Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133312e302e34302e302f32322d3234203d3e203631383536.roa
File: 3133312e302e34302e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier: ic/7EO36gA6gozGKV7WZf99l/hUhRSPlMSp47gbZx9A=
Subject key identifier: 11:9B:26:21:57:ED:0D:AA:52:65:DA:80:95:63:EC:8C:CE:7B:0A:3D
Certificate issuer: /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial: 6C3885170964188DC5A95147EF4AE3A1DF2CEAE0
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133312e302e34302e302f32322d3234203d3e203631383536.roa
Signing time: Thu 06 Mar 2025 06:51:54 +0000
ROA not before: Thu 06 Mar 2025 06:46:54 +0000
ROA not after: Thu 05 Mar 2026 06:51:54 +0000
asID: 61856
IP address blocks: 131.0.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:38:85:17:09:64:18:8d:c5:a9:51:47:ef:4a:e3:a1:df:2c:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
Validity
Not Before: Mar 6 06:46:54 2025 GMT
Not After : Mar 5 06:51:54 2026 GMT
Subject: CN=119B262157ED0DAA5265DA809563EC8CCE7B0A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:b6:de:49:64:53:0b:f1:4f:48:dc:2b:39:
99:06:15:1e:2f:d2:cb:d1:dc:c7:22:7e:87:e0:64:
53:41:b6:fb:42:82:22:bb:b3:9b:50:90:fc:e7:55:
41:74:af:8f:53:70:29:e5:2e:74:da:2f:3d:1e:e9:
c2:e5:f9:95:c6:27:13:7e:bc:5c:5b:68:80:06:36:
da:f4:2a:dc:0d:e5:58:2b:5d:63:d7:ad:d2:63:dd:
6f:46:bb:38:4a:cf:0e:b2:9d:8f:74:35:ec:d4:42:
6e:a4:c7:81:b9:0f:fc:0e:99:53:a9:86:0f:f9:73:
5c:81:0b:97:c2:51:36:4e:bc:6d:09:1e:8c:35:08:
0a:96:b8:95:a6:88:30:bb:96:ec:ef:2b:37:18:a1:
29:6a:fb:3e:17:c3:0f:d0:62:0e:20:07:6f:cf:d0:
59:35:a8:f1:b9:ce:6f:f7:ec:0e:84:0f:bb:78:9a:
f4:3f:08:39:ee:27:9c:7b:e3:0e:88:40:49:7e:3e:
f9:c1:52:6c:c4:17:02:84:b8:ff:f3:44:8a:c9:89:
19:e6:2b:31:f7:00:b8:94:37:d6:c7:1e:20:a0:ce:
20:3d:c7:7f:b2:e7:f1:4a:38:17:82:08:c5:35:d6:
74:15:f0:b6:33:71:6b:f9:ea:9a:bb:e0:dd:7b:22:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:26:21:57:ED:0D:AA:52:65:DA:80:95:63:EC:8C:CE:7B:0A:3D
X509v3 Authority Key Identifier:
keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133312e302e34302e302f32322d3234203d3e203631383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ee:a8:c2:2d:65:53:89:a5:64:55:4a:84:5a:56:2e:9d:a8:
7f:8c:28:e3:6b:b8:0c:35:e3:e1:3d:8d:aa:6c:88:c4:89:6b:
29:c3:f6:8e:e1:e0:95:7e:7b:78:d6:1d:de:37:96:9d:14:31:
f8:46:c9:c3:ef:bd:f1:64:c7:b8:94:a0:a4:8c:ba:f1:6b:6e:
0f:27:51:f2:56:17:f2:18:d7:99:16:04:82:ec:25:d1:f9:4b:
e0:0b:8f:97:c4:6e:99:6d:65:24:3a:25:4d:7d:58:9b:6a:c7:
6f:8e:a7:35:52:3e:33:5d:c6:ae:18:cd:ee:67:21:c2:fe:b7:
ce:05:65:00:d2:50:4d:88:da:17:f2:5e:b3:b8:55:18:8d:9c:
7e:1f:ab:e9:3e:90:c9:f2:fc:47:69:4d:85:ae:d0:bd:94:f0:
86:3d:86:b8:9f:2f:86:4d:79:b6:63:31:1b:6d:a7:6e:38:16:
df:00:6f:4d:3b:02:e5:e5:72:ec:54:1b:8a:b8:78:30:27:a4:
7e:db:18:cc:10:c6:bf:e5:d9:f2:c2:04:48:16:97:6e:b7:b3:
95:e0:da:f7:1a:b9:6c:98:d6:aa:c6:14:ae:69:63:1e:1e:d1:
fc:4f:63:3c:1a:38:ff:c5:51:25:a1:d6:ee:f4:5b:3c:53:d8:
a4:2f:a8:ed
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbDiFFwlkGI3FqVFH70rjod8s6uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1NDg3MUE1OEJEMUQ1NjNDNjYyNDVCMTU3RTQzODgx
QTc0QThENzAeFw0yNTAzMDYwNjQ2NTRaFw0yNjAzMDUwNjUxNTRaMDMxMTAvBgNV
BAMTKDExOUIyNjIxNTdFRDBEQUE1MjY1REE4MDk1NjNFQzhDQ0U3QjBBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95rbeSWRTC/FPSNwrOZkGFR4v
0svR3McifofgZFNBtvtCgiK7s5tQkPznVUF0r49TcCnlLnTaLz0e6cLl+ZXGJxN+
vFxbaIAGNtr0KtwN5VgrXWPXrdJj3W9GuzhKzw6ynY90NezUQm6kx4G5D/wOmVOp
hg/5c1yBC5fCUTZOvG0JHow1CAqWuJWmiDC7luzvKzcYoSlq+z4Xww/QYg4gB2/P
0Fk1qPG5zm/37A6ED7t4mvQ/CDnuJ5x74w6IQEl+PvnBUmzEFwKEuP/zRIrJiRnm
KzH3ALiUN9bHHiCgziA9x3+y5/FKOBeCCMU11nQV8LYzcWv56pq74N17IuwdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEZsmIVftDapSZdqAlWPsjM57Cj0wHwYDVR0j
BBgwFoAUmVSHGli9HVY8ZiRbFX5DiBp0qNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNqN2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1
a3EvMS85OTU0ODcxQTU4QkQxRDU2M0M2NjI0NUIxNTdFNDM4ODFBNzRBOEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NTQ4NzFBNThCRDFENTYz
QzY2MjQ1QjE1N0U0Mzg4MUE3NEE4RDcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzajdjODVVbmd1ZlpXVVcxQUx1dnV6amVwdk53UXBCN0piYmZ5alF1NWtxLzEv
MzEzMzMxMmUzMDJlMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzODM1
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKDACgwDQYJKoZIhvcNAQELBQADggEBADruqMItZVOJpWRV
SoRaVi6dqH+MKONruAw14+E9japsiMSJaynD9o7h4JV+e3jWHd43lp0UMfhGycPv
vfFkx7iUoKSMuvFrbg8nUfJWF/IY15kWBILsJdH5S+ALj5fEbpltZSQ6JU19WJtq
x2+OpzVSPjNdxq4Yze5nIcL+t84FZQDSUE2I2hfyXrO4VRiNnH4fq+k+kMny/Edp
TYWu0L2U8IY9hrifL4ZNebZjMRttp244Ft8Ab007AuXlcuxUG4q4eDAnpH7bGMwQ
xr/l2fLCBEgWl263s5Xg2vcauWyY1qrGFK5pYx4e0fxPYzwaOP/FUSWh1u70WzxT
2KQvqO0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:52 2025 by rpki-client