Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32332d3233203d3e20323633363033.roa
File: 3137302e38302e31322e302f32332d3233203d3e20323633363033.roa (raw, json)
Hash identifier: m2jN4Nd1tOSJzgYj81fJnHirSBr41Z9VghttcNRfrqQ=
Subject key identifier: 7F:FF:DA:DD:34:08:9A:F5:3F:09:2E:A1:36:10:1B:8C:9F:C1:62:3A
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 1955BC76684E76354554C57CA1E5A4FB4C34D1DC
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32332d3233203d3e20323633363033.roa
Signing time: Thu 20 Feb 2025 17:53:31 +0000
ROA not before: Thu 20 Feb 2025 17:48:31 +0000
ROA not after: Thu 19 Feb 2026 17:53:31 +0000
asID: 263603
IP address blocks: 170.80.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:55:bc:76:68:4e:76:35:45:54:c5:7c:a1:e5:a4:fb:4c:34:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Feb 20 17:48:31 2025 GMT
Not After : Feb 19 17:53:31 2026 GMT
Subject: CN=7FFFDADD34089AF53F092EA136101B8C9FC1623A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:23:cf:3f:43:65:2f:52:a7:0a:94:41:70:
b5:45:6d:ff:b9:08:aa:7d:84:82:7e:2e:49:a6:29:
74:5e:69:78:99:37:29:06:eb:8f:6c:30:aa:f4:a6:
8a:8d:04:2e:87:70:5f:1f:b5:f5:4f:47:62:db:98:
05:94:ce:f3:16:95:fc:17:8c:d5:4e:dc:dc:fb:5b:
fe:b5:79:05:fb:e3:7c:b9:59:d6:5b:25:2f:8e:21:
c7:1b:07:1d:ae:f6:39:24:9e:53:74:e4:a7:d1:2e:
ec:e1:74:7d:93:00:ac:34:e5:d4:c4:75:64:6a:3f:
d5:34:51:5f:a9:2c:01:72:c3:13:ce:49:d8:88:25:
26:2a:8f:8f:1e:c8:96:7b:78:e4:9e:89:55:65:1b:
09:5e:f5:44:39:e3:4d:49:83:79:e3:3d:da:2c:22:
11:a8:78:e0:9f:4d:f3:11:6c:2b:c8:bb:26:51:cf:
bd:23:01:e5:cf:2c:04:a9:f9:f3:91:94:9a:18:d7:
24:7c:a9:30:fe:77:8a:a1:ef:fe:32:f8:f3:ae:0b:
69:eb:46:66:97:ce:6b:81:9a:b5:42:0f:80:65:35:
82:e7:eb:08:a3:ae:d8:15:63:ab:ce:33:82:fa:15:
26:9c:f8:c9:0e:9c:51:37:bc:d8:85:8a:5d:aa:19:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:DA:DD:34:08:9A:F5:3F:09:2E:A1:36:10:1B:8C:9F:C1:62:3A
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31322e302f32332d3233203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.12.0/23
Signature Algorithm: sha256WithRSAEncryption
68:bd:3e:09:80:15:d4:fa:8f:89:aa:b1:ce:5f:d7:29:66:f3:
ee:23:a4:99:f0:f7:ef:a3:1b:86:75:24:e6:d4:36:9f:c6:35:
50:70:f0:7c:db:53:4b:09:df:03:1a:0d:4f:36:79:d8:50:bf:
d6:d1:86:39:ef:64:36:f2:a8:b5:04:6a:8f:54:3e:52:e5:46:
7b:58:09:00:4e:00:38:aa:a5:0b:96:c2:ab:db:4a:20:33:57:
9e:1b:44:87:fb:51:48:11:82:eb:e9:3a:b4:bf:41:79:f3:19:
3d:59:94:29:1a:60:55:bb:8d:14:e3:54:3b:c3:d7:13:58:6f:
68:ad:97:9b:09:bc:39:b3:75:a1:9d:4d:24:f3:b6:b3:c7:7a:
15:11:16:bc:7e:97:ed:e8:d5:ee:58:c6:f5:ed:b8:6e:58:fe:
44:8b:22:b8:63:ba:d8:e1:f9:45:a9:59:b5:23:ce:12:00:44:
c2:82:7d:e7:57:0d:b8:87:7c:0b:86:16:12:a2:f9:71:16:fc:
1d:2a:69:d0:26:fa:64:bc:72:bb:e6:82:a1:65:cf:9b:ba:13:
17:ef:e4:41:08:3f:b0:47:ed:26:6d:a0:a3:a2:b5:51:a1:fb:
16:c7:cb:82:d5:e9:87:88:f1:b2:ea:83:13:6f:58:06:0b:b7:
ee:b6:7c:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGVW8dmhOdjVFVMV8oeWk+0w00dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyNUVFRDQ0NDM5MDJFMTJERjdBOUExMzlFMjVDQjM0
OTc0RDAxQTAeFw0yNTAyMjAxNzQ4MzFaFw0yNjAyMTkxNzUzMzFaMDMxMTAvBgNV
BAMTKDdGRkZEQUREMzQwODlBRjUzRjA5MkVBMTM2MTAxQjhDOUZDMTYyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR3CPPP0NlL1KnCpRBcLVFbf+5
CKp9hIJ+LkmmKXReaXiZNykG649sMKr0poqNBC6HcF8ftfVPR2LbmAWUzvMWlfwX
jNVO3Nz7W/61eQX743y5WdZbJS+OIccbBx2u9jkknlN05KfRLuzhdH2TAKw05dTE
dWRqP9U0UV+pLAFywxPOSdiIJSYqj48eyJZ7eOSeiVVlGwle9UQ5401Jg3njPdos
IhGoeOCfTfMRbCvIuyZRz70jAeXPLASp+fORlJoY1yR8qTD+d4qh7/4y+POuC2nr
RmaXzmuBmrVCD4BlNYLn6wijrtgVY6vOM4L6FSac+MkOnFE3vNiFil2qGdS9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUf//a3TQImvU/CS6hNhAbjJ/BYjowHwYDVR0j
BBgwFoAUOSXu1EQ5AuEt96mhOeJcs0l00BowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRQaW5UQ1A5bzVERURWOVdVV1l1S0hSUjZZbzRmVDZZcXBtQ25adjFz
V1IvMC8zOTI1RUVENDQ0MzkwMkUxMkRGN0E5QTEzOUUyNUNCMzQ5NzREMDFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MjVFRUQ0NDQzOTAyRTEy
REY3QTlBMTM5RTI1Q0IzNDk3NEQwMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0UGluVENQOW81REVEVjlXVVdZdUtIUlI2WW80ZlQ2WXFwbUNuWnYxc1dSLzAv
MzEzNzMwMmUzODMwMmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzYzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlAMMA0GCSqGSIb3DQEBCwUAA4IBAQBovT4JgBXU
+o+JqrHOX9cpZvPuI6SZ8PfvoxuGdSTm1DafxjVQcPB821NLCd8DGg1PNnnYUL/W
0YY572Q28qi1BGqPVD5S5UZ7WAkATgA4qqULlsKr20ogM1eeG0SH+1FIEYLr6Tq0
v0F58xk9WZQpGmBVu40U41Q7w9cTWG9orZebCbw5s3WhnU0k87azx3oVERa8fpft
6NXuWMb17bhuWP5EiyK4Y7rY4flFqVm1I84SAETCgn3nVw24h3wLhhYSovlxFvwd
KmnQJvpkvHK75oKhZc+buhMX7+RBCD+wR+0mbaCjorVRofsWx8uC1emHiPGy6oMT
b1gGC7futnwa
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:52 2025 by rpki-client