Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
File: 3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier: KIweKf7vgPnoEQ8InH2ad7tYKsiYtEVtxNxBKdxaiUg=
Subject key identifier: 60:4F:C3:6E:8A:72:54:22:B4:72:CB:9B:38:81:1F:7D:68:8D:F1:F1
Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial: 799C6EA2B2D8AC379D16920B4A4BD742EDF8FB68
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
Signing time: Thu 09 Jan 2025 14:07:21 +0000
ROA not before: Thu 09 Jan 2025 14:02:21 +0000
ROA not after: Thu 08 Jan 2026 14:07:21 +0000
asID: 263541
IP address blocks: 191.241.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:6e:a2:b2:d8:ac:37:9d:16:92:0b:4a:4b:d7:42:ed:f8:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Validity
Not Before: Jan 9 14:02:21 2025 GMT
Not After : Jan 8 14:07:21 2026 GMT
Subject: CN=604FC36E8A725422B472CB9B38811F7D688DF1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:d6:36:d3:5c:b1:3c:a4:48:0c:c2:65:6c:
5e:8e:e2:cd:af:61:97:62:47:78:ec:b7:d2:36:f2:
5d:a3:2a:82:bd:55:84:0d:57:a0:bb:8a:14:55:fb:
82:30:2b:ec:9e:5a:31:93:69:2f:02:f4:5e:83:18:
7f:0f:0b:37:34:98:ba:9f:e3:5c:c1:28:6b:90:08:
df:48:78:62:cf:c7:53:2b:8c:7d:16:86:c9:59:64:
3b:4e:92:30:ca:6e:97:10:1a:9d:11:05:10:78:5d:
13:b3:82:48:23:41:ef:35:00:da:e0:9b:13:eb:78:
4f:b4:87:57:7d:74:56:7a:ce:59:c0:66:04:ad:61:
c2:e3:b6:10:56:73:70:a8:01:04:bd:21:73:17:33:
70:68:3f:28:af:59:dd:9a:96:5d:f4:3d:7b:d7:ed:
5d:71:33:a2:57:bd:d3:4d:ea:5d:dd:8f:df:f6:d4:
34:6a:e6:29:2e:9d:c7:a3:70:32:03:c0:2d:a4:73:
22:21:c6:2a:bd:51:54:c7:39:b2:40:17:29:17:1b:
c6:68:e8:02:b5:b5:42:f0:d1:a7:ee:f8:e8:b1:5c:
f4:c1:06:da:f7:db:c3:15:90:88:ad:f1:76:fa:69:
47:11:31:ca:6e:35:49:c9:70:ad:49:62:cb:19:91:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:C3:6E:8A:72:54:22:B4:72:CB:9B:38:81:1F:7D:68:8D:F1:F1
X509v3 Authority Key Identifier:
keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.20.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:98:59:c9:c6:0a:05:1f:d0:98:96:4e:2d:d3:16:9b:ff:00:
6a:65:70:2e:00:88:84:31:fd:03:48:cc:1a:63:4b:41:40:b9:
e3:0b:64:e2:df:1f:77:cd:b1:2d:a2:47:b3:9d:92:27:d0:42:
45:29:05:b5:ce:ce:e9:77:3d:a4:4e:57:1f:bd:37:c0:56:a8:
d2:99:4c:bd:99:1d:9a:65:86:8f:19:54:f3:cd:8d:84:0a:13:
e6:ca:31:f6:8e:e4:98:7c:ab:24:86:59:fb:d7:d1:ed:83:7a:
9b:02:3b:09:00:6a:98:aa:2a:4d:9f:0e:75:ab:80:58:da:ec:
7e:c2:68:c3:d0:4d:c6:f1:cc:c5:8b:ce:0f:f5:b5:fe:3b:d8:
bc:f7:10:02:8f:2b:66:a2:85:ca:86:c5:e2:6b:d8:e2:32:2b:
d4:f2:a3:26:2a:75:cf:d7:3a:56:d8:fe:0c:7c:08:41:9e:3e:
f6:ab:ae:fd:84:8f:5f:55:b9:c6:6e:03:c0:43:55:50:ea:be:
df:b3:70:81:ec:82:5a:13:54:f1:44:ca:35:10:e3:9e:77:d7:
2f:c6:c2:4d:4d:8c:79:b8:08:d0:ad:ad:6f:38:44:bb:56:37:
0e:77:ad:80:4b:44:bc:23:75:bc:89:19:fa:20:dc:8b:69:7d:
21:86:89:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeZxuorLYrDedFpILSkvXQu34+2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBNUY5MDU4QTNGQzIzNDIyMTA2MkZDMTBGRDlENjI1
M0Y4MTg2NzAeFw0yNTAxMDkxNDAyMjFaFw0yNjAxMDgxNDA3MjFaMDMxMTAvBgNV
BAMTKDYwNEZDMzZFOEE3MjU0MjJCNDcyQ0I5QjM4ODExRjdENjg4REYxRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxNY201yxPKRIDMJlbF6O4s2v
YZdiR3jst9I28l2jKoK9VYQNV6C7ihRV+4IwK+yeWjGTaS8C9F6DGH8PCzc0mLqf
41zBKGuQCN9IeGLPx1MrjH0WhslZZDtOkjDKbpcQGp0RBRB4XROzgkgjQe81ANrg
mxPreE+0h1d9dFZ6zlnAZgStYcLjthBWc3CoAQS9IXMXM3BoPyivWd2all30PXvX
7V1xM6JXvdNN6l3dj9/21DRq5ikuncejcDIDwC2kcyIhxiq9UVTHObJAFykXG8Zo
6AK1tULw0afu+OixXPTBBtr328MVkIit8Xb6aUcRMcpuNUnJcK1JYssZkYWTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYE/DbopyVCK0csubOIEffWiN8fEwHwYDVR0j
BBgwFoAU36X5BYo/wjQiEGL8EP2dYlP4GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC9ERkE1RjkwNThBM0ZDMjM0MjIxMDYyRkMxMEZEOUQ2MjUzRjgxODY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQTVGOTA1OEEzRkMyMzQy
MjEwNjJGQzEwRkQ5RDYyNTNGODE4NjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzEzOTMxMmUzMjM0MzEyZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/8RQwDQYJKoZIhvcNAQELBQADggEBAG2YWcnG
CgUf0JiWTi3TFpv/AGplcC4AiIQx/QNIzBpjS0FAueMLZOLfH3fNsS2iR7OdkifQ
QkUpBbXOzul3PaROVx+9N8BWqNKZTL2ZHZplho8ZVPPNjYQKE+bKMfaO5Jh8qySG
WfvX0e2DepsCOwkAapiqKk2fDnWrgFja7H7CaMPQTcbxzMWLzg/1tf472Lz3EAKP
K2aihcqGxeJr2OIyK9TyoyYqdc/XOlbY/gx8CEGePvarrv2Ej19VucZuA8BDVVDq
vt+zcIHsgloTVPFEyjUQ45531y/Gwk1NjHm4CNCtrW84RLtWNw53rYBLRLwjdbyJ
Gfog3ItpfSGGiQs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:38 2025 by rpki-client