Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
File: 3137372e36362e3137322e302f32322d3234203d3e203532363539.roa (raw, json)
Hash identifier: 59qxL+XH9xDnvVsY8vfIFIJekRaJYsb6x6nYyul4Ywo=
Subject key identifier: 74:8E:D8:B2:3F:EE:A7:43:65:DA:A8:0E:2C:80:58:5A:41:BA:EF:FF
Certificate issuer: /CN=F587850376B78E012ED02AD104B6287373707975
Certificate serial: 478931C78C3E8A07DFAF3FBE42853E7D736F52A8
Authority key identifier: F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
Signing time: Thu 06 Mar 2025 23:47:26 +0000
ROA not before: Thu 06 Mar 2025 23:42:26 +0000
ROA not after: Thu 05 Mar 2026 23:47:26 +0000
asID: 52659
IP address blocks: 177.66.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:89:31:c7:8c:3e:8a:07:df:af:3f:be:42:85:3e:7d:73:6f:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F587850376B78E012ED02AD104B6287373707975
Validity
Not Before: Mar 6 23:42:26 2025 GMT
Not After : Mar 5 23:47:26 2026 GMT
Subject: CN=748ED8B23FEEA74365DAA80E2C80585A41BAEFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:66:aa:6b:a3:4c:19:a6:db:84:dc:d9:c0:
4e:33:8c:f9:e5:10:b1:59:57:98:f9:37:3f:5a:a9:
9c:9e:e9:92:80:11:97:86:22:a8:c5:64:d4:38:6d:
39:e5:82:3a:3e:0b:76:0e:ad:52:73:c3:13:a2:aa:
58:8f:9d:44:59:13:fb:90:52:db:90:78:ec:ae:b0:
99:12:e4:b4:a3:31:72:a2:76:29:13:8f:23:40:82:
dd:00:d4:b4:ff:40:fa:1b:b4:c5:b0:f7:c7:e6:54:
dd:9a:7f:20:f1:f3:e3:c4:87:14:2f:65:e4:71:74:
38:df:12:b5:be:b5:74:b7:7e:7b:a7:a0:c3:dd:91:
ee:16:ba:42:63:29:99:0c:e4:cb:65:3d:8e:4a:01:
14:77:5b:05:81:1b:1a:b4:a7:0d:bd:3b:a1:e3:28:
4c:01:dc:8a:dd:b9:3e:72:eb:d3:eb:0a:02:62:c5:
ee:fe:04:58:a9:53:da:ac:a1:32:aa:65:b8:1c:37:
2a:43:7e:02:b7:19:0d:d3:c6:d8:c4:15:c8:21:8c:
1f:f7:5f:34:36:4a:2d:c6:14:4b:7e:cc:94:75:a1:
60:9d:89:b2:e4:79:a3:2f:c5:20:d7:8e:b3:47:9d:
1f:c8:2c:73:a1:fb:d5:2d:9e:cc:fd:5e:d7:dd:c1:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:D8:B2:3F:EE:A7:43:65:DA:A8:0E:2C:80:58:5A:41:BA:EF:FF
X509v3 Authority Key Identifier:
keyid:F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:18:37:14:cf:49:0c:df:16:64:b4:75:ff:ff:47:e8:8f:40:
c0:49:41:52:91:04:d4:d7:45:9f:cb:df:55:55:5c:6c:8a:16:
e1:a4:dc:3d:a9:be:5b:13:cf:fb:37:1d:bf:f8:81:00:9c:a3:
69:d9:91:6b:91:07:1c:28:6a:b6:19:5e:34:d9:fa:e7:57:28:
