Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
File: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (raw, json)
Hash identifier: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=
Subject key identifier: 58:EF:61:6D:66:CB:0D:94:FC:D2:9E:43:E0:41:FF:99:8F:0B:7B:3D
Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial: 055608B2142B2F22E35B7F7ECDC0EA8BD5BFEBFA
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
Signing time: Thu 06 Mar 2025 04:01:05 +0000
ROA not before: Thu 06 Mar 2025 03:56:05 +0000
ROA not after: Thu 05 Mar 2026 04:01:05 +0000
asID: 264992
IP address blocks: 170.84.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:56:08:b2:14:2b:2f:22:e3:5b:7f:7e:cd:c0:ea:8b:d5:bf:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Validity
Not Before: Mar 6 03:56:05 2025 GMT
Not After : Mar 5 04:01:05 2026 GMT
Subject: CN=58EF616D66CB0D94FCD29E43E041FF998F0B7B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:0b:44:ee:c5:3a:79:48:1f:b5:eb:28:32:
c8:da:dd:c1:0e:ee:fc:88:d1:71:cd:d4:2c:b2:e0:
dd:45:5d:11:5e:d4:ce:d8:25:b7:ae:eb:42:63:54:
54:9a:df:93:e1:f7:ee:6a:eb:d5:dc:1f:ba:d2:ff:
75:48:48:6f:cf:c6:3c:71:cb:ea:48:61:80:32:4a:
7a:37:3f:b4:6a:eb:46:7e:ce:bb:dd:8b:f2:01:e9:
26:4d:6b:f3:45:d1:9a:ad:f6:eb:60:58:5e:4f:b9:
17:23:01:2e:1a:11:b3:94:4f:e1:cd:f5:54:92:5c:
ab:d3:a3:61:75:6e:35:16:76:12:27:b6:61:ee:3a:
1f:09:74:ff:02:c2:7c:51:7d:34:56:da:4e:3c:a4:
94:23:18:24:78:7f:ea:83:3e:41:75:3d:0f:67:89:
7a:1f:9b:e6:bf:79:d3:0a:55:cd:7c:0c:25:4e:8a:
70:5c:db:18:45:c3:17:a9:ff:c5:1d:49:e8:a3:23:
42:0b:a3:d3:13:8d:1a:66:88:78:1e:e0:b1:4e:ba:
8e:62:3f:46:60:b6:0c:f7:80:a0:fa:0e:f6:0c:f9:
46:97:1e:55:bd:09:cb:46:4d:b5:74:8d:05:fd:f0:
0b:d3:7f:db:43:9d:b5:fa:db:73:9e:cc:8d:3b:47:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:61:6D:66:CB:0D:94:FC:D2:9E:43:E0:41:FF:99:8F:0B:7B:3D
X509v3 Authority Key Identifier:
keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.96.0/22
Signature Algorithm: sha256WithRSAEncryption
89:2d:e3:3c:0f:87:ae:53:5c:62:9f:41:14:3e:a8:6c:4c:f5:
fd:31:b6:41:e2:8c:5d:76:3d:a8:37:c8:7f:af:4c:d3:3e:02:
98:d7:a2:ca:46:56:dd:dd:81:cd:29:10:60:f3:ea:2b:9c:3c:
31:e6:b6:2a:25:28:3e:15:23:a1:55:13:4a:57:2f:75:e4:10:
8e:a3:a7:7f:7c:d6:42:9a:e8:14:a4:b8:ca:b2:b8:8c:60:e2:
3e:67:05:85:3b:95:8d:87:f8:7b:ad:b6:f5:d8:e8:b5:b5:84:
d9:73:9c:be:fd:0b:19:60:2b:44:d6:fa:13:9e:b6:5e:4f:8d:
1a:11:3a:35:be:66:0c:59:f9:43:c5:1d:1f:02:d9:25:75:c4:
17:d5:97:f2:6c:05:78:ea:dc:b1:17:05:b7:60:1c:82:23:29:
79:83:3d:9c:2d:3d:8b:72:53:fd:51:84:71:8c:a7:58:c6:65:
df:78:50:0a:7e:59:43:4a:f2:c5:11:d6:94:6d:06:d4:b2:83:
5f:66:1e:21:09:f4:28:3d:eb:53:ea:63:be:86:42:00:0e:e7:
43:37:20:21:88:e8:53:21:28:4b:c5:28:29:fa:df:61:16:9f:
a9:00:a8:3a:b3:ab:54:10:aa:28:4e:d6:72:91:9a:89:31:d3:
24:e6:ff:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBVYIshQrLyLjW39+zcDqi9W/6/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD
RDhBMjIzRjAeFw0yNTAzMDYwMzU2MDVaFw0yNjAzMDUwNDAxMDVaMDMxMTAvBgNV
BAMTKDU4RUY2MTZENjZDQjBEOTRGQ0QyOUU0M0UwNDFGRjk5OEYwQjdCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChAtE7sU6eUgftesoMsja3cEO
7vyI0XHN1Cyy4N1FXRFe1M7YJbeu60JjVFSa35Ph9+5q69XcH7rS/3VISG/Pxjxx
y+pIYYAySno3P7Rq60Z+zrvdi/IB6SZNa/NF0Zqt9utgWF5PuRcjAS4aEbOUT+HN
9VSSXKvTo2F1bjUWdhIntmHuOh8JdP8CwnxRfTRW2k48pJQjGCR4f+qDPkF1PQ9n
iXofm+a/edMKVc18DCVOinBc2xhFwxep/8UdSeijI0ILo9MTjRpmiHge4LFOuo5i
P0Zgtgz3gKD6DvYM+UaXHlW9CctGTbV0jQX98AvTf9tDnbX623OezI07RyOzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWO9hbWbLDZT80p5D4EH/mY8Lez0wHwYDVR0j
BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo
TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1
Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0Tm9zM0twbmZaalJnaXFkanNCdkZDcjM5amZLMnZLaWVtVzFQeEhaaE5YLzEv
MzEzNzMwMmUzODM0MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlRgMA0GCSqGSIb3DQEBCwUAA4IBAQCJLeM8D4eu
U1xin0EUPqhsTPX9MbZB4oxddj2oN8h/r0zTPgKY16LKRlbd3YHNKRBg8+ornDwx
5rYqJSg+FSOhVRNKVy915BCOo6d/fNZCmugUpLjKsriMYOI+ZwWFO5WNh/h7rbb1
2Oi1tYTZc5y+/QsZYCtE1voTnrZeT40aETo1vmYMWflDxR0fAtkldcQX1ZfybAV4
6tyxFwW3YByCIyl5gz2cLT2LclP9UYRxjKdYxmXfeFAKfllDSvLFEdaUbQbUsoNf
Zh4hCfQoPetT6mO+hkIADudDNyAhiOhTIShLxSgp+t9hFp+pAKg6s6tUEKooTtZy
kZqJMdMk5v9k
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:25:33 2025 by rpki-client