Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa
File: 3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa (raw, json)
Hash identifier: hKdyD90Bko3S2/7RS3Rud3ELwGVT+jbPHK2DubIa6n4=
Subject key identifier: 0F:0B:5E:03:35:1B:49:6F:F8:B3:B1:C2:D5:F6:79:53:DC:6A:07:23
Certificate issuer: /CN=CFFCFA3F50E2451E3014BE753713F1FC07678378
Certificate serial: 28896AD89789C21B0150EE5195C4E208BEFDFE2C
Authority key identifier: CF:FC:FA:3F:50:E2:45:1E:30:14:BE:75:37:13:F1:FC:07:67:83:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFCFA3F50E2451E3014BE753713F1FC07678378.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa
Signing time: Tue 23 Apr 2024 17:15:49 +0000
ROA not before: Tue 23 Apr 2024 17:10:49 +0000
ROA not after: Tue 22 Apr 2025 17:15:49 +0000
asID: 263393
IP address blocks: 177.222.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:89:6a:d8:97:89:c2:1b:01:50:ee:51:95:c4:e2:08:be:fd:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFFCFA3F50E2451E3014BE753713F1FC07678378
Validity
Not Before: Apr 23 17:10:49 2024 GMT
Not After : Apr 22 17:15:49 2025 GMT
Subject: CN=0F0B5E03351B496FF8B3B1C2D5F67953DC6A0723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:42:b4:6f:75:a9:9d:ec:39:9a:20:8b:b4:
d1:5a:9b:aa:42:8e:cd:0a:85:a7:21:bf:6c:7d:02:
1c:e8:e4:ae:85:85:43:b2:3d:f6:87:5b:d5:bc:53:
98:17:95:af:bd:9e:37:2b:4e:58:33:a9:36:7f:83:
af:79:6a:fc:90:60:30:32:db:d7:90:4e:fd:21:e4:
24:70:f9:11:36:53:54:af:2c:02:17:a3:63:a2:96:
d1:82:f7:8e:85:61:a5:e8:06:31:44:e4:ef:82:d0:
ad:81:39:9a:dd:b9:32:67:6f:ed:9e:1a:07:48:b8:
44:30:4b:1f:92:4e:89:f6:2c:cc:c9:a3:0d:9f:8f:
ce:9e:6f:69:8e:0e:4f:f4:c4:09:37:21:d6:54:c1:
79:d7:ee:d1:b7:d7:51:f2:74:3c:b9:48:ea:75:fc:
0f:25:90:a0:38:eb:90:6b:e2:22:95:71:31:69:9b:
df:51:fc:aa:1a:c7:ec:f6:56:e6:fb:a8:7e:46:4c:
6c:d9:dd:6b:bd:46:b8:64:ac:43:6f:75:e0:f0:db:
d9:95:1f:5e:f8:b8:55:5b:57:cb:c7:cd:8f:5e:ab:
c7:7b:29:f3:24:e4:0a:82:b5:73:3a:af:fc:18:c5:
63:7c:6b:c6:64:63:d0:11:2a:e6:4a:5a:32:44:4f:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:5E:03:35:1B:49:6F:F8:B3:B1:C2:D5:F6:79:53:DC:6A:07:23
X509v3 Authority Key Identifier:
keyid:CF:FC:FA:3F:50:E2:45:1E:30:14:BE:75:37:13:F1:FC:07:67:83:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/CFFCFA3F50E2451E3014BE753713F1FC07678378.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFCFA3F50E2451E3014BE753713F1FC07678378.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.222.200.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:11:75:94:d7:61:b2:66:25:1c:3a:e0:79:ea:56:2e:b1:b6:
