Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
File: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier: dvfswkfMTtavK1xap8ZucaPCNcB1fh0JaFJDJL4hmts=
Subject key identifier: 54:2A:30:87:CD:C5:B2:E6:74:9E:AD:1F:AF:99:BC:7D:D2:EA:1D:88
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 7DCA3979281E19A864A2E0FC95EE5417B5360AE9
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:08 +0000
ROA not before: Fri 20 Dec 2024 21:12:08 +0000
ROA not after: Fri 19 Dec 2025 21:17:08 +0000
asID: 266163
IP address blocks: 186.2.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ca:39:79:28:1e:19:a8:64:a2:e0:fc:95:ee:54:17:b5:36:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:08 2024 GMT
Not After : Dec 19 21:17:08 2025 GMT
Subject: CN=542A3087CDC5B2E6749EAD1FAF99BC7DD2EA1D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:30:ef:e5:26:02:5d:ed:1a:76:b5:55:7f:
1a:8c:e2:dc:c2:9e:3c:60:4c:48:6b:6e:cd:35:ad:
90:d7:a4:3e:77:24:bc:e1:f6:df:4b:96:eb:74:5f:
32:b8:d5:c7:a8:ef:0b:d4:78:86:0a:71:85:af:40:
07:49:19:ea:dd:0b:59:13:c0:47:6a:e5:9c:c5:c2:
9e:3e:71:2e:a0:e1:bb:9b:b1:77:ad:5b:01:d6:3d:
4d:c6:7b:06:01:1a:bb:2d:29:f6:5f:4b:47:e7:80:
19:6b:23:fd:96:9f:6d:45:63:30:e4:60:6f:44:0e:
56:4a:d0:19:56:36:32:b1:36:d0:e0:48:dc:1b:fd:
03:f6:df:5f:73:60:06:d2:d0:6f:c7:a1:81:d1:86:
91:3f:78:f8:47:d9:3d:b2:c0:b6:9a:09:d5:c4:85:
ab:02:7d:2c:81:04:c9:49:22:d2:ec:f7:68:2e:47:
3e:7f:00:a3:6c:53:03:34:b3:1f:75:93:1c:9f:36:
cd:c1:70:64:52:62:09:d1:c5:2d:1c:94:4b:b5:31:
f6:91:2c:43:fb:4b:a2:ba:20:af:7b:0f:8c:62:6c:
39:8e:20:0f:01:88:7b:f6:83:d9:74:0e:61:6d:07:
fd:d6:d7:68:b7:ff:d9:1c:8c:18:b6:df:76:26:8f:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:30:87:CD:C5:B2:E6:74:9E:AD:1F:AF:99:BC:7D:D2:EA:1D:88
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235302e302f32342d3234203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a7:d2:be:f6:c3:d3:c5:94:98:3a:82:b3:35:c9:a6:91:ce:
0a:5b:a7:6a:50:58:77:7f:6d:d6:56:8c:49:82:1b:07:42:3a:
ef:d5:ea:78:ff:a1:43:b8:51:15:df:97:35:d4:2a:38:e4:c0:
e8:12:0c:0d:b9:9d:24:b1:aa:5a:7b:e4:59:ab:2b:4f:94:ee:
ef:3e:4a:2b:2f:cc:54:3f:b6:ca:0d:c2:5c:f2:a8:9a:b5:2b:
54:9e:01:b0:f2:bd:54:8b:4f:f8:57:71:08:08:1a:5b:7e:a2:
2d:7c:9a:5b:e0:00:ec:a3:f7:5b:3a:91:cb:b5:72:d2:23:d4:
e4:e8:9f:32:0e:2e:5d:ee:10:33:c3:4b:2c:37:e5:87:bb:ea:
d1:26:41:61:f8:18:d1:5b:c6:1b:24:7b:61:2e:61:9d:ed:35:
6f:dd:ee:ad:2a:34:84:c5:51:b4:d6:93:42:30:a3:22:d8:82:
49:fd:4a:dc:b6:38:02:be:3f:d0:4a:f7:5a:6b:84:4a:a3:87:
56:93:ad:08:1e:b3:02:fc:24:2e:90:11:ec:bc:d0:fe:95:48:
5c:cd:45:cc:e8:c2:f9:83:a1:6a:d8:0d:41:5b:e5:17:84:8b:
c4:ff:9f:ea:40:2b:c1:62:e9:db:71:c4:2a:28:d1:44:53:d1:
2e:17:50:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfco5eSgeGahkouD8le5UF7U2CukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBRkUwODY3NzkyRTdDNjZDRDQxMTM2NzlGM0U5QjdB
RDVGMUU4NzAeFw0yNDEyMjAyMTEyMDhaFw0yNTEyMTkyMTE3MDhaMDMxMTAvBgNV
BAMTKDU0MkEzMDg3Q0RDNUIyRTY3NDlFQUQxRkFGOTlCQzdERDJFQTFEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjTDv5SYCXe0adrVVfxqM4tzC
njxgTEhrbs01rZDXpD53JLzh9t9Llut0XzK41ceo7wvUeIYKcYWvQAdJGerdC1kT
wEdq5ZzFwp4+cS6g4bubsXetWwHWPU3GewYBGrstKfZfS0fngBlrI/2Wn21FYzDk
YG9EDlZK0BlWNjKxNtDgSNwb/QP2319zYAbS0G/HoYHRhpE/ePhH2T2ywLaaCdXE
hasCfSyBBMlJItLs92guRz5/AKNsUwM0sx91kxyfNs3BcGRSYgnRxS0clEu1MfaR
LEP7S6K6IK97D4xibDmOIA8BiHv2g9l0DmFtB/3W12i3/9kcjBi233Ymjzl9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVCowh83FsuZ0nq0fr5m8fdLqHYgwHwYDVR0j
BBgwFoAUK6/ghneS58Zs1BE2efPpt61fHocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8yQkFGRTA4Njc3OTJFN0M2NkNENDExMzY3OUYzRTlCN0FENUYxRTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQUZFMDg2Nzc5MkU3QzY2
Q0Q0MTEzNjc5RjNFOUI3QUQ1RjFFODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAugL6MA0GCSqGSIb3DQEBCwUAA4IBAQANp9K+9sPT
xZSYOoKzNcmmkc4KW6dqUFh3f23WVoxJghsHQjrv1ep4/6FDuFEV35c11Co45MDo
EgwNuZ0ksapae+RZqytPlO7vPkorL8xUP7bKDcJc8qiatStUngGw8r1Ui0/4V3EI
CBpbfqItfJpb4ADso/dbOpHLtXLSI9Tk6J8yDi5d7hAzw0ssN+WHu+rRJkFh+BjR
W8YbJHthLmGd7TVv3e6tKjSExVG01pNCMKMi2IJJ/UrctjgCvj/QSvdaa4RKo4dW
k60IHrMC/CQukBHsvND+lUhczUXM6ML5g6Fq2A1BW+UXhIvE/5/qQCvBYunbccQq
KNFEU9EuF1Dh
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:39:59 2025 by rpki-client