Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3233203d3e20323632353930.roa
File: 3133382e3132322e3235302e302f32332d3233203d3e20323632353930.roa (raw, json)
Hash identifier: +SSZ09q5Z3Yp0s0PwMtyBFiifq0x9D0uJpEJIoeGOU8=
Subject key identifier: C2:A0:4C:CF:8F:44:32:98:26:29:F5:B6:06:89:E9:8D:28:B5:25:64
Certificate issuer: /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial: 1DEBD34BFE837CC4F4EBD590307515B9BC341BB2
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3233203d3e20323632353930.roa
Signing time: Tue 04 Mar 2025 13:33:48 +0000
ROA not before: Tue 04 Mar 2025 13:28:48 +0000
ROA not after: Tue 03 Mar 2026 13:33:48 +0000
asID: 262590
IP address blocks: 138.122.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:eb:d3:4b:fe:83:7c:c4:f4:eb:d5:90:30:75:15:b9:bc:34:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Validity
Not Before: Mar 4 13:28:48 2025 GMT
Not After : Mar 3 13:33:48 2026 GMT
Subject: CN=C2A04CCF8F4432982629F5B60689E98D28B52564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:25:21:38:0a:65:4b:26:47:56:9c:b0:eb:
a8:73:c8:2a:9a:58:98:f5:5c:ae:be:d5:93:22:52:
26:37:90:4a:4f:92:50:dd:8f:7e:7d:c8:88:53:e2:
ad:4a:05:31:8f:a2:23:9f:bc:72:a7:ef:bb:69:43:
4b:17:cc:a8:1e:ea:cc:f1:11:a6:7a:26:5e:2e:aa:
00:6c:d2:12:54:a3:b9:4d:ba:84:a2:bd:45:a6:3a:
db:ad:a1:76:3c:35:ce:ec:fd:39:ca:04:ff:17:67:
78:2e:7f:68:e9:22:65:c5:09:6b:07:84:ce:a4:c1:
44:55:12:c4:b5:f1:0f:3b:51:65:bf:aa:b1:36:93:
b5:fa:aa:c1:5a:d8:5c:39:80:2c:e1:d4:3c:a2:c7:
5e:a1:bd:3f:7b:7b:3e:31:08:05:58:99:a4:b4:64:
25:4e:59:54:53:8e:89:8a:d0:a6:f8:f5:91:d3:24:
8b:2e:93:38:05:3c:fd:e0:7f:ec:75:43:2c:60:75:
9e:3b:1c:fc:0a:48:3c:d2:07:00:0e:62:c3:1e:19:
44:8f:f0:2d:c3:7d:73:fa:f2:d9:ef:26:e9:50:16:
82:be:52:7b:54:17:fe:8d:63:c5:79:09:c9:77:d6:
02:e6:0a:b6:16:8a:ab:4c:7c:71:03:78:ee:d0:20:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:4C:CF:8F:44:32:98:26:29:F5:B6:06:89:E9:8D:28:B5:25:64
X509v3 Authority Key Identifier:
keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3233203d3e20323632353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.250.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b1:a3:cd:7c:ab:5b:aa:99:a4:f0:92:6b:d7:0f:68:e3:e4:
ef:ae:bf:13:0d:00:14:6b:24:c0:5f:2c:77:f4:36:f1:c1:c0:
7a:c9:79:c8:ce:81:c2:22:54:36:08:f0:05:0c:6c:fa:ce:31:
98:4a:89:d8:aa:b7:04:80:a1:31:39:dd:68:6f:81:6e:6c:9a:
bb:77:56:ba:93:a4:f4:a8:c8:e8:9d:8e:37:9a:17:b9:ed:b8:
1f:87:30:8f:66:7a:32:a4:64:21:23:7d:62:ce:96:e8:12:bb:
43:59:9e:ba:85:f1:7f:de:3f:11:47:82:a3:0c:13:81:0d:e7:
a2:1c:c2:67:db:eb:0e:22:a2:70:90:12:be:c3:08:94:94:9b:
f2:1e:b1:af:00:25:1c:9a:45:35:aa:4e:63:8f:31:87:22:64:
9c:42:2e:f3:8a:e8:5c:ba:7a:db:ae:e7:dc:29:18:f5:5b:e3:
52:f9:f6:2e:cf:02:d0:fa:3a:2e:7e:86:c5:73:9a:04:13:3d:
bc:81:48:f3:45:d8:ca:19:0a:b3:9f:61:48:da:20:35:45:90:
d0:8d:d1:64:09:43:3b:35:ce:8f:a2:e7:a3:f1:34:38:1b:d5:
ac:e2:c1:90:2c:59:55:de:e4:ca:b0:b4:7d:fa:98:9b:90:2a:
e6:8a:a6:86
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHevTS/6DfMT069WQMHUVubw0G7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3NTk2QkQzM0I5MTY3RTkyMkJFNTRCOUIwMDRCMTJF
QUQxOUQyOTAeFw0yNTAzMDQxMzI4NDhaFw0yNjAzMDMxMzMzNDhaMDMxMTAvBgNV
BAMTKEMyQTA0Q0NGOEY0NDMyOTgyNjI5RjVCNjA2ODlFOThEMjhCNTI1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yCUhOAplSyZHVpyw66hzyCqa
WJj1XK6+1ZMiUiY3kEpPklDdj359yIhT4q1KBTGPoiOfvHKn77tpQ0sXzKge6szx
EaZ6Jl4uqgBs0hJUo7lNuoSivUWmOtutoXY8Nc7s/TnKBP8XZ3guf2jpImXFCWsH
hM6kwURVEsS18Q87UWW/qrE2k7X6qsFa2Fw5gCzh1Dyix16hvT97ez4xCAVYmaS0
ZCVOWVRTjomK0Kb49ZHTJIsukzgFPP3gf+x1QyxgdZ47HPwKSDzSBwAOYsMeGUSP
8C3DfXP68tnvJulQFoK+UntUF/6NY8V5Ccl31gLmCrYWiqtMfHEDeO7QIFE1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwqBMz49EMpgmKfW2BonpjSi1JWQwHwYDVR0j
BBgwFoAUrHWWvTO5Fn6SK+VLmwBLEurRnSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9BQzc1OTZCRDMzQjkxNjdFOTIyQkU1NEI5QjAwNEIxMkVBRDE5RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNzU5NkJEMzNCOTE2N0U5
MjJCRTU0QjlCMDA0QjEyRUFEMTlEMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp6+jANBgkqhkiG9w0BAQsFAAOCAQEAObGj
zXyrW6qZpPCSa9cPaOPk766/Ew0AFGskwF8sd/Q28cHAesl5yM6BwiJUNgjwBQxs
+s4xmEqJ2Kq3BIChMTndaG+Bbmyau3dWupOk9KjI6J2ON5oXue24H4cwj2Z6MqRk
ISN9Ys6W6BK7Q1meuoXxf94/EUeCowwTgQ3nohzCZ9vrDiKicJASvsMIlJSb8h6x
rwAlHJpFNapOY48xhyJknEIu84roXLp6267n3CkY9VvjUvn2Ls8C0Po6Ln6GxXOa
BBM9vIFI80XYyhkKs59hSNogNUWQ0I3RZAlDOzXOj6Lno/E0OBvVrOLBkCxZVd7k
yrC0ffqYm5Aq5oqmhg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:16:54 2025 by rpki-client