47:da:0b:74:69:a0:48:83:98:72:d8:08:73:2f:b4:6b:6b:0d:
da:e1:88:7d:55:f6:6a:4f:ba:83:d5:b9:ec:32:3c:b8:96:28:
3b:3d:76:f7:ca:00:8d:52:67:e9:19:ee:57:fc:6c:8d:f4:e3:
c1:6b:6c:06:24:2e:8c:c7:32:25:b9:63:66:60:c2:e4:e1:e0:
a7:d4:2f:9f:5b:93:67:d8:86:48:00:3f:4c:a5:cf:75:0a:03:
5f:b3:e1:85:63:e4:d0:45:ce:16:60:99:21:1e:cd:5c:57:e3:
46:41:11:06:18:2f:47:39:de:83:20:51:70:10:a8:8f:46:e9:
e4:16:00:75:63:3a:e6:b5:91:77:77:73:ad:82:53:1f:6d:b8:
6f:00:ff:9e:ba:04:69:69:c9:f5:ca:b9:fd:bc:4c:3f:31:f8:
d3:67:63:39:15:26:c2:16:a3:8a:1c:06:47:37:6b:a1:66:1e:
37:5d:c5:68:6a:05:6f:94:0b:75:29:87:1e:d1:97:3f:61:b5:
38:c1:11:fd:49:1a:e3:28:71:7c:76:ed:ae:d5:65:ca:06:09:
f3:74:4c:f1:95:9c:3a:02:b6:18:44:f5:67:ab:d4:2d:55:bb:
ff:9a:af:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKIlq2JeJwhsBUO5RlcTiCL79/iwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZGQ0ZBM0Y1MEUyNDUxRTMwMTRCRTc1MzcxM0YxRkMw
NzY3ODM3ODAeFw0yNDA0MjMxNzEwNDlaFw0yNTA0MjIxNzE1NDlaMDMxMTAvBgNV
BAMTKDBGMEI1RTAzMzUxQjQ5NkZGOEIzQjFDMkQ1RjY3OTUzREM2QTA3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVkK0b3Wpnew5miCLtNFam6pC
js0Khachv2x9Ahzo5K6FhUOyPfaHW9W8U5gXla+9njcrTlgzqTZ/g695avyQYDAy
29eQTv0h5CRw+RE2U1SvLAIXo2OiltGC946FYaXoBjFE5O+C0K2BOZrduTJnb+2e
GgdIuEQwSx+STon2LMzJow2fj86eb2mODk/0xAk3IdZUwXnX7tG311HydDy5SOp1
/A8lkKA465Br4iKVcTFpm99R/Koax+z2Vub7qH5GTGzZ3Wu9RrhkrENvdeDw29mV
H174uFVbV8vHzY9eq8d7KfMk5AqCtXM6r/wYxWN8a8ZkY9ARKuZKWjJET6dBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDwteAzUbSW/4s7HC1fZ5U9xqByMwHwYDVR0j
BBgwFoAUz/z6P1DiRR4wFL51NxPx/Adng3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdY
NTUvMC9DRkZDRkEzRjUwRTI0NTFFMzAxNEJFNzUzNzEzRjFGQzA3Njc4Mzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkNGQTNGNTBFMjQ1MUUz
MDE0QkU3NTM3MTNGMUZDMDc2NzgzNzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JwcFFlY1h6OVU0bzVSYURmTHp1SHR0TkJib0dkM3hyUDNnUmo4TlR3WDU1LzAv
MzEzNzM3MmUzMjMyMzIyZTMyMzAzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7HeyDANBgkqhkiG9w0BAQsFAAOCAQEAbRF1
lNdhsmYlHDrgeepWLrG2R9oLdGmgSIOYctgIcy+0a2sN2uGIfVX2ak+6g9W57DI8
uJYoOz1298oAjVJn6RnuV/xsjfTjwWtsBiQujMcyJbljZmDC5OHgp9Qvn1uTZ9iG
SAA/TKXPdQoDX7PhhWPk0EXOFmCZIR7NXFfjRkERBhgvRznegyBRcBCoj0bp5BYA
dWM65rWRd3dzrYJTH224bwD/nroEaWnJ9cq5/bxMPzH402djORUmwhajihwGRzdr
oWYeN13FaGoFb5QLdSmHHtGXP2G1OMER/Uka4yhxfHbtrtVlygYJ83RM8ZWcOgK2
GET1Z6vULVW7/5qvCw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:45:46 2025 by rpki-client