Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
File: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=
Subject key identifier: D0:B3:74:D8:30:8A:FD:F4:39:11:47:13:32:9D:64:D0:F7:D8:89:55
Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial: 7AA2BFF5986EFAE8FA632807BA324EE1CDF0BBC3
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
Signing time: Thu 06 Mar 2025 15:33:22 +0000
ROA not before: Thu 06 Mar 2025 15:28:22 +0000
ROA not after: Thu 05 Mar 2026 15:33:22 +0000
asID: 264233
IP address blocks: 138.117.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a2:bf:f5:98:6e:fa:e8:fa:63:28:07:ba:32:4e:e1:cd:f0:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Validity
Not Before: Mar 6 15:28:22 2025 GMT
Not After : Mar 5 15:33:22 2026 GMT
Subject: CN=D0B374D8308AFDF439114713329D64D0F7D88955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:a2:88:ba:cc:b6:f6:97:ad:a0:42:4b:1a:
d4:a6:93:af:93:d9:8b:4d:76:04:f5:06:cd:9e:6f:
97:b3:69:e4:b4:3e:8c:a9:03:d0:80:b8:63:a0:4d:
52:52:f0:ab:12:29:00:60:28:e0:24:53:d3:10:55:
92:d2:76:ad:d0:59:8b:6f:51:9b:c7:ee:c6:66:56:
61:ab:23:74:be:9c:2c:fe:92:b0:50:92:52:82:0b:
7d:24:f2:0e:83:1a:11:ce:10:bf:8e:96:fc:e6:4e:
a2:b3:b4:34:0f:37:1d:bd:32:96:0a:e8:77:3c:3d:
6a:b7:9c:b9:c8:c8:0c:b8:04:6d:0d:28:a5:36:63:
52:58:7e:9f:3d:e2:e0:17:c6:a8:d6:84:65:21:7c:
be:1c:81:b8:e7:3c:c3:6c:40:ab:32:71:e9:e7:a6:
86:04:aa:95:45:61:71:bb:f1:90:0d:df:72:49:38:
f1:62:e1:7d:fc:7a:d4:e2:20:d6:a2:e1:63:ef:8f:
3a:a1:b8:3a:76:5a:b1:dd:d8:b2:13:55:8e:a6:20:
f0:7c:9d:bf:bb:9e:3d:11:c4:31:8f:f9:89:f7:bc:
6e:07:52:7a:b9:4d:23:2c:e3:3a:08:8d:b0:4f:bd:
d7:91:db:44:77:48:1f:74:33:05:2d:68:91:59:d7:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:74:D8:30:8A:FD:F4:39:11:47:13:32:9D:64:D0:F7:D8:89:55
X509v3 Authority Key Identifier:
keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.116.0/22
Signature Algorithm: sha256WithRSAEncryption
44:da:ba:9a:4d:83:c9:89:ae:e5:7c:58:8b:e8:4b:3f:98:61:
12:03:c2:ff:27:17:2c:f6:97:1b:a8:e3:eb:90:02:5a:b3:17:
67:9f:83:76:e1:08:9d:6b:47:b8:b9:0a:6e:7d:bc:a5:4a:e6:
41:bb:04:52:ba:62:6a:0c:dc:a4:d3:85:fe:65:f5:79:cf:ec:
a7:db:3c:cb:e8:a0:44:a6:19:92:e0:f2:77:0f:f4:05:43:61:
ac:83:6d:a9:9d:61:fe:bb:f5:56:e7:8a:1c:2c:b1:72:d0:01:
d2:c7:e2:a9:57:1a:d3:76:c7:93:77:30:37:35:d5:d1:ad:22:
d4:99:41:01:98:a6:ff:09:83:7f:3f:7e:61:13:4a:17:3e:4d:
42:af:01:6a:fb:f5:5b:3c:a8:d8:c6:a8:f8:7d:f2:a9:98:07:
f2:8a:05:4b:d5:2f:fc:c7:93:42:f5:b7:6a:37:26:d0:f6:27:
b7:3d:79:8e:d3:e8:68:a9:93:e4:04:54:db:07:95:5b:38:26:
5a:5c:d4:1f:85:b5:a1:36:8b:fa:b4:11:62:93:3b:fc:e9:90:
5f:32:0d:5c:c9:d2:8b:3b:9a:1f:97:8c:94:1c:f2:49:b0:0c:
bf:79:3e:f0:94:aa:c8:04:ee:3e:04:10:e1:ad:0b:65:a8:9a:
fe:92:20:a1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeqK/9Zhu+uj6YygHujJO4c3wu8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx
RDAyNkM0NzAeFw0yNTAzMDYxNTI4MjJaFw0yNjAzMDUxNTMzMjJaMDMxMTAvBgNV
BAMTKEQwQjM3NEQ4MzA4QUZERjQzOTExNDcxMzMyOUQ2NEQwRjdEODg5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJ6KIusy29petoEJLGtSmk6+T
2YtNdgT1Bs2eb5ezaeS0PoypA9CAuGOgTVJS8KsSKQBgKOAkU9MQVZLSdq3QWYtv
UZvH7sZmVmGrI3S+nCz+krBQklKCC30k8g6DGhHOEL+OlvzmTqKztDQPNx29MpYK
6Hc8PWq3nLnIyAy4BG0NKKU2Y1JYfp894uAXxqjWhGUhfL4cgbjnPMNsQKsycenn
poYEqpVFYXG78ZAN33JJOPFi4X38etTiINai4WPvjzqhuDp2WrHd2LITVY6mIPB8
nb+7nj0RxDGP+Yn3vG4HUnq5TSMs4zoIjbBPvdeR20R3SB90MwUtaJFZ134rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0LN02DCK/fQ5EUcTMp1k0PfYiVUwHwYDVR0j
BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz
NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUU3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1dDANBgkqhkiG9w0BAQsFAAOCAQEARNq6
mk2DyYmu5XxYi+hLP5hhEgPC/ycXLPaXG6jj65ACWrMXZ5+DduEInWtHuLkKbn28
pUrmQbsEUrpiagzcpNOF/mX1ec/sp9s8y+igRKYZkuDydw/0BUNhrINtqZ1h/rv1
VueKHCyxctAB0sfiqVca03bHk3cwNzXV0a0i1JlBAZim/wmDfz9+YRNKFz5NQq8B
avv1Wzyo2Mao+H3yqZgH8ooFS9Uv/MeTQvW3ajcm0PYntz15jtPoaKmT5ARU2weV
WzgmWlzUH4W1oTaL+rQRYpM7/OmQXzINXMnSizuaH5eMlBzySbAMv3k+8JSqyATu
PgQQ4a0LZaia/pIgoQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:50 2025 by rpki-client