Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32332d3233203d3e20323633393133.roa
File: 3137302e3233312e3231362e302f32332d3233203d3e20323633393133.roa (raw, json)
Hash identifier: No9MWv6VV/j0lZZGIbUc0ULfVLB0lBv4uP+r6w/1i4g=
Subject key identifier: AD:B2:F2:DF:80:9D:E2:58:99:21:25:B0:A5:B0:EC:24:5F:0C:70:02
Certificate issuer: /CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Certificate serial: 1F2EDA8749C1E2B773F673D118A517E12C56B6B2
Authority key identifier: A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32332d3233203d3e20323633393133.roa
Signing time: Thu 02 Jan 2025 12:27:11 +0000
ROA not before: Thu 02 Jan 2025 12:22:11 +0000
ROA not after: Thu 01 Jan 2026 12:27:11 +0000
asID: 263913
IP address blocks: 170.231.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2e:da:87:49:c1:e2:b7:73:f6:73:d1:18:a5:17:e1:2c:56:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Validity
Not Before: Jan 2 12:22:11 2025 GMT
Not After : Jan 1 12:27:11 2026 GMT
Subject: CN=ADB2F2DF809DE258992125B0A5B0EC245F0C7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:44:32:f4:e4:89:53:65:5e:f6:e9:7b:04:
d9:34:0a:98:62:1c:59:af:97:41:dd:cd:dd:d1:b1:
fc:d3:69:96:75:72:3b:41:c0:2e:38:28:38:3b:36:
6e:b0:b3:b4:44:cb:42:a4:ee:04:b5:75:77:98:4b:
ae:64:78:72:40:35:57:8d:75:5f:ea:55:06:1d:e2:
43:1a:1e:a1:ca:5d:31:e1:44:dd:54:82:3a:75:ec:
cb:f3:41:7d:8d:c1:06:0e:92:f9:3b:be:33:cf:73:
73:03:95:77:90:0a:c5:c7:c5:c2:65:fb:3b:3a:03:
1a:19:e6:51:69:13:71:3b:d4:9c:9f:74:85:d2:af:
53:e5:0f:96:7f:30:ce:cb:5b:39:ab:e6:52:df:92:
44:f2:2c:ae:a4:10:1a:a3:24:fe:bc:97:57:29:19:
a8:f3:e8:14:dc:8f:86:1a:89:7a:5e:c9:28:dd:a8:
24:6a:37:61:4f:18:19:43:19:df:37:24:26:68:c0:
ee:11:e6:99:43:c8:dd:1f:fd:eb:d8:24:1c:20:9e:
59:6d:59:a1:49:50:a7:98:4f:06:09:eb:28:74:a1:
df:78:01:77:af:8d:d0:5c:57:bb:9e:73:4f:c2:be:
ca:fb:8b:80:12:d2:d9:f1:2f:40:7f:91:1d:12:48:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:F2:DF:80:9D:E2:58:99:21:25:B0:A5:B0:EC:24:5F:0C:70:02
X509v3 Authority Key Identifier:
keyid:A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32332d3233203d3e20323633393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.216.0/23
Signature Algorithm: sha256WithRSAEncryption
52:52:fd:19:01:67:2c:d7:d8:8f:ba:4b:bd:7d:d6:a8:fa:a9:
75:b1:42:ed:70:d7:2b:05:54:08:dd:e6:6a:42:8a:a7:5d:48:
54:aa:c3:6d:12:e5:cf:cc:3d:00:d1:39:e0:dd:3c:ac:f6:2b:
1e:e0:a7:fe:20:a8:a2:b8:19:b1:cb:d4:87:5b:89:76:cd:38:
aa:5e:d5:d8:a5:c9:4c:4d:ec:36:b3:98:54:95:64:8a:6d:e4:
80:03:59:c0:27:33:a1:a5:3b:3b:49:7b:39:c1:e8:e0:ee:e0:
d2:30:37:e2:09:6b:4e:1b:e7:6f:ba:37:5c:20:db:c4:c7:9a:
e1:66:89:31:8e:69:5e:7b:80:80:7d:f0:b3:0a:af:11:33:ce:
b9:61:3c:25:62:13:a2:e7:da:8e:d1:c0:3e:ee:d0:46:20:1d:
c1:a1:86:bc:63:64:3e:6f:b2:cd:2c:f8:60:e6:dd:06:b7:95:
b1:68:59:0c:e6:a9:f6:26:62:54:93:81:17:e2:61:ce:19:d4:
c9:4a:08:ac:70:81:9c:4e:d9:84:e0:e9:b8:d3:6b:34:f5:5b:
21:85:68:4c:f8:bc:a6:e4:52:be:87:61:2d:4b:de:ae:96:d3:
61:ee:3d:af:5f:b9:06:15:52:a5:c1:77:64:24:1c:6b:00:65:
96:cb:fd:8f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHy7ah0nB4rdz9nPRGKUX4SxWtrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDNDczRDQzN0NFQkQxNzBGNzIzRDM0NUQyOTY3NjY2
QTdEMkM4OTAeFw0yNTAxMDIxMjIyMTFaFw0yNjAxMDExMjI3MTFaMDMxMTAvBgNV
BAMTKEFEQjJGMkRGODA5REUyNTg5OTIxMjVCMEE1QjBFQzI0NUYwQzcwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnkQy9OSJU2Ve9ul7BNk0Cphi
HFmvl0Hdzd3RsfzTaZZ1cjtBwC44KDg7Nm6ws7REy0Kk7gS1dXeYS65keHJANVeN
dV/qVQYd4kMaHqHKXTHhRN1Ugjp17MvzQX2NwQYOkvk7vjPPc3MDlXeQCsXHxcJl
+zs6AxoZ5lFpE3E71JyfdIXSr1PlD5Z/MM7LWzmr5lLfkkTyLK6kEBqjJP68l1cp
Gajz6BTcj4YaiXpeySjdqCRqN2FPGBlDGd83JCZowO4R5plDyN0f/evYJBwgnllt
WaFJUKeYTwYJ6yh0od94AXevjdBcV7uec0/Cvsr7i4AS0tnxL0B/kR0SSER7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrbLy34Cd4liZISWwpbDsJF8McAIwHwYDVR0j
BBgwFoAUocRz1DfOvRcPcj00XSlnZmp9LIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9BMUM0NzNENDM3Q0VCRDE3MEY3MjNEMzQ1RDI5Njc2NjZBN0QyQzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQzQ3M0Q0MzdDRUJEMTcw
RjcyM0QzNDVEMjk2NzY2NkE3RDJDODkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXVDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAv
MzEzNzMwMmUzMjMzMzEyZTMyMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarn2DANBgkqhkiG9w0BAQsFAAOCAQEAUlL9
GQFnLNfYj7pLvX3WqPqpdbFC7XDXKwVUCN3makKKp11IVKrDbRLlz8w9ANE54N08
rPYrHuCn/iCoorgZscvUh1uJds04ql7V2KXJTE3sNrOYVJVkim3kgANZwCczoaU7
O0l7OcHo4O7g0jA34glrThvnb7o3XCDbxMea4WaJMY5pXnuAgH3wswqvETPOuWE8
JWIToufajtHAPu7QRiAdwaGGvGNkPm+yzSz4YObdBreVsWhZDOap9iZiVJOBF+Jh
zhnUyUoIrHCBnE7ZhODpuNNrNPVbIYVoTPi8puRSvodhLUverpbTYe49r1+5BhVS
pcF3ZCQcawBllsv9jw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:37:48 2025 by rpki-client