:95:f6:da:ff:1f:6a:5e:83:97:07:43:7d:ff:
7b:c9:66:1e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZjb1Yt088J/CkMD79U6HmCNAFBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTAzMTIxMzI4MjJaFw0yNjAzMTExMzMzMjJaMDMxMTAvBgNV
BAMTKEMyNDJGNTBFQzNCODAxNDk0ODZFRDMwM0ExRjVFREQxQ0ZGNEQ3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYgmc4GjLUgSM/XyfXyGq/AAb
nOj5xkefo8HZjnFmG4bu24enV/L4QxXeyEJq/2LFjBW1DY68q298CgMtnIvkjNBq
ZFw68xJ9b19XNwNPtfui5Slva63hSMvB1TSEY6Dsw8qSZxBMhtRsPvuTiYxlAq89
QIZRjryqhFm9bhD/MC545aOGREDYOz/uUvX4c2Dtbx+OwwqDmG5Lbo8YF+XWaVWz
cVhcAhh8MTfuy+kET0ypMPButQ4/NJVI6fLdEgWOwMuqMgkCiViWJshqJolX+jME
bQNKGmW3Dg6TO1my/Qid6BSAZL1tvJ8yMYoxoe0QHp3I45UPiaFuEEx3tGhZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwkL1DsO4AUlIbtMDofXt0c/01wUwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNzM3MmUzMTMyMzUyZTM4MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsX1QMA0GCSqGSIb3DQEBCwUAA4IBAQBSf7XZT/9t
PE3GPxwYYgkOmRlc4KpWPXAAMWlgVzNa07TA7lD5r9wEwh9IowZYbXMiuKajJGli
k3ANdxnRtZg8r5a29iPsgc29lDicwdgzDlEyLfZ0UC1dGZ8R0nNTrbKinixy/ogT
86L44gWktQqOKOlzbUHvnlCJi04GUxjlxAeO1V4ZH/m5XkZTHJdneCY8Otx0fs8G
d+fiFrTj8poNblISvD+7KNu9Qs20Wd+Md1kjpXa69/JgAOepMHGf0fYyfiA+O90Z
MvnoLFHC9rgZqPOt8DFwfA7r9G+gU5J/gE01Z3PiHSSMKSCN7RsgBJX22v8fal6D
lwdDff97yWYe
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:37:14 2025 by rpki-client