Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
File: 3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier: t+FRAhQUKppjhn4KfNeK1ozh/Lg8/ZyoB6qtFQpDyyc=
Subject key identifier: 75:9D:5C:FB:B9:07:06:00:39:E4:D4:C9:45:F5:19:3E:35:27:8C:B6
Certificate issuer: /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial: 619F58CF04E903E9B9A85787962A762BD25F08A9
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
Signing time: Thu 06 Mar 2025 18:40:26 +0000
ROA not before: Thu 06 Mar 2025 18:35:26 +0000
ROA not after: Thu 05 Mar 2026 18:40:26 +0000
asID: 40356
IP address blocks: 189.126.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9f:58:cf:04:e9:03:e9:b9:a8:57:87:96:2a:76:2b:d2:5f:08:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Validity
Not Before: Mar 6 18:35:26 2025 GMT
Not After : Mar 5 18:40:26 2026 GMT
Subject: CN=759D5CFBB907060039E4D4C945F5193E35278CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:62:29:33:1b:76:af:fa:32:11:2a:ed:12:
e4:94:41:c0:90:b5:24:50:04:10:5c:64:5c:44:f3:
a0:f1:54:a7:e8:3f:5c:a6:b1:5e:23:bc:8d:58:e2:
85:d8:14:3b:24:ad:14:25:8b:aa:d2:11:46:a0:9c:
bd:87:e0:8b:f2:ea:d0:d3:af:cc:ef:50:c0:cc:d1:
a5:8d:ba:60:66:4e:57:75:0f:e7:72:ee:9e:5c:07:
3e:78:ce:56:12:c4:fb:ee:ee:06:94:80:10:22:7f:
c5:5e:91:4b:86:2f:3b:d5:3a:4d:18:33:87:c0:94:
ec:6c:a6:2d:e8:19:1c:7f:53:20:73:eb:1b:96:02:
c9:12:4f:9b:2f:5e:e4:c0:ad:34:27:f4:59:9c:bb:
3c:61:ed:08:16:ad:6d:c5:b6:c3:6e:fc:c4:09:1a:
10:34:ed:d6:4c:71:61:a8:66:5e:25:b5:9d:a6:f2:
bd:5c:da:29:30:ea:fb:de:17:31:fa:a6:f9:33:1f:
f9:10:ff:8e:44:40:a0:64:5f:75:78:88:ff:07:7b:
fc:04:4a:8d:01:61:ae:06:0c:60:cf:e3:c2:29:ff:
d9:b3:88:1d:04:64:5f:12:d5:5e:e2:fe:7d:fc:9f:
89:8a:1c:33:b1:2f:38:9e:78:19:b3:b0:0a:9d:31:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:5C:FB:B9:07:06:00:39:E4:D4:C9:45:F5:19:3E:35:27:8C:B6
X509v3 Authority Key Identifier:
keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.136.0/24
Signature Algorithm: sha256WithRSAEncryption
95:93:3f:62:27:8e:13:9c:b1:28:a4:e7:02:b7:59:86:bc:b5:
37:d3:de:16:3a:13:20:25:e5:e0:e9:95:f0:a7:d0:56:9e:69:
14:a1:a6:27:62:f5:8f:6d:d3:4c:5a:76:4e:f8:a5:6a:15:de:
45:a1:75:36:a1:ec:2f:70:37:aa:6d:c8:5d:7e:f9:7c:2e:63:
69:0d:4a:8c:a8:dd:31:55:47:3d:fb:9b:66:d2:cd:73:04:eb:
22:38:02:f3:20:64:01:7a:37:34:48:f3:f3:f8:4f:82:28:1f:
af:b9:d4:1a:40:1b:27:d7:f0:75:f1:77:f5:32:83:b9:48:a9:
33:98:6e:b3:7f:65:fa:96:15:82:44:c9:3c:43:54:e4:98:d1:
7c:fb:21:ec:e0:9e:4a:df:6a:6f:b6:26:03:fd:a8:49:08:69:
bb:15:b9:4a:9a:20:d6:45:8b:d4:c6:fa:80:5d:86:f6:16:80:
83:aa:f8:a5:cc:3f:9b:ab:08:db:34:b9:f3:82:9e:23:7f:3f:
f0:65:9a:04:d1:8b:7e:74:5f:bd:a4:21:ac:a0:0a:2f:59:e4:
93:67:7a:0e:af:96:f1:9e:7d:8d:70:c8:fe:0e:29:87:75:4e:
65:9c:b8:9f:9e:19:66:53:b8:92:d6:fb:64:23:05:94:4f:a1:
b3:7b:d3:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYZ9YzwTpA+m5qFeHlip2K9JfCKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlDOEZFNEM0Qjk1QUE4MEQzQjczRENEMTM2REExRTFC
ODM2NTZEOTAeFw0yNTAzMDYxODM1MjZaFw0yNjAzMDUxODQwMjZaMDMxMTAvBgNV
BAMTKDc1OUQ1Q0ZCQjkwNzA2MDAzOUU0RDRDOTQ1RjUxOTNFMzUyNzhDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR22IpMxt2r/oyESrtEuSUQcCQ
tSRQBBBcZFxE86DxVKfoP1ymsV4jvI1Y4oXYFDskrRQli6rSEUagnL2H4Ivy6tDT
r8zvUMDM0aWNumBmTld1D+dy7p5cBz54zlYSxPvu7gaUgBAif8VekUuGLzvVOk0Y
M4fAlOxspi3oGRx/UyBz6xuWAskST5svXuTArTQn9Fmcuzxh7QgWrW3FtsNu/MQJ
GhA07dZMcWGoZl4ltZ2m8r1c2ikw6vveFzH6pvkzH/kQ/45EQKBkX3V4iP8He/wE
So0BYa4GDGDP48Ip/9mziB0EZF8S1V7i/n38n4mKHDOxLzieeBmzsAqdMY7tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdZ1c+7kHBgA55NTJRfUZPjUnjLYwHwYDVR0j
BBgwFoAUycj+TEuVqoDTtz3NE22h4bg2VtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHBiSzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRi
WFAvMS9DOUM4RkU0QzRCOTVBQTgwRDNCNzNEQ0QxMzZEQTFFMUI4MzY1NkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QzhGRTRDNEI5NUFBODBE
M0I3M0RDRDEzNkRBMUUxQjgzNjU2RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RwYksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzAzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9fogwDQYJKoZIhvcNAQELBQADggEBAJWTP2In
jhOcsSik5wK3WYa8tTfT3hY6EyAl5eDplfCn0FaeaRShpidi9Y9t00xadk74pWoV
3kWhdTah7C9wN6ptyF1++XwuY2kNSoyo3TFVRz37m2bSzXME6yI4AvMgZAF6NzRI
8/P4T4IoH6+51BpAGyfX8HXxd/Uyg7lIqTOYbrN/ZfqWFYJEyTxDVOSY0Xz7Iezg
nkrfam+2JgP9qEkIabsVuUqaINZFi9TG+oBdhvYWgIOq+KXMP5urCNs0ufOCniN/
P/BlmgTRi350X72kIaygCi9Z5JNneg6vlvGefY1wyP4OKYd1TmWcuJ+eGWZTuJLW
+2QjBZRPobN700M=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:30 2025 by rpki-client