Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa
File: 3230312e372e3231392e302f32342d3234203d3e203631383336.roa (raw, json)
Hash identifier: wHxTligKZrBoWB9eGAXftGMUjGCyI8LPq6OVIOw16Tw=
Subject key identifier: F5:F8:69:71:F4:A5:2F:F1:0A:0B:8D:CB:6B:08:52:83:4F:45:CD:F0
Certificate issuer: /CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Certificate serial: 5654CFEAC62B36606FE4D54B3BC9CA691C7D133F
Authority key identifier: 43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa
Signing time: Fri 26 Jul 2024 16:46:28 +0000
ROA not before: Fri 26 Jul 2024 16:41:28 +0000
ROA not after: Fri 25 Jul 2025 16:46:28 +0000
asID: 61836
IP address blocks: 201.7.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:54:cf:ea:c6:2b:36:60:6f:e4:d5:4b:3b:c9:ca:69:1c:7d:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Validity
Not Before: Jul 26 16:41:28 2024 GMT
Not After : Jul 25 16:46:28 2025 GMT
Subject: CN=F5F86971F4A52FF10A0B8DCB6B0852834F45CDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:60:ea:71:74:b0:20:2a:cc:4a:ae:ae:95:
e7:08:4f:49:b0:4e:51:68:26:97:6c:6b:f8:fc:9f:
54:be:f5:43:ab:0b:ae:f5:3f:60:ba:24:b1:ea:46:
a7:69:0e:08:99:02:11:99:22:4d:d2:fa:be:0c:86:
ff:65:61:11:3b:e4:8b:fe:aa:b0:51:2f:cb:1d:a2:
ee:d1:c4:59:b2:d0:5d:84:f0:77:a5:f0:f4:0b:32:
9e:c8:c6:07:4f:3b:3a:84:b5:ee:63:60:90:6b:0f:
5b:da:db:ad:15:35:9e:48:f8:25:ab:54:00:4a:be:
0f:d5:a0:fa:c7:04:78:64:62:bf:13:d3:fe:2e:fb:
d1:f0:15:a5:a3:99:41:a1:b4:c0:04:9a:74:43:ab:
61:4d:f0:63:47:df:c4:97:d9:81:5b:ba:bc:00:cd:
46:1f:bf:f5:29:c4:d4:ba:54:4b:38:88:fa:35:50:
12:2b:3c:27:26:33:1d:d4:c4:6b:ae:2d:dc:fb:70:
30:0f:30:b4:ee:41:65:9d:1c:9a:47:9d:9d:6d:3e:
71:b6:3f:22:c2:2f:c3:35:73:fe:6e:e2:66:8f:b5:
dd:7a:1f:82:90:47:68:de:e4:85:c8:3a:0b:bb:fd:
b3:51:a0:fc:47:19:7b:7e:1d:b0:d2:71:24:9b:f7:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:69:71:F4:A5:2F:F1:0A:0B:8D:CB:6B:08:52:83:4F:45:CD:F0
X509v3 Authority Key Identifier:
keyid:43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:46:3d:1e:c4:b1:23:e1:52:ad:82:14:aa:d0:eb:cf:39:74:
44:db:fd:09:81:aa:c1:2d:53:a3:6a:56:e8:b2:05:70:a0:15:
ea:87:9f:d4:93:60:dd:81:15:19:83:fd:e8:0e:e7:0e:be:9c:
2a:d4:00:e3:f8:a4:82:54:00:6b:bc:3b:d9:92:22:23:a1:44:
40:11:06:52:d5:f0:86:85:fd:5a:10:06:31:f4:a3:48:31:bf:
