Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32322d3232203d3e20323633343834.roa
File: 3139312e3234322e3233322e302f32322d3232203d3e20323633343834.roa (raw, json)
Hash identifier: M4x0kL9W+ONZD4qASqzmJtim46dGfBpvv16WwJggj24=
Subject key identifier: 89:24:35:1C:DE:68:85:82:6F:A3:6E:47:98:FC:48:73:48:A0:95:D4
Certificate issuer: /CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Certificate serial: 610CA9EF714BB72AE909019080C5CEDB8090D3B8
Authority key identifier: 16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32322d3232203d3e20323633343834.roa
Signing time: Wed 04 Dec 2024 14:43:50 +0000
ROA not before: Wed 04 Dec 2024 14:38:50 +0000
ROA not after: Wed 03 Dec 2025 14:43:50 +0000
asID: 263484
IP address blocks: 191.242.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0c:a9:ef:71:4b:b7:2a:e9:09:01:90:80:c5:ce:db:80:90:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Validity
Not Before: Dec 4 14:38:50 2024 GMT
Not After : Dec 3 14:43:50 2025 GMT
Subject: CN=8924351CDE6885826FA36E4798FC487348A095D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:64:5f:53:82:9e:75:9d:1e:32:f3:58:1c:
20:93:e2:be:e3:d1:4d:e8:a0:37:92:b6:2f:e7:a9:
31:aa:72:da:9e:31:fd:ea:10:10:4c:9f:44:7a:11:
62:59:34:71:60:e7:53:63:50:99:95:04:5e:27:da:
54:6c:5e:10:62:30:36:14:13:46:3f:b0:af:2c:c6:
d6:72:1c:3e:da:35:69:68:3d:c4:b2:b7:dd:e0:3d:
92:b9:0a:58:11:49:1b:a8:6f:34:a8:e9:bd:ee:1b:
a6:ea:f0:16:2a:28:ef:55:d6:c6:6c:21:d7:89:f8:
37:06:eb:34:e4:ce:03:d0:3d:8c:d8:63:ba:7b:e1:
23:08:24:4a:45:68:18:a0:25:70:36:69:73:d3:cd:
bb:2c:e0:15:21:2e:8b:a3:d4:57:80:3a:ac:3e:a4:
14:2d:04:af:03:da:9c:63:1c:35:ae:7a:0c:10:88:
5a:7e:1a:51:b7:46:cc:2f:30:1c:69:23:47:81:38:
3e:b5:95:be:ac:8b:48:b9:11:43:28:ae:0c:07:9c:
95:fc:e8:ba:12:64:13:08:16:db:ec:b3:78:1c:f4:
b3:a8:6a:18:a7:70:85:3a:00:04:e2:dd:85:0c:45:
dd:8b:ab:10:5e:f7:2f:89:1f:7c:7c:2a:98:b7:a1:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:35:1C:DE:68:85:82:6F:A3:6E:47:98:FC:48:73:48:A0:95:D4
X509v3 Authority Key Identifier:
keyid:16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32322d3232203d3e20323633343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.232.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e9:12:a6:ec:6c:1e:b9:01:4f:c8:1a:db:fe:e4:3d:e6:c7:
6e:f9:a2:c9:06:63:93:46:1e:09:07:88:b2:7d:b1:38:4d:c9:
99:0e:22:79:d6:99:7d:e2:c0:6e:ff:8c:8f:fa:e2:40:66:13:
de:d6:9c:25:57:7a:1a:9e:ff:7c:ea:7f:6b:50:3f:e8:b0:a4:
76:96:5e:55:95:af:69:b7:e4:07:5c:62:c6:ed:c4:b0:e4:2c:
15:a9:3e:19:ee:0e:2a:16:af:ad:82:79:93:35:ea:c7:37:a7:
ab:7b:f6:5b:07:5d:bc:65:d5:e0:87:88:38:2b:61:88:d8:27:
88:18:1f:c3:60:76:f0:c6:bc:fa:66:a3:2c:68:d0:c0:4d:77:
e5:d9:70:02:02:1c:2c:bc:0a:66:85:1f:4d:09:35:7e:2e:ba:
a6:8c:98:48:d9:7e:a9:9f:9a:a9:2a:b3:a6:e6:c7:ba:9a:51:
04:ef:96:c4:74:dc:6d:fa:aa:17:ac:11:c7:3b:15:c3:be:e9:
e4:30:f4:a4:08:fa:62:2a:89:0a:18:94:ea:43:2d:c1:fb:fe:
36:b7:6c:72:6c:c5:7b:63:ff:22:42:81:2b:67:60:0c:04:c3:
a9:95:c5:35:24:06:df:33:12:67:56:48:e3:0f:a7:6c:7f:2d:
a3:d2:e4:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYQyp73FLtyrpCQGQgMXO24CQ07gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY5ODc5NTMwMkM3RTJBMTQ1QkZBOTNCRjBCOEM5QjE0
OURGRDQzRDAeFw0yNDEyMDQxNDM4NTBaFw0yNTEyMDMxNDQzNTBaMDMxMTAvBgNV
BAMTKDg5MjQzNTFDREU2ODg1ODI2RkEzNkU0Nzk4RkM0ODczNDhBMDk1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdomRfU4KedZ0eMvNYHCCT4r7j
0U3ooDeSti/nqTGqctqeMf3qEBBMn0R6EWJZNHFg51NjUJmVBF4n2lRsXhBiMDYU
E0Y/sK8sxtZyHD7aNWloPcSyt93gPZK5ClgRSRuobzSo6b3uG6bq8BYqKO9V1sZs
IdeJ+DcG6zTkzgPQPYzYY7p74SMIJEpFaBigJXA2aXPTzbss4BUhLouj1FeAOqw+
pBQtBK8D2pxjHDWuegwQiFp+GlG3RswvMBxpI0eBOD61lb6si0i5EUMorgwHnJX8
6LoSZBMIFtvss3gc9LOoahincIU6AATi3YUMRd2LqxBe9y+JH3x8Kpi3oXi7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiSQ1HN5ohYJvo25HmPxIc0igldQwHwYDVR0j
BBgwFoAUFph5UwLH4qFFv6k78LjJsUnf1D0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC8xNjk4Nzk1MzAyQzdFMkExNDVCRkE5M0JGMEI4QzlCMTQ5REZENDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OTg3OTUzMDJDN0UyQTE0
NUJGQTkzQkYwQjhDOUIxNDlERkQ0M0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/y6DANBgkqhkiG9w0BAQsFAAOCAQEAJ+kS
puxsHrkBT8ga2/7kPebHbvmiyQZjk0YeCQeIsn2xOE3JmQ4iedaZfeLAbv+Mj/ri
QGYT3tacJVd6Gp7/fOp/a1A/6LCkdpZeVZWvabfkB1xixu3EsOQsFak+Ge4OKhav
rYJ5kzXqxzenq3v2WwddvGXV4IeIOCthiNgniBgfw2B28Ma8+majLGjQwE135dlw
AgIcLLwKZoUfTQk1fi66poyYSNl+qZ+aqSqzpubHuppRBO+WxHTcbfqqF6wRxzsV
w77p5DD0pAj6YiqJChiU6kMtwfv+NrdscmzFe2P/IkKBK2dgDATDqZXFNSQG3zMS
Z1ZI4w+nbH8to9Lk3g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:44 2025 by rpki-client