Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
File: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=
Subject key identifier: 12:82:C1:FD:96:58:38:E8:06:5C:0A:F5:9E:BD:1A:A9:7C:96:6D:8A
Certificate issuer: /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial: 10FDE52AA6C52E893E17A40507765766C992686B
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 262595
IP address blocks: 138.0.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fd:e5:2a:a6:c5:2e:89:3e:17:a4:05:07:76:57:66:c9:92:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=1282C1FD965838E8065C0AF59EBD1AA97C966D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:b9:ff:26:e0:18:48:fb:0f:75:6f:e8:7a:
d7:0b:5f:56:0b:0a:57:38:aa:2f:7c:9d:89:2e:40:
be:ed:32:21:59:0c:60:cc:58:28:06:ef:93:cf:f2:
f6:33:19:b8:50:cc:4e:67:df:31:20:66:56:40:26:
ce:7d:71:df:ff:ae:ca:e8:f0:37:70:1c:d7:b9:e4:
04:24:ae:e1:e4:67:a0:34:3a:57:30:a5:5f:60:fb:
0c:d5:1f:54:1e:29:e4:5d:79:34:9c:dc:4c:fe:64:
a2:1a:75:d8:20:4f:73:6b:fc:79:27:6e:c4:58:09:
53:f9:1d:05:a5:a9:b6:3b:8a:58:79:c6:7c:3e:62:
b0:62:ab:6c:ae:96:ae:86:e8:22:8f:ae:5c:26:30:
b1:70:8d:4c:3c:d2:c9:96:16:01:ac:81:24:c0:80:
34:5e:82:f8:ce:e5:c0:c8:6e:35:53:0a:cd:bf:6d:
d5:b8:1b:93:8a:6f:5d:ca:04:2f:ef:b2:09:e8:10:
d1:1c:50:6e:cc:eb:07:d3:49:ad:0d:a2:a1:40:41:
3c:c7:83:f1:42:18:60:b8:42:bf:7e:ea:37:d7:42:
b6:78:9a:fa:f5:19:63:31:12:e3:49:38:f7:7c:22:
7b:f7:95:cf:d4:4f:82:45:e8:2d:ac:b3:bb:09:33:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:C1:FD:96:58:38:E8:06:5C:0A:F5:9E:BD:1A:A9:7C:96:6D:8A
X509v3 Authority Key Identifier:
keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.64.0/22
Signature Algorithm: sha256WithRSAEncryption
59:ad:82:86:67:70:0b:b5:11:bd:58:9f:f1:92:f7:d1:89:1d:
e3:a6:41:00:b4:30:21:42:e8:6e:b6:a1:d7:1c:42:31:1d:96:
89:bf:1f:3a:82:b6:96:58:64:ba:21:48:13:4c:cc:d1:cf:d1:
c0:8c:72:d2:58:64:8c:8a:05:89:3e:5f:4b:f8:a2:7e:3d:54:
56:4d:f6:a2:a0:3c:b6:1e:b6:54:84:b6:98:1e:37:a8:84:38:
ca:32:1d:10:99:81:af:38:6f:ad:51:51:ea:85:2d:06:17:b0:
c6:ed:54:b6:23:86:df:1e:ec:ec:a8:cb:ef:1b:42:a8:eb:10:
a5:40:70:8c:f2:f1:c8:10:d9:d8:6e:ef:15:f0:2f:e9:f9:96:
95:a2:fe:19:4e:98:30:3f:7b:07:b1:5b:89:2d:89:6a:c9:86:
1e:a6:aa:bf:9f:53:45:3d:5b:cf:4d:0a:88:59:34:ae:b1:d9:
0f:4f:a4:84:82:99:37:e3:53:bd:cd:b9:4b:35:6e:b1:8a:15:
0a:c3:bd:63:3c:02:13:7d:cf:b5:ba:7c:fb:d5:2f:5a:cc:c8:
80:d5:bf:18:41:d2:ea:20:6f:e7:38:8b:32:53:c8:88:f3:d7:
63:95:11:49:cf:02:5f:e9:1e:21:e7:47:da:f6:69:c8:45:d0:
1e:2c:cc:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEP3lKqbFLok+F6QFB3ZXZsmSaGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDEyODJDMUZEOTY1ODM4RTgwNjVDMEFGNTlFQkQxQUE5N0M5NjZEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXjLn/JuAYSPsPdW/oetcLX1YL
Clc4qi98nYkuQL7tMiFZDGDMWCgG75PP8vYzGbhQzE5n3zEgZlZAJs59cd//rsro
8DdwHNe55AQkruHkZ6A0OlcwpV9g+wzVH1QeKeRdeTSc3Ez+ZKIaddggT3Nr/Hkn
bsRYCVP5HQWlqbY7ilh5xnw+YrBiq2yulq6G6CKPrlwmMLFwjUw80smWFgGsgSTA
gDRegvjO5cDIbjVTCs2/bdW4G5OKb13KBC/vsgnoENEcUG7M6wfTSa0NoqFAQTzH
g/FCGGC4Qr9+6jfXQrZ4mvr1GWMxEuNJOPd8Inv3lc/UT4JF6C2ss7sJM1YRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEoLB/ZZYOOgGXAr1nr0aqXyWbYowHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzEzMzM4MmUzMDJlMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAQDANBgkqhkiG9w0BAQsFAAOCAQEAWa2ChmdwC7UR
vVif8ZL30Ykd46ZBALQwIULobrah1xxCMR2Wib8fOoK2llhkuiFIE0zM0c/RwIxy
0lhkjIoFiT5fS/iifj1UVk32oqA8th62VIS2mB43qIQ4yjIdEJmBrzhvrVFR6oUt
Bhewxu1UtiOG3x7s7KjL7xtCqOsQpUBwjPLxyBDZ2G7vFfAv6fmWlaL+GU6YMD97
B7FbiS2JasmGHqaqv59TRT1bz00KiFk0rrHZD0+khIKZN+NTvc25SzVusYoVCsO9
YzwCE33Ptbp8+9UvWszIgNW/GEHS6iBv5ziLMlPIiPPXY5URSc8CX+keIedH2vZp
yEXQHizMLw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:25 2025 by rpki-client