Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39382e302f32332d3233203d3e20323634333937.roa
File: 3137302e3233392e39382e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier: SOiBnVJH3YSvZK+HP2wsH95lGQNJrzWonI0gaiyZ/0M=
Subject key identifier: 52:0A:EF:37:F1:B7:77:BD:10:56:8C:46:B7:F4:E0:72:B3:CD:0C:D2
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 055C8C7BAD42F47909F1035F1BCA8599862F8425
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39382e302f32332d3233203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:45 +0000
ROA not before: Mon 16 Dec 2024 16:22:45 +0000
ROA not after: Mon 15 Dec 2025 16:27:45 +0000
asID: 264397
IP address blocks: 170.239.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5c:8c:7b:ad:42:f4:79:09:f1:03:5f:1b:ca:85:99:86:2f:84:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:45 2024 GMT
Not After : Dec 15 16:27:45 2025 GMT
Subject: CN=520AEF37F1B777BD10568C46B7F4E072B3CD0CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:19:a2:d5:ee:32:3b:c2:7e:37:b6:3e:36:
b0:19:f3:23:68:37:a4:c5:a9:a7:34:1d:f7:9e:61:
db:0e:b2:f9:09:5e:78:14:0a:52:60:ad:fb:2f:46:
7c:22:51:ae:3d:fd:bf:f4:2b:22:94:ac:cf:6f:0c:
e8:0a:22:ac:e3:13:af:8c:6f:b1:75:d5:3b:9a:57:
f7:5f:0d:8c:0d:84:20:b9:b9:f4:87:91:d0:f3:08:
92:54:14:97:7d:a7:75:48:85:ac:0c:f8:06:0d:e8:
83:62:12:12:2d:ef:f9:da:3b:eb:f1:a3:09:6f:25:
58:81:1f:a4:b5:bb:bf:d0:87:b8:1e:4f:c5:f8:58:
9c:35:67:c9:11:3c:a1:5e:65:59:63:2d:32:5c:5f:
5e:de:26:22:1b:52:bf:a4:93:89:55:25:58:67:17:
a7:09:95:0f:dc:da:76:92:93:7c:f5:9d:d4:66:1e:
4d:02:30:d9:26:4f:3c:d6:49:5f:77:84:a2:2e:c4:
a2:30:ad:55:98:e7:81:8f:3c:86:25:88:d0:0d:65:
a0:54:e5:53:c7:22:5a:ee:9e:1d:e9:5b:23:bc:64:
7b:60:5c:db:a4:6d:eb:11:e8:23:e5:dc:79:a8:25:
81:5f:4c:f0:3a:db:72:0d:9a:4d:6c:21:b6:9a:ab:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:EF:37:F1:B7:77:BD:10:56:8C:46:B7:F4:E0:72:B3:CD:0C:D2
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39382e302f32332d3233203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.98.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:66:ae:96:9c:03:24:40:04:6b:8b:c9:cd:2d:2e:9c:1e:c7:
65:a4:93:e9:28:f9:38:ba:50:68:94:9a:9f:48:1d:81:70:f1:
de:ba:3b:3e:1e:7b:5e:f8:42:b0:d3:6d:cb:40:ff:40:b4:87:
37:dc:4e:13:56:94:ec:2f:de:4b:a1:85:2b:fb:3c:c2:75:25:
ea:ad:c2:5e:d6:6b:b0:82:dc:14:26:8c:09:40:78:39:2c:03:
08:2e:e4:ee:cd:26:5f:57:2e:7d:13:4a:d3:a0:e5:d1:1d:ef:
84:bd:62:24:72:aa:d5:30:72:26:9a:38:09:3e:48:02:c1:f5:
7d:5b:b4:dd:b9:7b:a6:2b:00:d3:0b:2f:19:a6:e8:88:d7:12:
5c:43:87:42:d0:f5:e4:04:42:d3:98:34:68:32:47:00:9f:62:
4e:d9:1b:ec:3c:3b:62:a3:f3:cd:f2:ba:06:29:bc:92:c4:d7:
8b:4b:35:7f:54:cb:b1:19:59:10:93:49:5b:55:65:ed:30:3b:
39:6b:c0:2b:be:91:59:23:bd:d8:38:61:55:6c:a4:75:b2:29:
90:6d:df:08:76:d5:c9:c4:61:bd:aa:96:a1:23:f5:5c:76:63:
07:17:13:9a:1a:85:35:b3:71:29:65:a8:57:c2:13:57:91:6e:
34:e5:69:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBVyMe61C9HkJ8QNfG8qFmYYvhCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwRDcxQzI2RThDOTkwRDIyNDMwQTc2NDk2OTQ1OTMw
RUNFNzJGRTAeFw0yNDEyMTYxNjIyNDVaFw0yNTEyMTUxNjI3NDVaMDMxMTAvBgNV
BAMTKDUyMEFFRjM3RjFCNzc3QkQxMDU2OEM0NkI3RjRFMDcyQjNDRDBDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zhmi1e4yO8J+N7Y+NrAZ8yNo
N6TFqac0HfeeYdsOsvkJXngUClJgrfsvRnwiUa49/b/0KyKUrM9vDOgKIqzjE6+M
b7F11TuaV/dfDYwNhCC5ufSHkdDzCJJUFJd9p3VIhawM+AYN6INiEhIt7/naO+vx
owlvJViBH6S1u7/Qh7geT8X4WJw1Z8kRPKFeZVljLTJcX17eJiIbUr+kk4lVJVhn
F6cJlQ/c2naSk3z1ndRmHk0CMNkmTzzWSV93hKIuxKIwrVWY54GPPIYliNANZaBU
5VPHIlrunh3pWyO8ZHtgXNukbesR6CPl3HmoJYFfTPA623INmk1sIbaaq3H5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUgrvN/G3d70QVoxGt/TgcrPNDNIwHwYDVR0j
BBgwFoAU1A1xwm6MmQ0iQwp2SWlFkw7Ocv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC9ENDBENzFDMjZFOEM5OTBEMjI0MzBBNzY0OTY5NDU5MzBFQ0U3MkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEQ3MUMyNkU4Qzk5MEQy
MjQzMEE3NjQ5Njk0NTkzMEVDRTcyRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzEzNzMwMmUzMjMzMzkyZTM5MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq72IwDQYJKoZIhvcNAQELBQADggEBAC9mrpac
AyRABGuLyc0tLpwex2Wkk+ko+Ti6UGiUmp9IHYFw8d66Oz4ee174QrDTbctA/0C0
hzfcThNWlOwv3kuhhSv7PMJ1Jeqtwl7Wa7CC3BQmjAlAeDksAwgu5O7NJl9XLn0T
StOg5dEd74S9YiRyqtUwciaaOAk+SALB9X1btN25e6YrANMLLxmm6IjXElxDh0LQ
9eQEQtOYNGgyRwCfYk7ZG+w8O2Kj883yugYpvJLE14tLNX9Uy7EZWRCTSVtVZe0w
OzlrwCu+kVkjvdg4YVVspHWyKZBt3wh21cnEYb2qlqEj9Vx2YwcXE5oahTWzcSll
qFfCE1eRbjTlaUQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:39 2025 by rpki-client