Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa
File: 3137302e302e3132382e302f32322d3234203d3e20323634393732.roa (raw, json)
Hash identifier: r7dlAsmCDUFAZG8LHFOu0FFHEe4F/EzbqMv4Ll2Rp8I=
Subject key identifier: 43:A7:19:54:13:3D:E8:AC:64:96:5F:A2:CC:8A:29:45:75:4F:9B:EB
Certificate issuer: /CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Certificate serial: 5754861E398173E2A3634E2620959152CCBB86A2
Authority key identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa
Signing time: Thu 06 Mar 2025 10:32:09 +0000
ROA not before: Thu 06 Mar 2025 10:27:09 +0000
ROA not after: Thu 05 Mar 2026 10:32:09 +0000
asID: 264972
IP address blocks: 170.0.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:54:86:1e:39:81:73:e2:a3:63:4e:26:20:95:91:52:cc:bb:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Validity
Not Before: Mar 6 10:27:09 2025 GMT
Not After : Mar 5 10:32:09 2026 GMT
Subject: CN=43A71954133DE8AC64965FA2CC8A2945754F9BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:7c:eb:83:b0:9b:5e:1a:2b:28:27:df:54:
47:d0:cd:27:25:ba:a2:a7:bd:f2:53:01:1d:a6:bf:
6f:5c:c9:95:2e:62:c1:74:ab:50:c0:ad:43:03:48:
01:a7:9a:74:20:90:05:e0:cb:2b:cb:ae:d1:a1:7c:
8d:36:9a:8b:5a:4a:84:8d:8b:53:3a:a7:99:47:21:
f3:2b:47:f9:be:f6:5a:4b:1b:14:91:e6:e1:4a:0c:
1d:2f:e1:3f:c1:61:ab:0c:0f:41:b0:41:c1:b4:03:
13:c5:73:4f:5d:34:7a:32:4c:6f:ef:cf:40:dd:c3:
cb:2a:d5:f9:06:86:bb:03:77:10:db:6a:f4:4b:d7:
8b:e1:0f:fb:7e:95:da:3e:92:c2:73:2a:ac:95:dd:
f0:05:df:69:c4:c7:1c:ab:54:94:42:84:9a:a3:77:
66:c2:60:e6:ed:c2:63:7f:05:3a:7c:fb:e1:20:ae:
de:b6:e9:38:11:3a:4d:7d:8b:5e:ee:34:3e:9f:96:
6e:47:48:6c:53:c8:66:1f:88:69:59:57:9d:8f:e7:
dd:e2:3a:f7:48:1b:ad:68:c5:4e:72:90:e7:ad:f9:
ff:3a:fa:72:d2:8d:40:30:a4:42:7f:8d:69:d5:6c:
28:6d:f6:16:af:a8:bc:ad:9f:f8:b0:7a:35:5b:71:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:19:54:13:3D:E8:AC:64:96:5F:A2:CC:8A:29:45:75:4F:9B:EB
X509v3 Authority Key Identifier:
keyid:66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:38:fe:9e:d0:c6:04:2b:5c:0d:22:83:e4:37:44:48:40:2c:
40:1c:b8:0c:7b:1a:2c:22:ac:e5:45:d2:29:fb:c9:0d:6c:f1:
86:77:ee:86:dc:0e:02:4f:e4:bd:66:8c:ff:23:2f:b9:e3:f9:
9b:e9:95:1a:99:4e:49:ab:04:a8:52:19:7b:98:d5:be:c5:8d:
b2:0b:f1:dc:01:23:16:54:bb:b4:eb:7d:c2:9b:f7:7a:b3:60:
42:96:03:e0:59:bc:34:d6:d4:7d:18:cd:56:5e:98:7f:fd:b3:
67:17:7d:39:f2:c3:3b:0c:a0:fb:50:ad:4d:2a:d9:f3:e8:c5:
71:0a:37:cb:23:a6:bc:b8:00:47:35:41:34:fe:ec:ce:0c:b8:
9a:a6:95:e8:39:0a:33:ff:ef:66:f2:2e:92:5b:7e:50:89:de:
f3:ea:a2:82:3c:38:fb:e2:4c:18:d5:a2:7c:ca:d7:98:45:82:
97:80:0c:6e:c2:41:bd:02:74:8a:5b:3a:40:b1:bd:fa:78:1c:
97:ed:45:a2:d5:bd:4d:f9:12:57:9e:58:cc:7d:42:7f:d9:e2:
d9:3d:39:f4:1f:11:30:dd:ea:6d:ba:c4:da:dc:84:86:98:7d:
31:ba:fd:4b:6a:33:3b:26:45:7e:c9:e2:8d:1e:ac:d0:b1:c7:
d8:3c:18:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV1SGHjmBc+KjY04mIJWRUsy7hqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYzNjQ0QUQ1MENCODM0MTg2MzYxOUREQjk1NDNGNEI5
RTZBQUExQzAeFw0yNTAzMDYxMDI3MDlaFw0yNjAzMDUxMDMyMDlaMDMxMTAvBgNV
BAMTKDQzQTcxOTU0MTMzREU4QUM2NDk2NUZBMkNDOEEyOTQ1NzU0RjlCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkXzrg7CbXhorKCffVEfQzScl
uqKnvfJTAR2mv29cyZUuYsF0q1DArUMDSAGnmnQgkAXgyyvLrtGhfI02motaSoSN
i1M6p5lHIfMrR/m+9lpLGxSR5uFKDB0v4T/BYasMD0GwQcG0AxPFc09dNHoyTG/v
z0Ddw8sq1fkGhrsDdxDbavRL14vhD/t+ldo+ksJzKqyV3fAF32nExxyrVJRChJqj
d2bCYObtwmN/BTp8++Egrt626TgROk19i17uND6flm5HSGxTyGYfiGlZV52P593i
OvdIG61oxU5ykOet+f86+nLSjUAwpEJ/jWnVbCht9havqLytn/iwejVbcQkzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ6cZVBM96Kxkll+izIopRXVPm+swHwYDVR0j
BBgwFoAUZjZErVDLg0GGNhnduVQ/S55qqhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlYyOWpZZnJZM0hpYTFhVWtvUUVmNWhacGNlTEhDN1J0SnpmMm9VZjlx
ZTIvMS82NjM2NDRBRDUwQ0I4MzQxODYzNjE5RERCOTU0M0Y0QjlFNkFBQTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2MzY0NEFENTBDQjgzNDE4
NjM2MTlEREI5NTQzRjRCOUU2QUFBMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWMjlqWWZyWTNIaWExYVVrb1FFZjVoWnBjZUxIQzdSdEp6ZjJvVWY5cWUyLzEv
MzEzNzMwMmUzMDJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgCAMA0GCSqGSIb3DQEBCwUAA4IBAQB6OP6e0MYE
K1wNIoPkN0RIQCxAHLgMexosIqzlRdIp+8kNbPGGd+6G3A4CT+S9Zoz/Iy+54/mb
6ZUamU5JqwSoUhl7mNW+xY2yC/HcASMWVLu0633Cm/d6s2BClgPgWbw01tR9GM1W
Xph//bNnF3058sM7DKD7UK1NKtnz6MVxCjfLI6a8uABHNUE0/uzODLiappXoOQoz
/+9m8i6SW35Qid7z6qKCPDj74kwY1aJ8yteYRYKXgAxuwkG9AnSKWzpAsb36eByX
7UWi1b1N+RJXnljMfUJ/2eLZPTn0HxEw3eptusTa3ISGmH0xuv1LajM7JkV+yeKN
HqzQscfYPBiB
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:16:48 2025 by rpki-client