Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
File: 3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (raw, json)
Hash identifier: 101rjIqxZWzwo6UJcb60vdJo6OfrKdws9hoMDv1izQk=
Subject key identifier: BD:2D:EB:4F:B0:6C:FE:7E:B3:2D:E1:0C:FE:49:BF:93:AC:73:F9:73
Certificate issuer: /CN=3AB8D694A7B0FD123FE2783B274D7BF701A79F5B
Certificate serial: 64433941816AB9767A07AA9237235310E427AD9B
Authority key identifier: 3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
Signing time: Thu 05 Jun 2025 20:53:45 +0000
ROA not before: Thu 05 Jun 2025 20:48:45 +0000
ROA not after: Thu 04 Jun 2026 20:53:45 +0000
asID: 266399
IP address blocks: 170.81.92.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:43:39:41:81:6a:b9:76:7a:07:aa:92:37:23:53:10:e4:27:ad:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AB8D694A7B0FD123FE2783B274D7BF701A79F5B
Validity
Not Before: Jun 5 20:48:45 2025 GMT
Not After : Jun 4 20:53:45 2026 GMT
Subject: CN=BD2DEB4FB06CFE7EB32DE10CFE49BF93AC73F973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:79:76:0a:fb:53:6f:55:74:9d:8c:37:8c:
33:3c:a1:71:b2:08:e0:58:f4:e7:1f:3c:ff:92:b4:
4c:48:1a:62:74:36:6f:c6:ec:fd:1b:0d:53:8b:ae:
a5:a9:6f:02:2e:ab:7b:58:b9:2c:13:3b:68:99:de:
d6:c1:66:78:a1:21:2c:9f:48:d6:8f:0e:fb:c6:6d:
e7:f6:66:ae:49:45:a5:e4:c9:bd:0c:4e:f4:f2:bd:
f4:85:cf:4e:21:f5:0f:d1:8d:63:40:8b:81:9d:3e:
8c:18:92:c3:4c:ca:f4:09:07:7e:1e:77:63:eb:39:
bb:30:b3:fd:b9:db:c4:df:f0:93:a5:a5:37:66:b4:
1c:32:c5:52:84:00:d4:cb:c0:37:3b:40:64:4a:48:
6c:78:c5:0d:ed:fc:17:19:e2:cc:a7:12:54:67:a7:
c4:09:5e:2a:7a:ba:73:ee:1d:00:2b:f1:a0:89:c1:
54:6e:69:ad:32:9a:49:e7:ef:ec:59:05:18:0b:1e:
01:fa:1b:b7:00:c9:b0:bc:d3:c8:68:af:0b:2b:f5:
b9:5d:7f:a5:dc:df:9a:c7:e4:57:34:b7:e4:76:2b:
9d:ca:fa:9d:de:6d:c9:4b:f0:89:11:89:3a:8e:dd:
5f:12:64:a0:95:46:91:be:ca:99:25:49:9c:40:e9:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:EB:4F:B0:6C:FE:7E:B3:2D:E1:0C:FE:49:BF:93:AC:73:F9:73
X509v3 Authority Key Identifier:
keyid:3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.92.0/22
Signature Algorithm: sha256WithRSAEncryption
71:9e:fb:46:ba:51:63:c7:53:d4:34:26:9c:e0:63:a0:99:b0:
29:18:73:55:11:1b:21:c6:47:eb:09:6b:ff:5f:7e:13:aa:24:
5d:02:ad:b1:41:d3:23:f7:43:fe:48:48:3b:b9:60:38:df:3d:
6c:b3:49:79:22:88:e7:25:6e:52:9b:4a:3c:ab:e7:83:78:e9:
12:2d:0d:3f:f4:19:ce:ae:fd:93:f4:a1:d3:7b:c6:62:29:bc:
3e:b9:de:cb:9a:8f:8f:2a:86:45:46:1f:6d:aa:90:ab:1f:98:
3e:bf:4e:c1:81:0f:c6:3e:fa:c2:44:2e:a9:21:90:22:b4:64:
48:6b:62:22:c8:3b:6d:8f:85:79:55:63:12:e3:92:ef:a8:a4:
62:29:60:39:e7:5f:df:3c:56:f6:de:c6:61:ce:8a:a8:63:34:
96:4b:cd:b7:e6:3f:af:91:81:9f:94:00:7b:f1:67:6b:c5:85:
1a:a2:fa:07:d3:b4:81:c8:61:45:6d:27:8d:d0:9b:7e:a8:06:
4c:82:75:53:4c:61:83:90:98:45:d1:9b:1d:d6:f0:45:00:d4:
26:06:af:86:ab:e1:e7:49:d4:9a:96:03:a6:15:b9:c9:9d:09:
3e:da:74:80:da:9a:fc:5a:d2:72:ce:fe:24:cb:00:6a:4f:1e:
20:51:46:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZEM5QYFquXZ6B6qSNyNTEOQnrZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FCOEQ2OTRBN0IwRkQxMjNGRTI3ODNCMjc0RDdCRjcw
MUE3OUY1QjAeFw0yNTA2MDUyMDQ4NDVaFw0yNjA2MDQyMDUzNDVaMDMxMTAvBgNV
BAMTKEJEMkRFQjRGQjA2Q0ZFN0VCMzJERTEwQ0ZFNDlCRjkzQUM3M0Y5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDu3l2CvtTb1V0nYw3jDM8oXGy
COBY9OcfPP+StExIGmJ0Nm/G7P0bDVOLrqWpbwIuq3tYuSwTO2iZ3tbBZnihISyf
SNaPDvvGbef2Zq5JRaXkyb0MTvTyvfSFz04h9Q/RjWNAi4GdPowYksNMyvQJB34e
d2PrObsws/2528Tf8JOlpTdmtBwyxVKEANTLwDc7QGRKSGx4xQ3t/BcZ4synElRn
p8QJXip6unPuHQAr8aCJwVRuaa0ymknn7+xZBRgLHgH6G7cAybC808horwsr9bld
f6Xc35rH5Fc0t+R2K53K+p3ebclL8IkRiTqO3V8SZKCVRpG+ypklSZxA6SI1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvS3rT7Bs/n6zLeEM/km/k6xz+XMwHwYDVR0j
BBgwFoAUOrjWlKew/RI/4ng7J0179wGnn1swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFk
eHEvMC8zQUI4RDY5NEE3QjBGRDEyM0ZFMjc4M0IyNzREN0JGNzAxQTc5RjVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQjhENjk0QTdCMEZEMTIz
RkUyNzgzQjI3NEQ3QkY3MDFBNzlGNUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyaVJZM1JVWEExMXdQUVVlSk5TeDhYY1hmd1hXVEFhV0puc0hUZnJRZHhxLzAv
MzEzNzMwMmUzODMxMmUzOTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlFcMA0GCSqGSIb3DQEBCwUAA4IBAQBxnvtGulFj
x1PUNCac4GOgmbApGHNVERshxkfrCWv/X34TqiRdAq2xQdMj90P+SEg7uWA43z1s
s0l5IojnJW5Sm0o8q+eDeOkSLQ0/9BnOrv2T9KHTe8ZiKbw+ud7Lmo+PKoZFRh9t
qpCrH5g+v07BgQ/GPvrCRC6pIZAitGRIa2IiyDttj4V5VWMS45LvqKRiKWA551/f
PFb23sZhzoqoYzSWS8235j+vkYGflAB78WdrxYUaovoH07SByGFFbSeN0Jt+qAZM
gnVTTGGDkJhF0Zsd1vBFANQmBq+Gq+HnSdSalgOmFbnJnQk+2nSA2pr8WtJyzv4k
ywBqTx4gUUZt
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:46:39 2025 by rpki-client