06:d3:a1:02:ec:54:8e:32:2f:48:9d:b7:c3:a1:75:e7:32:7d:
b5:a0:18:5e:f3:5b:2f:07:d9:4e:35:ff:24:c8:87:5b:25:49:
e8:26:cd:d4:a9:21:8a:90:f9:a4:64:44:d3:58:f5:d8:bd:e5:
dd:9b:3f:b2:90:6c:5d:d3:7c:d8:c0:7e:c4:0d:99:b9:5a:12:
8b:a0:f1:67:cd:3e:12:e2:06:9e:32:83:af:1a:71:4b:e1:30:
40:86:81:3d:64:9d:c2:64:e8:68:c8:58:2d:16:28:4f:3a:a1:
b7:e6:dc:c3:10:cb:f7:c0:7f:cc:08:ed:6b:8b:d9:de:ac:a5:
de:8f:ed:d0:56:42:fd:38:39:15:bc:12:f6:57:9a:51:b5:11:
1e:c0:79:49:e1:e6:dc:4c:36:95:74:f3:91:4c:5f:06:31:5b:
a5:78:24:8c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVlTP6sYrNmBv5NVLO8nKaRx9Ez8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM4ODVDQUFGMjQxQzU3NTE0RjRCRkNDMzc5RDJGOTM1
NDlFNEZBQjAeFw0yNDA3MjYxNjQxMjhaFw0yNTA3MjUxNjQ2MjhaMDMxMTAvBgNV
BAMTKEY1Rjg2OTcxRjRBNTJGRjEwQTBCOERDQjZCMDg1MjgzNEY0NUNERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxmDqcXSwICrMSq6ulecIT0mw
TlFoJpdsa/j8n1S+9UOrC671P2C6JLHqRqdpDgiZAhGZIk3S+r4Mhv9lYRE75Iv+
qrBRL8sdou7RxFmy0F2E8Hel8PQLMp7IxgdPOzqEte5jYJBrD1va260VNZ5I+CWr
VABKvg/VoPrHBHhkYr8T0/4u+9HwFaWjmUGhtMAEmnRDq2FN8GNH38SX2YFburwA
zUYfv/UpxNS6VEs4iPo1UBIrPCcmMx3UxGuuLdz7cDAPMLTuQWWdHJpHnZ1tPnG2
PyLCL8M1c/5u4maPtd16H4KQR2je5IXIOgu7/bNRoPxHGXt+HbDScSSb94KpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9fhpcfSlL/EKC43LawhSg09FzfAwHwYDVR0j
BBgwFoAUQ4hcqvJBxXUU9L/MN50vk1SeT6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dTQnlmOVptRHB5dFJiVWRpd2NrMjl2OGtlWjJ1M2lzVUxVWlAyRzlp
Y1AvMC80Mzg4NUNBQUYyNDFDNTc1MTRGNEJGQ0MzNzlEMkY5MzU0OUU0RkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODg1Q0FBRjI0MUM1NzUx
NEY0QkZDQzM3OUQyRjkzNTQ5RTRGQUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnU0J5ZjlabURweXRSYlVkaXdjazI5djhrZVoydTNpc1VMVVpQMkc5aWNQLzAv
MzIzMDMxMmUzNzJlMzIzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkH2zANBgkqhkiG9w0BAQsFAAOCAQEAukY9HsSxI+FS
rYIUqtDrzzl0RNv9CYGqwS1To2pW6LIFcKAV6oef1JNg3YEVGYP96A7nDr6cKtQA
4/ikglQAa7w72ZIiI6FEQBEGUtXwhoX9WhAGMfSjSDG/BtOhAuxUjjIvSJ23w6F1
5zJ9taAYXvNbLwfZTjX/JMiHWyVJ6CbN1KkhipD5pGRE01j12L3l3Zs/spBsXdN8
2MB+xA2ZuVoSi6DxZ80+EuIGnjKDrxpxS+EwQIaBPWSdwmToaMhYLRYoTzqht+bc
wxDL98B/zAjta4vZ3qyl3o/t0FZC/Tg5FbwS9leaUbURHsB5SeHm3Ew2lXTzkUxf
BjFbpXgkjA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:45:56 2025 by rpki-client