Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32342d3234203d3e203238313635.roa
File: 3133312e3235352e3130302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: D9N9TpChjriJJyZRI08pyp8eILjLiulBna/UHL3pg/s=
Subject key identifier: C8:BB:34:01:3E:0B:23:7C:DC:1B:4B:9E:13:C8:42:BC:22:76:9D:67
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 042510EF373841B8CE2C892235690B296CD0256F
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:34 +0000
ROA not before: Mon 01 Jul 2024 18:40:34 +0000
ROA not after: Mon 30 Jun 2025 18:45:34 +0000
asID: 28165
IP address blocks: 131.255.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:25:10:ef:37:38:41:b8:ce:2c:89:22:35:69:0b:29:6c:d0:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:34 2024 GMT
Not After : Jun 30 18:45:34 2025 GMT
Subject: CN=C8BB34013E0B237CDC1B4B9E13C842BC22769D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:01:c4:ef:31:3d:23:7a:b6:0b:0f:3f:ed:
8b:06:dd:8c:07:ed:8c:04:46:7a:66:73:cf:7e:59:
b6:5c:c8:8c:ff:56:e2:de:32:9c:d7:02:a7:4e:4f:
08:d4:ca:af:77:34:2f:45:ab:33:29:7b:11:f2:e3:
c3:a3:19:a1:b3:a6:6e:87:57:d8:9f:79:af:47:76:
74:ac:40:04:1c:82:66:3c:62:fc:88:62:f5:09:c2:
b3:38:5b:d1:cf:2f:57:4b:60:bf:ca:79:4e:e6:b3:
23:49:71:72:52:38:bd:00:e7:c3:3f:3a:10:10:65:
cc:63:a1:f1:0d:6a:b9:8a:1b:e9:c5:c8:e8:8b:d6:
72:17:2e:d3:5f:b9:56:ba:1d:49:6b:22:b0:19:ba:
67:87:7d:14:d5:3b:96:56:56:d6:49:6a:79:20:ef:
34:87:0b:76:b7:d4:34:a4:6e:84:ca:2e:23:c5:5c:
26:a2:c3:21:93:84:4f:b5:b0:31:fa:af:9a:4d:86:
6a:db:d8:e6:b8:d0:12:14:ce:05:ee:5a:c8:50:27:
83:43:bb:2f:29:48:65:e7:79:64:b0:60:32:e4:77:
fa:3b:8f:f7:a3:17:34:c6:34:37:88:cd:ce:0a:92:
a2:27:9d:61:9f:4f:f0:6f:39:f7:10:46:6c:75:c2:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:34:01:3E:0B:23:7C:DC:1B:4B:9E:13:C8:42:BC:22:76:9D:67
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.100.0/24
Signature Algorithm: sha256WithRSAEncryption
25:06:d4:4e:61:97:f8:c5:e0:0f:09:fe:01:30:37:1c:3b:47:
75:b0:b7:d7:a4:7d:3a:b6:28:9e:eb:f7:19:9d:8c:f1:57:f1:
52:e7:c2:01:b8:fe:f6:25:9f:58:07:ad:3c:91:89:4d:ae:b6:
bb:3a:18:13:88:0b:5d:7d:50:7b:1c:c0:ba:2a:d8:44:1a:22:
43:75:32:79:72:f9:f0:36:52:69:23:4f:30:a8:49:28:4f:de:
54:57:9a:16:ef:ab:fe:87:cf:e9:85:55:de:2c:fd:39:f7:03:
44:1d:12:f7:fa:54:e8:5f:3e:b4:45:05:11:2a:f3:2f:0d:da:
94:60:74:10:15:52:80:b0:a8:d1:41:04:85:b3:e0:38:ad:f3:
24:0f:12:a3:6b:8e:01:b5:66:95:df:ed:2a:ce:74:31:60:eb:
be:6d:17:7e:dd:9e:af:5e:b6:27:6b:84:b4:a3:44:64:19:7a:
4d:ff:9b:33:cc:71:c1:7f:30:75:31:56:ca:95:11:7a:11:49:
f9:cb:48:65:77:52:c5:8e:8f:92:85:8c:9a:6c:42:42:2f:01:
ca:19:5c:1a:46:9c:f5:c5:78:6d:35:bc:30:37:b0:d0:df:8b:
8e:89:05:1f:46:1e:d5:e8:64:fb:be:bb:11:08:a3:72:d8:d0:
e2:8b:6c:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBCUQ7zc4QbjOLIkiNWkLKWzQJW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQwMzRaFw0yNTA2MzAxODQ1MzRaMDMxMTAvBgNV
BAMTKEM4QkIzNDAxM0UwQjIzN0NEQzFCNEI5RTEzQzg0MkJDMjI3NjlENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7AHE7zE9I3q2Cw8/7YsG3YwH
7YwERnpmc89+WbZcyIz/VuLeMpzXAqdOTwjUyq93NC9FqzMpexHy48OjGaGzpm6H
V9ifea9HdnSsQAQcgmY8YvyIYvUJwrM4W9HPL1dLYL/KeU7msyNJcXJSOL0A58M/
OhAQZcxjofENarmKG+nFyOiL1nIXLtNfuVa6HUlrIrAZumeHfRTVO5ZWVtZJankg
7zSHC3a31DSkboTKLiPFXCaiwyGThE+1sDH6r5pNhmrb2Oa40BIUzgXuWshQJ4ND
uy8pSGXneWSwYDLkd/o7j/ejFzTGNDeIzc4KkqInnWGfT/BvOfcQRmx1wpp9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyLs0AT4LI3zcG0ueE8hCvCJ2nWcwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACD/2QwDQYJKoZIhvcNAQELBQADggEBACUG1E5h
l/jF4A8J/gEwNxw7R3Wwt9ekfTq2KJ7r9xmdjPFX8VLnwgG4/vYln1gHrTyRiU2u
trs6GBOIC119UHscwLoq2EQaIkN1Mnly+fA2UmkjTzCoSShP3lRXmhbvq/6Hz+mF
Vd4s/Tn3A0QdEvf6VOhfPrRFBREq8y8N2pRgdBAVUoCwqNFBBIWz4Dit8yQPEqNr
jgG1ZpXf7SrOdDFg675tF37dnq9etidrhLSjRGQZek3/mzPMccF/MHUxVsqVEXoR
SfnLSGV3UsWOj5KFjJpsQkIvAcoZXBpGnPXFeG01vDA3sNDfi46JBR9GHtXoZPu+
uxEIo3LY0OKLbOI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:32 2025 by rpki-client