Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32322d3234203d3e20323633363033.roa
File: 3137302e38302e31322e302f32322d3234203d3e20323633363033.roa (raw, json)
Hash identifier: D+81k4QG0ouaKiOL3CA1kkbSfFka0zTPHLxGzFhjX+E=
Subject key identifier: 7E:9B:03:E4:76:55:FE:E1:23:4E:DE:87:65:A1:1E:8F:65:32:6B:1F
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 5A383E9226B0608732EE7B689FB3403BE29AE443
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32322d3234203d3e20323633363033.roa
Signing time: Fri 17 Jan 2025 14:06:31 +0000
ROA not before: Fri 17 Jan 2025 14:01:31 +0000
ROA not after: Fri 16 Jan 2026 14:06:31 +0000
asID: 263603
IP address blocks: 170.80.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:38:3e:92:26:b0:60:87:32:ee:7b:68:9f:b3:40:3b:e2:9a:e4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Jan 17 14:01:31 2025 GMT
Not After : Jan 16 14:06:31 2026 GMT
Subject: CN=7E9B03E47655FEE1234EDE8765A11E8F65326B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:1a:4e:86:f9:0e:2c:95:b7:db:f6:6b:5a:
ad:73:2d:26:c3:5f:da:4c:ca:e1:f8:33:5f:13:d3:
0a:b1:dc:e8:ac:9e:97:25:3d:9b:19:8b:13:01:9e:
a2:1d:10:4f:5c:3a:05:99:d6:1f:91:f4:00:bb:ec:
d5:87:79:21:2f:5b:43:69:28:de:6a:65:06:99:68:
26:d0:f2:eb:e2:a2:54:02:fb:e0:cd:4a:a0:e0:ae:
40:be:77:e3:08:e6:a5:8f:81:f7:60:d0:5e:10:a2:
c1:72:f7:94:3d:1d:12:c1:09:4f:b1:b9:b1:99:64:
4e:a4:28:b3:c1:a2:cd:23:83:a2:bb:8c:29:e3:67:
b0:e7:42:8f:0e:ef:e5:72:58:84:66:88:e3:1b:2d:
de:c6:b4:bf:46:7a:50:b6:39:45:c9:16:fa:13:a5:
22:d6:4c:d8:5b:1e:b2:c9:91:48:15:08:1b:9c:ac:
51:8e:33:44:d9:92:81:51:eb:4e:99:e3:fa:1a:60:
c2:57:23:ed:9c:62:d0:ea:5c:0a:62:3b:e9:2b:75:
5b:ea:c5:89:56:fc:67:46:15:2e:76:33:ee:d4:2d:
33:83:e7:97:df:34:ee:a1:7a:cd:4f:5f:8d:4f:79:
11:52:d8:c4:0e:cb:94:85:06:ef:4a:24:1d:e8:21:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:03:E4:76:55:FE:E1:23:4E:DE:87:65:A1:1E:8F:65:32:6B:1F
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32322d3234203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.12.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a4:b8:67:22:d3:c2:a0:a0:78:66:06:80:94:af:93:2b:79:
d5:d1:fd:5c:4c:cc:6e:3d:1d:1d:0f:1b:87:15:6c:44:e5:4f:
f9:bf:09:18:7c:db:1b:43:f2:28:3a:37:8c:1b:7c:e5:51:19:
fe:53:35:74:b7:80:9a:83:98:04:c5:e5:5b:28:c7:81:23:46:
0b:47:84:51:dd:34:41:59:55:33:b7:bd:b6:f4:b3:09:ee:77:
a3:b8:62:4f:b1:63:eb:7d:88:b2:52:9d:79:77:75:4e:18:8f:
22:84:68:8e:94:1f:02:11:b3:e9:fd:8a:d2:4a:fa:da:34:bb:
6c:b2:65:72:6b:bf:21:a9:8d:88:63:1d:aa:17:b6:77:f0:50:
08:65:c0:87:be:6d:b2:c2:c5:5a:d4:9b:bb:35:7d:68:ac:24:
82:18:bf:94:4b:ae:c5:41:82:9e:25:c9:67:b9:97:5d:f2:ff:
f8:59:2d:df:f4:c7:82:3d:b5:a0:fd:a4:2b:76:15:71:c4:30:
5f:3a:6c:f2:55:51:ab:bb:85:1e:dc:a4:6f:9d:dd:49:d7:50:
1e:65:f1:a3:a0:68:82:1d:e9:ce:d4:43:45:6b:79:0a:05:85:
19:7a:2c:c0:22:39:ee:34:82:c2:06:2d:9b:d0:74:c0:13:c2:
8c:08:6b:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWjg+kiawYIcy7nton7NAO+Ka5EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyNUVFRDQ0NDM5MDJFMTJERjdBOUExMzlFMjVDQjM0
OTc0RDAxQTAeFw0yNTAxMTcxNDAxMzFaFw0yNjAxMTYxNDA2MzFaMDMxMTAvBgNV
BAMTKDdFOUIwM0U0NzY1NUZFRTEyMzRFREU4NzY1QTExRThGNjUzMjZCMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sBpOhvkOLJW32/ZrWq1zLSbD
X9pMyuH4M18T0wqx3OisnpclPZsZixMBnqIdEE9cOgWZ1h+R9AC77NWHeSEvW0Np
KN5qZQaZaCbQ8uviolQC++DNSqDgrkC+d+MI5qWPgfdg0F4QosFy95Q9HRLBCU+x
ubGZZE6kKLPBos0jg6K7jCnjZ7DnQo8O7+VyWIRmiOMbLd7GtL9GelC2OUXJFvoT
pSLWTNhbHrLJkUgVCBucrFGOM0TZkoFR606Z4/oaYMJXI+2cYtDqXApiO+krdVvq
xYlW/GdGFS52M+7ULTOD55ffNO6hes1PX41PeRFS2MQOy5SFBu9KJB3oIT67AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfpsD5HZV/uEjTt6HZaEej2Uyax8wHwYDVR0j
BBgwFoAUOSXu1EQ5AuEt96mhOeJcs0l00BowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRQaW5UQ1A5bzVERURWOVdVV1l1S0hSUjZZbzRmVDZZcXBtQ25adjFz
V1IvMC8zOTI1RUVENDQ0MzkwMkUxMkRGN0E5QTEzOUUyNUNCMzQ5NzREMDFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MjVFRUQ0NDQzOTAyRTEy
REY3QTlBMTM5RTI1Q0IzNDk3NEQwMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0UGluVENQOW81REVEVjlXVVdZdUtIUlI2WW80ZlQ2WXFwbUNuWnYxc1dSLzAv
MzEzNzMwMmUzODMwMmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlAMMA0GCSqGSIb3DQEBCwUAA4IBAQABpLhnItPC
oKB4ZgaAlK+TK3nV0f1cTMxuPR0dDxuHFWxE5U/5vwkYfNsbQ/IoOjeMG3zlURn+
UzV0t4Cag5gExeVbKMeBI0YLR4RR3TRBWVUzt7229LMJ7nejuGJPsWPrfYiyUp15
d3VOGI8ihGiOlB8CEbPp/YrSSvraNLtssmVya78hqY2IYx2qF7Z38FAIZcCHvm2y
wsVa1Ju7NX1orCSCGL+US67FQYKeJclnuZdd8v/4WS3f9MeCPbWg/aQrdhVxxDBf
OmzyVVGru4Ue3KRvnd1J11AeZfGjoGiCHenO1ENFa3kKBYUZeizAIjnuNILCBi2b
0HTAE8KMCGsj
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:09:50 2025 by rpki-client