Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa
File: 3133312e37322e35372e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier: 0/f8gRcEVe4aiCRUneXls5LntfjDqGMrnu3hN2i+vYo=
Subject key identifier: 9A:7C:5B:00:D4:B1:8F:E5:FC:C6:34:A0:84:6E:16:5C:75:F9:7F:12
Certificate issuer: /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial: 323627EB4C7ED9EF8802A70F0931D6428EF2085C
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa
Signing time: Thu 17 Apr 2025 22:00:01 +0000
ROA not before: Thu 17 Apr 2025 21:55:01 +0000
ROA not after: Thu 16 Apr 2026 22:00:01 +0000
asID: 61728
IP address blocks: 131.72.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:36:27:eb:4c:7e:d9:ef:88:02:a7:0f:09:31:d6:42:8e:f2:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Validity
Not Before: Apr 17 21:55:01 2025 GMT
Not After : Apr 16 22:00:01 2026 GMT
Subject: CN=9A7C5B00D4B18FE5FCC634A0846E165C75F97F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:1d:b8:cc:6f:95:b2:73:8b:96:5f:47:5e:
a8:52:ca:85:a0:6a:36:06:1f:7a:49:21:07:b8:b1:
31:be:26:16:6b:dc:6f:92:21:46:b9:e8:8e:a5:9c:
b0:c7:f0:88:17:2e:40:56:b4:a3:b8:a7:57:af:8c:
b9:dc:4a:61:90:8a:a5:26:95:ff:b6:ab:bf:b2:62:
e2:23:26:5c:98:69:2f:1d:f1:cb:e4:4b:1d:e1:4a:
9e:32:fd:63:f1:8b:58:f9:00:93:40:c1:f5:6d:c3:
24:31:6f:30:65:f1:b1:1e:54:fe:57:2a:f1:b5:cf:
74:dd:b6:bf:1a:ed:dd:d3:16:ac:c3:8f:d2:aa:e4:
7a:49:d8:70:bd:a8:d8:46:83:4c:e9:33:ad:63:75:
db:e5:26:11:05:50:7c:88:e7:d2:24:95:1d:c8:29:
80:64:19:d2:25:76:61:3c:1e:e8:94:e7:1d:34:60:
ea:a2:74:7b:87:3f:b1:ab:7f:be:83:9a:9d:1e:d7:
68:22:b9:05:47:dd:59:d5:37:48:04:ec:8b:1d:2f:
c6:77:0f:3e:fb:9e:a3:ff:f6:cd:0d:67:06:e5:e1:
0e:4b:28:99:10:2b:80:a2:a9:fb:d2:90:b2:07:c0:
b6:69:32:a6:2a:3e:8a:73:b4:1a:93:7b:29:92:cf:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:5B:00:D4:B1:8F:E5:FC:C6:34:A0:84:6E:16:5C:75:F9:7F:12
X509v3 Authority Key Identifier:
keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.57.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b0:47:26:36:8e:86:de:ec:c9:17:d9:77:4e:33:e3:d1:c5:
86:78:f0:94:f8:89:b8:98:ca:5d:ca:39:59:1d:ff:72:f4:32:
9d:f5:ea:3a:31:d2:d2:1a:7f:16:bd:db:0b:16:b7:d6:f5:e3:
2d:f6:71:62:b3:d1:3c:91:2c:d0:bb:e5:27:a1:8d:d4:12:66:
12:51:f8:62:4b:df:88:b6:fc:7b:35:58:d5:3f:43:de:76:c5:
07:c9:71:34:2f:d3:78:51:65:42:f1:3d:19:5d:1c:41:e7:17:
89:d2:36:bb:ea:df:3d:d3:ee:41:66:c6:6a:5a:98:ae:07:b1:
8a:36:2b:e1:09:01:5e:bd:c3:f5:b8:64:63:ee:4d:ea:cd:07:
6e:82:43:5c:e8:dc:a1:ff:bd:c4:6c:e1:ae:b0:28:98:d7:04:
db:37:31:9f:1a:81:41:99:4e:95:ab:fc:46:8b:61:f7:b2:a7:
86:83:fe:20:17:84:de:99:85:55:d5:b8:0a:be:d1:a2:01:c7:
af:b7:45:a8:3f:77:ad:31:e4:f3:44:f2:75:6c:9f:59:df:19:
7b:98:2b:49:c5:b6:d1:91:81:a0:51:be:5c:c5:b6:50:74:27:
78:fd:5d:c3:e1:19:40:6e:e1:2b:33:c4:2c:a1:7f:e2:c9:13:
3d:3a:95:8f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMjYn60x+2e+IAqcPCTHWQo7yCFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEwNjVENkFCRkVCMzAwRDJDNDIzODRGRTM1Q0JGNUYz
OUQwNUYxMzAeFw0yNTA0MTcyMTU1MDFaFw0yNjA0MTYyMjAwMDFaMDMxMTAvBgNV
BAMTKDlBN0M1QjAwRDRCMThGRTVGQ0M2MzRBMDg0NkUxNjVDNzVGOTdGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pR24zG+VsnOLll9HXqhSyoWg
ajYGH3pJIQe4sTG+JhZr3G+SIUa56I6lnLDH8IgXLkBWtKO4p1evjLncSmGQiqUm
lf+2q7+yYuIjJlyYaS8d8cvkSx3hSp4y/WPxi1j5AJNAwfVtwyQxbzBl8bEeVP5X
KvG1z3Tdtr8a7d3TFqzDj9Kq5HpJ2HC9qNhGg0zpM61jddvlJhEFUHyI59IklR3I
KYBkGdIldmE8HuiU5x00YOqidHuHP7Grf76Dmp0e12giuQVH3VnVN0gE7IsdL8Z3
Dz77nqP/9s0NZwbl4Q5LKJkQK4CiqfvSkLIHwLZpMqYqPopztBqTeymSz//HAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmnxbANSxj+X8xjSghG4WXHX5fxIwHwYDVR0j
BBgwFoAU2gZdar/rMA0sQjhP41y/XznQXxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRuNmtTZkpaSHU0ekJieHNRQkxCMmQ4QmY3cUx6cHBjRzlBM2RSWXdv
MUEvMC9EQTA2NUQ2QUJGRUIzMDBEMkM0MjM4NEZFMzVDQkY1RjM5RDA1RjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMDY1RDZBQkZFQjMwMEQy
QzQyMzg0RkUzNUNCRjVGMzlEMDVGMTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbjZrU2ZKWkh1NHpCYnhzUUJMQjJkOEJmN3FMenBwY0c5QTNkUll3bzFBLzAv
MzEzMzMxMmUzNzMyMmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINIOTANBgkqhkiG9w0BAQsFAAOCAQEAFrBHJjaOht7s
yRfZd04z49HFhnjwlPiJuJjKXco5WR3/cvQynfXqOjHS0hp/Fr3bCxa31vXjLfZx
YrPRPJEs0LvlJ6GN1BJmElH4YkvfiLb8ezVY1T9D3nbFB8lxNC/TeFFlQvE9GV0c
QecXidI2u+rfPdPuQWbGalqYrgexijYr4QkBXr3D9bhkY+5N6s0HboJDXOjcof+9
xGzhrrAomNcE2zcxnxqBQZlOlav8Roth97KnhoP+IBeE3pmFVdW4Cr7RogHHr7dF
qD93rTHk80TydWyfWd8Ze5grScW20ZGBoFG+XMW2UHQneP1dw+EZQG7hKzPELKF/
4skTPTqVjw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:49:30 2025 by rpki-client