Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3232203d3e20323635393139.roa
File: 3133312e3139362e3139362e302f32322d3232203d3e20323635393139.roa (raw, json)
Hash identifier: N25YkXtiDjgYCSqJPWRXb5suEFrnyJkm2iZDD0dd2z0=
Subject key identifier: 31:52:C3:B8:C1:91:A5:EA:DF:B0:FC:E2:09:16:B2:45:1A:72:5F:27
Certificate issuer: /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial: 5A0CC72B9A9930BA087CDA2D94CD0A434DB55A41
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3232203d3e20323635393139.roa
Signing time: Fri 28 Feb 2025 14:53:44 +0000
ROA not before: Fri 28 Feb 2025 14:48:44 +0000
ROA not after: Fri 27 Feb 2026 14:53:44 +0000
asID: 265919
IP address blocks: 131.196.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0c:c7:2b:9a:99:30:ba:08:7c:da:2d:94:cd:0a:43:4d:b5:5a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Validity
Not Before: Feb 28 14:48:44 2025 GMT
Not After : Feb 27 14:53:44 2026 GMT
Subject: CN=3152C3B8C191A5EADFB0FCE20916B2451A725F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:9d:98:f7:2f:8c:42:d7:c4:d3:74:4a:2e:
a3:f3:03:7c:cb:23:1a:b4:00:d0:6d:59:b7:24:2e:
f7:fc:95:da:43:36:2a:04:3b:69:96:6b:e4:c8:81:
9a:7c:95:71:84:bb:bc:a0:27:07:d3:96:21:26:d0:
2e:f2:5f:8a:af:54:90:03:bc:b4:db:79:4d:66:24:
d2:ed:1e:1f:7c:f4:77:3a:c1:83:3f:2c:68:c3:f4:
80:7d:03:22:67:83:85:7b:24:42:86:38:5a:46:d9:
76:95:54:18:04:d6:0d:35:68:4e:07:05:99:57:d9:
0b:93:59:2f:5d:7c:f6:30:de:5c:62:a9:20:05:d8:
24:08:23:5f:48:28:c4:81:69:b2:e7:a6:63:02:a1:
ff:ff:c7:09:43:5f:e5:a2:a0:03:70:d1:4c:a0:4b:
8a:67:8f:f4:0d:d2:61:6a:66:ec:c8:22:14:8d:d6:
cd:fe:dd:f9:5a:36:2e:e9:61:1b:56:a4:3c:23:15:
96:2b:86:95:c9:5b:51:b1:9a:0c:1f:3e:ce:2c:2e:
28:56:3a:39:b0:0c:da:c0:e9:92:37:c4:65:35:65:
12:47:b6:d2:5b:aa:76:ba:c5:52:c3:e3:39:04:2f:
ae:f2:a7:a9:b6:4f:17:9e:5d:42:2f:3b:11:4b:ef:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:C3:B8:C1:91:A5:EA:DF:B0:FC:E2:09:16:B2:45:1A:72:5F:27
X509v3 Authority Key Identifier:
keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3232203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:59:24:d3:13:b9:c4:a7:d2:13:00:63:4a:c2:79:8f:51:6c:
df:c8:b4:63:9c:e4:a9:9c:c2:71:a4:1d:b5:3c:57:08:f0:6f:
0a:11:59:e2:1a:5d:46:7e:91:54:50:4a:c2:58:fb:b0:fa:a6:
40:e1:6e:fc:2e:5d:ff:99:4d:d0:55:a4:2b:24:fa:00:00:4c:
f5:a0:be:1b:5a:e1:e5:ed:7c:1d:ef:0d:c5:7a:5d:13:3b:cb:
2d:a4:c8:36:37:3e:91:43:32:64:72:ad:a6:37:66:b8:40:b7:
7a:48:a1:cc:8b:75:f7:86:b9:d3:d6:60:49:a6:c4:d3:51:16:
61:08:2c:c9:9d:a1:70:90:52:d9:b0:0a:14:6a:db:bc:d9:ee:
46:0e:1b:da:3f:cd:56:48:21:58:8b:6d:33:09:c5:c8:6b:23:
0d:0b:b1:aa:df:a3:57:91:6f:ff:9e:b4:20:d5:a2:70:dd:6c:
87:d3:78:94:1f:c1:56:55:fb:db:32:c9:de:e1:02:8f:55:5d:
68:76:5b:bc:01:88:6a:eb:14:16:0f:b6:ff:6e:eb:9e:df:11:
90:da:a5:96:1e:35:02:1b:a8:c6:86:8c:fa:60:6e:ce:96:86:
9a:7d:5e:e0:0d:4a:72:80:3e:fd:c7:08:5e:ab:cc:3a:d6:1d:
ff:57:b0:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWgzHK5qZMLoIfNotlM0KQ021WkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0NzM5ODg2QTE0NTUyNEQyRjg0RTdGNjcwNEIwRDZB
RkZDMkFFOTAeFw0yNTAyMjgxNDQ4NDRaFw0yNjAyMjcxNDUzNDRaMDMxMTAvBgNV
BAMTKDMxNTJDM0I4QzE5MUE1RUFERkIwRkNFMjA5MTZCMjQ1MUE3MjVGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9Z2Y9y+MQtfE03RKLqPzA3zL
Ixq0ANBtWbckLvf8ldpDNioEO2mWa+TIgZp8lXGEu7ygJwfTliEm0C7yX4qvVJAD
vLTbeU1mJNLtHh989Hc6wYM/LGjD9IB9AyJng4V7JEKGOFpG2XaVVBgE1g01aE4H
BZlX2QuTWS9dfPYw3lxiqSAF2CQII19IKMSBabLnpmMCof//xwlDX+WioANw0Uyg
S4pnj/QN0mFqZuzIIhSN1s3+3flaNi7pYRtWpDwjFZYrhpXJW1GxmgwfPs4sLihW
OjmwDNrA6ZI3xGU1ZRJHttJbqna6xVLD4zkEL67yp6m2TxeeXUIvOxFL7/BZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMVLDuMGRperfsPziCRayRRpyXycwHwYDVR0j
BBgwFoAUHUc5iGoUVSTS+E5/ZwSw1q/8KukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8xRDQ3Mzk4ODZBMTQ1NTI0RDJGODRFN0Y2NzA0QjBENkFGRkMyQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENDczOTg4NkExNDU1MjRE
MkY4NEU3RjY3MDRCMEQ2QUZGQzJBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPExDANBgkqhkiG9w0BAQsFAAOCAQEAoVkk
0xO5xKfSEwBjSsJ5j1Fs38i0Y5zkqZzCcaQdtTxXCPBvChFZ4hpdRn6RVFBKwlj7
sPqmQOFu/C5d/5lN0FWkKyT6AABM9aC+G1rh5e18He8NxXpdEzvLLaTINjc+kUMy
ZHKtpjdmuEC3ekihzIt194a509ZgSabE01EWYQgsyZ2hcJBS2bAKFGrbvNnuRg4b
2j/NVkghWIttMwnFyGsjDQuxqt+jV5Fv/560INWicN1sh9N4lB/BVlX72zLJ3uEC
j1VdaHZbvAGIausUFg+2/27rnt8RkNqllh41AhuoxoaM+mBuzpaGmn1e4A1KcoA+
/ccIXqvMOtYd/1ewKw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:02:59 2025 by rpki-client