Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa
File: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier: BfZMW7bDrUq4NsSpiv7ajjwX3JOcPJxVrUruXpORHTY=
Subject key identifier: 43:98:97:10:47:D2:16:70:C9:91:95:16:DB:9F:B0:25:60:5C:6F:28
Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial: 452249B193FAD60AB6A36B7D920E94BAF6C476BC
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa
Signing time: Thu 06 Mar 2025 14:08:25 +0000
ROA not before: Thu 06 Mar 2025 14:03:25 +0000
ROA not after: Thu 05 Mar 2026 14:08:25 +0000
asID: 265078
IP address blocks: 170.233.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:22:49:b1:93:fa:d6:0a:b6:a3:6b:7d:92:0e:94:ba:f6:c4:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Validity
Not Before: Mar 6 14:03:25 2025 GMT
Not After : Mar 5 14:08:25 2026 GMT
Subject: CN=4398971047D21670C9919516DB9FB025605C6F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:c5:1d:6b:15:f7:b8:4c:cf:a1:cc:d8:08:
0c:04:c1:b7:52:80:77:8a:9e:85:fc:8d:52:23:2b:
b0:c9:bd:95:c1:cb:85:01:bd:25:fc:08:00:a4:2b:
b9:3e:9a:a1:eb:e9:c9:bc:9b:22:ce:40:7a:f5:cf:
15:43:99:8b:21:07:a1:aa:53:e5:a2:8e:7d:38:0d:
40:e9:e4:f7:f1:31:99:2a:9e:4b:1b:99:f5:69:94:
58:54:87:9d:09:50:ef:79:14:79:1a:44:ac:ad:56:
74:db:73:68:d0:9e:04:f3:87:7c:35:96:e2:76:a4:
2f:69:6a:de:aa:97:f2:f5:34:0b:d7:42:c2:c7:5d:
c4:df:27:60:31:60:06:5f:6f:fe:83:69:34:86:bc:
cb:93:18:db:0e:3d:20:4d:e2:7d:02:d5:a9:f2:d5:
a3:a9:38:19:f6:b7:8b:cd:ee:82:79:25:ec:0d:f2:
c8:2b:5f:71:bf:39:93:90:73:e6:45:bc:34:46:1d:
76:4d:d5:5c:bc:df:9d:2d:d9:eb:ca:a0:d0:59:4e:
b7:97:03:39:e0:3b:8d:89:d6:df:31:b4:b7:8b:a8:
35:d6:19:e7:ed:27:bf:10:e5:3a:a4:a0:77:d3:13:
2e:ea:22:f0:96:6a:86:92:6b:53:3e:a8:64:8f:ab:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:97:10:47:D2:16:70:C9:91:95:16:DB:9F:B0:25:60:5C:6F:28
X509v3 Authority Key Identifier:
keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.112.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:c0:9d:ae:f0:3f:61:d2:ea:a7:b2:b5:2f:79:96:90:da:e9:
e6:24:6f:0b:81:43:f2:7b:4c:c1:0c:ed:e0:f9:a1:6d:c4:98:
98:32:a8:54:47:20:b7:49:5b:3d:62:02:18:bf:21:01:1b:3d:
a8:d8:02:76:c9:3b:70:f5:25:b1:48:d5:ff:90:fe:c1:8f:5b:
65:61:1e:84:c4:f5:92:5b:44:3d:f0:fd:50:ab:67:88:bd:b9:
91:9d:17:11:a7:a4:ff:3e:19:5e:2b:6e:7a:bc:be:31:c9:67:
1c:33:5f:54:f4:11:14:c2:fe:d4:37:6f:0d:88:bd:84:17:86:
b8:99:6b:88:fb:2b:09:bd:50:17:3f:d5:46:32:a7:b7:3f:5f:
dd:ca:a5:c8:06:ea:c5:03:6a:bc:7b:22:42:19:83:5f:a2:b4:
68:e3:a9:3d:b6:b3:cd:0c:ec:d7:68:68:d8:4e:19:7f:4c:29:
86:59:f2:7a:bd:8c:43:a1:06:a5:42:35:df:22:6c:31:95:70:
74:8c:fb:56:f4:15:43:30:71:53:c7:5f:e3:de:97:fc:ed:90:
14:c8:b8:69:25:47:4b:b6:c2:0b:80:63:6b:58:82:12:7c:30:
a5:08:90:bb:9c:d2:19:eb:88:18:48:70:f2:4d:d5:3f:41:a3:
dc:74:b2:69
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURSJJsZP61gq2o2t9kg6UuvbEdrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB
MUEzMDJCMjAeFw0yNTAzMDYxNDAzMjVaFw0yNjAzMDUxNDA4MjVaMDMxMTAvBgNV
BAMTKDQzOTg5NzEwNDdEMjE2NzBDOTkxOTUxNkRCOUZCMDI1NjA1QzZGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nMUdaxX3uEzPoczYCAwEwbdS
gHeKnoX8jVIjK7DJvZXBy4UBvSX8CACkK7k+mqHr6cm8myLOQHr1zxVDmYshB6Gq
U+Wijn04DUDp5PfxMZkqnksbmfVplFhUh50JUO95FHkaRKytVnTbc2jQngTzh3w1
luJ2pC9pat6ql/L1NAvXQsLHXcTfJ2AxYAZfb/6DaTSGvMuTGNsOPSBN4n0C1any
1aOpOBn2t4vN7oJ5JewN8sgrX3G/OZOQc+ZFvDRGHXZN1Vy8350t2evKoNBZTreX
AzngO42J1t8xtLeLqDXWGeftJ78Q5TqkoHfTEy7qIvCWaoaSa1M+qGSPq4hHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQ5iXEEfSFnDJkZUW25+wJWBcbygwHwYDVR0j
BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy
RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzEv
MzEzNzMwMmUzMjMzMzMyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpcDANBgkqhkiG9w0BAQsFAAOCAQEAz8Cd
rvA/YdLqp7K1L3mWkNrp5iRvC4FD8ntMwQzt4PmhbcSYmDKoVEcgt0lbPWICGL8h
ARs9qNgCdsk7cPUlsUjV/5D+wY9bZWEehMT1kltEPfD9UKtniL25kZ0XEaek/z4Z
Xituery+MclnHDNfVPQRFML+1DdvDYi9hBeGuJlriPsrCb1QFz/VRjKntz9f3cql
yAbqxQNqvHsiQhmDX6K0aOOpPbazzQzs12ho2E4Zf0wphlnyer2MQ6EGpUI13yJs
MZVwdIz7VvQVQzBxU8df496X/O2QFMi4aSVHS7bCC4Bja1iCEnwwpQiQu5zSGeuI
GEhw8k3VP0Gj3HSyaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:02 2025 by rpki-client