Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa
File: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (raw, json)
Hash identifier: c4sp47Z1M5TAx57CB3LQ276Widm9lBrcWGzJyHTdqp0=
Subject key identifier: DD:08:ED:C8:9A:CF:49:09:34:66:0B:BB:67:66:AE:51:B0:BC:B2:DC
Certificate issuer: /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial: 7E053B274AF4148CCE5F67DF425F11325E1B94CE
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa
Signing time: Thu 08 Feb 2024 20:22:13 +0000
ROA not before: Thu 08 Feb 2024 20:17:13 +0000
ROA not after: Thu 06 Feb 2025 20:22:13 +0000
asID: 273788
IP address blocks: 170.233.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:05:3b:27:4a:f4:14:8c:ce:5f:67:df:42:5f:11:32:5e:1b:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Validity
Not Before: Feb 8 20:17:13 2024 GMT
Not After : Feb 6 20:22:13 2025 GMT
Subject: CN=DD08EDC89ACF490934660BBB6766AE51B0BCB2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:3c:96:d3:0f:47:52:d1:fc:5d:df:cc:22:
20:85:6c:46:fa:6b:fc:a7:b6:b1:f4:ac:ea:e9:b7:
84:43:c4:1e:ab:f5:47:ce:b5:a2:fa:a9:fd:6e:9b:
72:16:26:f5:5a:3c:cf:df:bb:40:5f:67:af:99:73:
a6:4d:37:47:8e:08:5a:68:aa:1e:b3:f5:9b:6a:46:
ae:5f:72:38:99:21:ac:35:01:e5:56:2f:ea:f7:15:
ec:3b:ab:ff:57:a1:d6:cb:b6:e0:b8:3a:8c:db:b1:
d2:67:e7:c5:1b:ac:05:70:5e:95:7c:db:23:f2:ae:
50:fa:13:a6:86:7f:66:3d:5f:c8:e6:25:c0:fd:9f:
0b:27:3c:92:80:38:4c:08:aa:90:f4:11:9f:50:55:
e7:74:ac:06:0b:7b:a9:b0:11:14:2c:ea:46:93:ac:
e6:e9:42:f0:da:22:72:73:bd:a7:2b:e6:ef:64:63:
05:f0:9f:e7:62:59:e8:55:1f:83:d5:bf:7c:9b:cf:
3b:69:18:14:78:04:99:aa:64:8c:43:15:be:45:97:
db:2a:56:56:34:b0:11:b0:10:f9:67:7f:28:34:66:
f5:99:60:12:a7:85:11:c3:f3:48:87:21:cf:a3:10:
68:30:1c:b3:f6:7a:c0:55:fd:95:07:6f:87:20:e2:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:ED:C8:9A:CF:49:09:34:66:0B:BB:67:66:AE:51:B0:BC:B2:DC
X509v3 Authority Key Identifier:
keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3b:df:a1:0f:6a:cc:62:45:8b:48:66:64:20:b5:46:a9:8e:
73:a4:be:b8:7b:ed:38:0a:b3:10:3e:4e:4d:e5:0e:6e:1e:9f:
e0:46:de:ed:e0:69:d1:74:fd:90:48:b6:0b:0a:e7:ac:04:15:
58:3c:8c:c4:47:bd:4b:21:11:c9:4d:c3:48:c1:86:cc:d3:c8:
0c:6b:df:0e:f8:f6:c5:f9:37:0d:ed:b0:22:21:42:20:d6:00:
3e:8c:2c:74:27:9c:23:3c:ac:85:1d:a6:34:7d:97:44:38:b7:
50:0b:44:e9:17:c6:20:1c:06:d3:d0:7a:48:02:ee:2a:9a:e4:
b1:3e:78:cb:d0:5a:88:d6:c8:5c:98:ce:56:fe:43:51:dd:8a:
a1:e6:0c:9b:c1:fd:53:70:7b:fa:71:c3:92:d1:b4:fe:96:c3:
d7:0d:94:49:78:ca:a7:f1:a9:eb:ff:60:b2:0d:9b:5a:1f:4e:
e1:12:c5:4f:bc:76:a8:14:e5:31:4d:6a:a4:a9:a1:8b:23:75:
fb:01:40:b9:43:02:b4:1c:72:a8:5a:c8:a1:af:66:39:1d:d1:
ca:b3:b3:1a:52:a8:d6:27:9b:64:56:61:c9:aa:f5:2c:ce:c1:
44:c2:0f:6f:07:a7:e7:c1:01:4c:63:81:c4:0a:ca:7d:6c:03:
3d:a7:24:8e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfgU7J0r0FIzOX2ffQl8RMl4blM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4NUFBMjBGQ0IwMTE4NDgxMTA1NEFEQTZDNEIzN0ZD
MDY1MjE3NTAeFw0yNDAyMDgyMDE3MTNaFw0yNTAyMDYyMDIyMTNaMDMxMTAvBgNV
BAMTKEREMDhFREM4OUFDRjQ5MDkzNDY2MEJCQjY3NjZBRTUxQjBCQ0IyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUDyW0w9HUtH8Xd/MIiCFbEb6
a/yntrH0rOrpt4RDxB6r9UfOtaL6qf1um3IWJvVaPM/fu0BfZ6+Zc6ZNN0eOCFpo
qh6z9ZtqRq5fcjiZIaw1AeVWL+r3Few7q/9XodbLtuC4OozbsdJn58UbrAVwXpV8
2yPyrlD6E6aGf2Y9X8jmJcD9nwsnPJKAOEwIqpD0EZ9QVed0rAYLe6mwERQs6kaT
rObpQvDaInJzvacr5u9kYwXwn+diWehVH4PVv3ybzztpGBR4BJmqZIxDFb5Fl9sq
VlY0sBGwEPlnfyg0ZvWZYBKnhRHD80iHIc+jEGgwHLP2esBV/ZUHb4cg4o6JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3QjtyJrPSQk0Zgu7Z2auUbC8stwwHwYDVR0j
BBgwFoAUg4WqIPywEYSBEFStpsSzf8BlIXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMC84Mzg1QUEyMEZDQjAxMTg0ODExMDU0QURBNkM0QjM3RkMwNjUyMTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzODVBQTIwRkNCMDExODQ4
MTEwNTRBREE2QzRCMzdGQzA2NTIxNzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM3MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpcTANBgkqhkiG9w0BAQsFAAOCAQEAqDvf
oQ9qzGJFi0hmZCC1RqmOc6S+uHvtOAqzED5OTeUObh6f4Ebe7eBp0XT9kEi2Cwrn
rAQVWDyMxEe9SyERyU3DSMGGzNPIDGvfDvj2xfk3De2wIiFCINYAPowsdCecIzys
hR2mNH2XRDi3UAtE6RfGIBwG09B6SALuKprksT54y9BaiNbIXJjOVv5DUd2KoeYM
m8H9U3B7+nHDktG0/pbD1w2USXjKp/Gp6/9gsg2bWh9O4RLFT7x2qBTlMU1qpKmh
iyN1+wFAuUMCtBxyqFrIoa9mOR3RyrOzGlKo1iebZFZhyar1LM7BRMIPbwen58EB
TGOBxArKfWwDPackjg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:33 2025 by rpki-client