Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa
File: 3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa (raw, json)
Hash identifier: 0+MUmnzH7unvoTRfvMWna9AvH6HN59OqEyu3uvZUj6M=
Subject key identifier: 24:A0:FC:30:3C:A1:CE:14:D0:CB:6B:08:81:FD:D0:E2:56:C8:F7:D4
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 25364C920DE4D059B582D858C544789562E7F347
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa
Signing time: Tue 20 Feb 2024 13:52:21 +0000
ROA not before: Tue 20 Feb 2024 13:47:21 +0000
ROA not after: Tue 18 Feb 2025 13:52:21 +0000
asID: 263860
IP address blocks: 168.227.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:36:4c:92:0d:e4:d0:59:b5:82:d8:58:c5:44:78:95:62:e7:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Feb 20 13:47:21 2024 GMT
Not After : Feb 18 13:52:21 2025 GMT
Subject: CN=24A0FC303CA1CE14D0CB6B0881FDD0E256C8F7D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:bb:eb:16:fe:81:7f:fa:c6:5b:69:33:45:
4f:a4:d8:e8:5a:95:14:bc:cf:6b:68:e6:96:11:26:
69:83:ec:c1:36:e3:3d:21:ba:c4:47:e9:14:dc:53:
6a:73:30:51:67:20:3a:f7:52:0c:1d:35:53:c6:62:
36:ac:91:35:ee:15:e4:1a:b4:6c:dc:57:db:24:2e:
37:2f:a3:39:6e:c4:c1:62:c6:ad:fb:28:6a:aa:54:
c6:d1:a5:97:13:37:bd:6a:1b:9f:9c:62:2e:c8:f8:
03:45:ef:e9:be:9e:1b:e0:3a:40:89:2e:20:28:38:
f2:24:3b:1b:20:32:75:96:37:73:c3:fe:bb:65:3a:
fc:08:94:da:23:75:97:79:52:d8:ce:20:f8:d5:1e:
d9:b1:a6:98:f4:66:08:d2:01:e1:b0:68:8e:0d:26:
56:e4:c8:ac:d5:90:97:b3:9a:35:7d:4e:38:2b:ec:
61:a0:9b:b2:0d:29:ed:18:fb:e8:97:a3:a4:2f:d1:
17:15:50:ac:af:fb:0d:39:e2:12:db:36:b2:9c:a9:
ee:92:df:25:44:4d:1c:49:25:b0:24:a2:7c:ef:02:
12:61:43:a0:d2:c1:7c:30:0d:26:a4:2d:37:34:a5:
08:89:09:4b:77:92:ae:d0:95:8b:1f:73:4c:3d:dc:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:FC:30:3C:A1:CE:14:D0:CB:6B:08:81:FD:D0:E2:56:C8:F7:D4
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.160.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c9:8a:de:35:8a:0e:bd:05:d2:40:81:0c:de:a9:0f:b1:84:
e0:41:79:19:c5:b3:5b:43:ac:fe:7d:20:4b:ab:58:cd:4b:30:
55:a7:1f:33:c2:8f:aa:08:39:7a:a2:70:b7:24:82:44:88:e2:
b3:1a:d8:45:a4:9b:f3:d3:62:da:81:84:e6:55:7e:1b:db:5f:
0e:25:ed:0f:4b:56:9c:dd:cb:0c:12:75:da:37:de:83:a4:8d:
4b:47:22:b3:e1:b0:ff:e6:f7:67:f4:bd:01:9c:28:ac:07:4d:
48:f1:d3:c6:f0:01:8e:d6:e3:a9:bf:45:df:7c:3e:3b:e6:1f:
ad:ca:6f:e9:9e:76:ca:78:43:30:dc:4e:d8:85:b1:72:04:d8:
1e:69:d8:ea:22:48:68:94:8e:9d:41:f4:86:23:12:d4:d6:34:
0c:59:ab:01:fc:fc:67:31:3e:31:91:f1:97:dd:b7:da:aa:63:
21:12:d3:d7:cb:39:26:c1:5c:ad:72:da:2b:c9:bf:ef:11:cf:
b6:70:aa:9f:d5:c1:9b:50:37:17:7c:e9:8f:5a:e5:74:b9:d1:
fa:29:47:36:11:61:ff:06:2d:7d:e9:2f:19:b8:40:30:13:1f:
aa:32:7a:17:6c:bf:3d:1f:7f:a7:73:8b:74:88:ca:63:17:c7:
0e:e3:be:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJTZMkg3k0Fm1gthYxUR4lWLn80cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFENzg2QTlFM0U5RjZGRDgwNjc2MzAyMjI5NjFCMTc3
RTBEQTAwMTAeFw0yNDAyMjAxMzQ3MjFaFw0yNTAyMTgxMzUyMjFaMDMxMTAvBgNV
BAMTKDI0QTBGQzMwM0NBMUNFMTREMENCNkIwODgxRkREMEUyNTZDOEY3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQ7vrFv6Bf/rGW2kzRU+k2Oha
lRS8z2to5pYRJmmD7ME24z0husRH6RTcU2pzMFFnIDr3UgwdNVPGYjaskTXuFeQa
tGzcV9skLjcvozluxMFixq37KGqqVMbRpZcTN71qG5+cYi7I+ANF7+m+nhvgOkCJ
LiAoOPIkOxsgMnWWN3PD/rtlOvwIlNojdZd5UtjOIPjVHtmxppj0ZgjSAeGwaI4N
JlbkyKzVkJezmjV9Tjgr7GGgm7INKe0Y++iXo6Qv0RcVUKyv+w054hLbNrKcqe6S
3yVETRxJJbAkonzvAhJhQ6DSwXwwDSakLTc0pQiJCUt3kq7QlYsfc0w93DA/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJKD8MDyhzhTQy2sIgf3Q4lbI99QwHwYDVR0j
BBgwFoAUIdeGqePp9v2AZ2MCIpYbF34NoAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlyMkFKR3l6b3F0V3NxRUYzSFFielI1cVphYXVDZTFWZ1BMWmZqVkxk
ZGovMC8yMUQ3ODZBOUUzRTlGNkZEODA2NzYzMDIyMjk2MUIxNzdFMERBMDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxRDc4NkE5RTNFOUY2RkQ4
MDY3NjMwMjIyOTYxQjE3N0UwREEwMDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5cjJBSkd5em9xdFdzcUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajjoDANBgkqhkiG9w0BAQsFAAOCAQEAUMmK
3jWKDr0F0kCBDN6pD7GE4EF5GcWzW0Os/n0gS6tYzUswVacfM8KPqgg5eqJwtySC
RIjisxrYRaSb89Ni2oGE5lV+G9tfDiXtD0tWnN3LDBJ12jfeg6SNS0cis+Gw/+b3
Z/S9AZworAdNSPHTxvABjtbjqb9F33w+O+Yfrcpv6Z52ynhDMNxO2IWxcgTYHmnY
6iJIaJSOnUH0hiMS1NY0DFmrAfz8ZzE+MZHxl9232qpjIRLT18s5JsFcrXLaK8m/
7xHPtnCqn9XBm1A3F3zpj1rldLnR+ilHNhFh/wYtfekvGbhAMBMfqjJ6F2y/PR9/
p3OLdIjKYxfHDuO+OA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:29 2025 by rpki-client