Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa
File: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (raw, json)
Hash identifier: IJwhCRZ/eia9wbArW/hVlZ/3CzBgX2zAxbknxwjozN0=
Subject key identifier: 90:E9:28:77:42:3C:A3:9B:0A:1C:5B:38:C7:FB:92:BB:59:5E:83:0D
Certificate issuer: /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial: 73BA2B45FE84CC8874D04DF960D5C00991ACFAB0
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa
Signing time: Thu 06 Mar 2025 02:14:52 +0000
ROA not before: Thu 06 Mar 2025 02:09:52 +0000
ROA not after: Thu 05 Mar 2026 02:14:52 +0000
asID: 271001
IP address blocks: 177.223.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ba:2b:45:fe:84:cc:88:74:d0:4d:f9:60:d5:c0:09:91:ac:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Validity
Not Before: Mar 6 02:09:52 2025 GMT
Not After : Mar 5 02:14:52 2026 GMT
Subject: CN=90E92877423CA39B0A1C5B38C7FB92BB595E830D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:00:3c:56:de:98:ff:11:74:d3:e6:7c:05:
ca:21:1b:e4:66:48:b0:16:62:b7:9e:13:7c:94:85:
b4:6a:a5:76:8d:2a:16:1f:05:2c:ca:6e:67:5c:fa:
15:fa:e1:dc:21:c3:db:48:1c:88:c7:cc:44:12:9e:
45:27:ca:5c:0a:c2:3d:9e:8c:94:c3:e6:b3:34:15:
87:00:36:af:47:99:33:d4:77:bb:eb:5e:36:f1:74:
67:cb:7f:23:93:c5:de:44:cf:5e:60:7a:3c:27:82:
d1:85:f7:4d:c8:fa:6b:98:6c:23:ff:b1:1a:57:03:
b3:7a:2e:a3:d7:86:eb:96:48:df:79:ef:85:5a:d0:
b4:b2:88:23:84:ca:e0:09:84:9e:01:95:46:0a:66:
c4:08:8e:41:52:14:ff:07:f5:f2:32:dd:03:76:77:
ce:12:04:06:31:7f:24:27:5d:26:5e:74:7e:be:0b:
cb:6a:e4:46:59:e0:50:eb:bd:ee:5a:5a:fb:75:c4:
ae:66:19:36:2e:78:5e:e3:5c:fd:8c:55:cf:6d:09:
b6:28:fa:b2:61:39:0e:b7:28:9f:0c:06:9a:39:e5:
61:3f:4a:a4:8b:71:96:cd:1d:3e:c2:78:71:be:a8:
00:fe:02:49:9a:bb:63:2a:36:b4:19:39:e6:04:ab:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:28:77:42:3C:A3:9B:0A:1C:5B:38:C7:FB:92:BB:59:5E:83:0D
X509v3 Authority Key Identifier:
keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:28:5b:f0:01:78:e1:12:e0:da:c3:a3:5f:70:97:dd:c3:27:
f8:50:fc:e8:c4:4c:ab:a5:2f:ac:8a:d5:38:81:05:19:b5:e3:
a4:13:98:e9:d8:25:82:27:3b:7b:05:da:07:cb:94:59:1b:64:
a4:a0:33:00:90:33:38:6a:8f:e5:a6:1c:77:2d:60:be:f1:14:
39:e2:fc:a8:c4:7e:16:e4:67:ee:58:2e:ff:9f:a0:a2:ec:64:
6a:7d:d3:c4:62:d0:fc:84:8f:a3:36:8a:9b:85:84:dd:d2:bc:
4d:1f:26:76:85:8c:96:ae:78:81:64:60:e3:95:89:3d:83:32:
ac:96:c8:bd:66:50:77:67:f3:87:2e:fb:68:5a:57:74:2f:55:
cf:1d:43:f6:72:6a:df:68:5b:ca:ac:34:b5:9a:ef:d1:74:25:
8a:4c:d9:1d:21:d3:97:ea:5f:33:6e:a4:fc:7b:0b:8d:1d:76:
77:6d:77:1a:5b:73:6f:6a:15:a0:d1:d4:4a:51:38:55:e0:90:
d2:55:ad:ea:ee:ec:c0:5a:57:98:b4:14:0e:e7:fe:fe:75:27:
72:f1:01:ec:c9:87:16:09:ca:18:a4:52:af:30:81:cb:fc:a5:
fe:c7:28:84:07:cb:84:92:7f:50:84:fb:f3:3e:06:04:c2:e7:
43:ed:47:da
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc7orRf6EzIh00E35YNXACZGs+rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNTAzMDYwMjA5NTJaFw0yNjAzMDUwMjE0NTJaMDMxMTAvBgNV
BAMTKDkwRTkyODc3NDIzQ0EzOUIwQTFDNUIzOEM3RkI5MkJCNTk1RTgzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjQA8Vt6Y/xF00+Z8BcohG+Rm
SLAWYreeE3yUhbRqpXaNKhYfBSzKbmdc+hX64dwhw9tIHIjHzEQSnkUnylwKwj2e
jJTD5rM0FYcANq9HmTPUd7vrXjbxdGfLfyOTxd5Ez15gejwngtGF903I+muYbCP/
sRpXA7N6LqPXhuuWSN9574Va0LSyiCOEyuAJhJ4BlUYKZsQIjkFSFP8H9fIy3QN2
d84SBAYxfyQnXSZedH6+C8tq5EZZ4FDrve5aWvt1xK5mGTYueF7jXP2MVc9tCbYo
+rJhOQ63KJ8MBpo55WE/SqSLcZbNHT7CeHG+qAD+Akmau2MqNrQZOeYEq5H7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkOkod0I8o5sKHFs4x/uSu1legw0wHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaNXVjdjcyMWQ0ZkRicUF1RTFVbThablFqOHBhcGFKNTFIU1JwSHhpV0RVLzEv
MzEzNzM3MmUzMjMyMzMyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbHfhDANBgkqhkiG9w0BAQsFAAOCAQEAjyhb
8AF44RLg2sOjX3CX3cMn+FD86MRMq6UvrIrVOIEFGbXjpBOY6dglgic7ewXaB8uU
WRtkpKAzAJAzOGqP5aYcdy1gvvEUOeL8qMR+FuRn7lgu/5+gouxkan3TxGLQ/ISP
ozaKm4WE3dK8TR8mdoWMlq54gWRg45WJPYMyrJbIvWZQd2fzhy77aFpXdC9Vzx1D
9nJq32hbyqw0tZrv0XQlikzZHSHTl+pfM26k/HsLjR12d213Gltzb2oVoNHUSlE4
VeCQ0lWt6u7swFpXmLQUDuf+/nUncvEB7MmHFgnKGKRSrzCBy/yl/scohAfLhJJ/
UIT78z4GBMLnQ+1H2g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:25 2025 by rpki-client