5e:f7:b0:e5:1b:f2:11:a8:57:97:32:bf:e0:f7:d5:b3:9d:69:
37:95:84:b7:28:31:90:78:ac:90:c0:8e:e9:66:97:cb:6d:e6:
10:ce:f9:85:d2:86:52:51:56:f1:d7:d7:57:4c:4a:55:6d:1c:
fe:32:6b:a0:0b:06:78:ad:48:28:83:d0:4d:87:0a:83:3c:e1:
9c:ac:7d:2c:6a:08:5c:fb:94:d3:c2:21:a5:fd:37:9e:4d:51:
0c:83:7d:8a:e3:9b:5c:8a:b0:15:03:79:a6:95:a9:40:f6:e4:
a4:e6:e6:b3:9b:2c:97:3e:1c:47:39:05:7e:1d:ba:39:e0:3f:
7b:01:ee:53:c6:76:f6:ae:f9:04:4a:9e:4b:05:68:78:76:6d:
83:3f:78:5e:e5:98:c2:01:73:a7:67:ae:f3:57:ce:c9:0a:11:
96:54:15:c1:22:31:a1:3f:84:d5:9a:71:5d:a8:23:03:7c:28:
80:33:73:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR4kxx4w+igffrz++QoU+fXNvUqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU4Nzg1MDM3NkI3OEUwMTJFRDAyQUQxMDRCNjI4NzM3
MzcwNzk3NTAeFw0yNTAzMDYyMzQyMjZaFw0yNjAzMDUyMzQ3MjZaMDMxMTAvBgNV
BAMTKDc0OEVEOEIyM0ZFRUE3NDM2NURBQTgwRTJDODA1ODVBNDFCQUVGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmB2aqa6NMGabbhNzZwE4zjPnl
ELFZV5j5Nz9aqZye6ZKAEZeGIqjFZNQ4bTnlgjo+C3YOrVJzwxOiqliPnURZE/uQ
UtuQeOyusJkS5LSjMXKidikTjyNAgt0A1LT/QPobtMWw98fmVN2afyDx8+PEhxQv
ZeRxdDjfErW+tXS3fnunoMPdke4WukJjKZkM5MtlPY5KARR3WwWBGxq0pw29O6Hj
KEwB3IrduT5y69PrCgJixe7+BFipU9qsoTKqZbgcNypDfgK3GQ3TxtjEFcghjB/3
XzQ2Si3GFEt+zJR1oWCdibLkeaMvxSDXjrNHnR/ILHOh+9Utnsz9XtfdwWuXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdI7Ysj/up0Nl2qgOLIBYWkG67/8wHwYDVR0j
BBgwFoAU9YeFA3a3jgEu0CrRBLYoc3NweXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZxU3k5aDduQ3pqTXZLZnJDbkw2Z3E3UHpES3VvRkdRQW0zd2tnTURO
Z2UvMS9GNTg3ODUwMzc2Qjc4RTAxMkVEMDJBRDEwNEI2Mjg3MzczNzA3OTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1ODc4NTAzNzZCNzhFMDEy
RUQwMkFEMTA0QjYyODczNzM3MDc5NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FWcVN5OWg3bkN6ak12S2ZyQ25MNmdxN1B6REt1b0ZHUUFtM3drZ01ETmdlLzEv
MzEzNzM3MmUzNjM2MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUKsMA0GCSqGSIb3DQEBCwUAA4IBAQBaGDcUz0kM
3xZktHX//0foj0DASUFSkQTU10Wfy99VVVxsihbhpNw9qb5bE8/7Nx2/+IEAnKNp
2ZFrkQccKGq2GV402frnVyhe97DlG/IRqFeXMr/g99WznWk3lYS3KDGQeKyQwI7p
ZpfLbeYQzvmF0oZSUVbx19dXTEpVbRz+MmugCwZ4rUgog9BNhwqDPOGcrH0saghc
+5TTwiGl/TeeTVEMg32K45tcirAVA3mmlalA9uSk5uazmyyXPhxHOQV+Hbo54D97
Ae5Txnb2rvkESp5LBWh4dm2DP3he5ZjCAXOnZ67zV87JChGWVBXBIjGhP4TVmnFd
qCMDfCiAM3ML
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:22 2025 by rpki-client