Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa
File: 3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier: pR3RNPQ57gA1O6fWP0EI+hKaCPYjysUvByC948Bp9UU=
Subject key identifier: 2B:B1:59:F7:20:13:CB:1F:59:E3:8C:7E:A5:E1:09:8C:25:E9:17:18
Certificate issuer: /CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
Certificate serial: 72C35B76B11E147424FFD8075A9D3E9E95920FF5
Authority key identifier: 0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa
Signing time: Mon 24 Mar 2025 12:27:44 +0000
ROA not before: Mon 24 Mar 2025 12:22:44 +0000
ROA not after: Mon 23 Mar 2026 12:27:44 +0000
asID: 263982
IP address blocks: 168.197.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c3:5b:76:b1:1e:14:74:24:ff:d8:07:5a:9d:3e:9e:95:92:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
Validity
Not Before: Mar 24 12:22:44 2025 GMT
Not After : Mar 23 12:27:44 2026 GMT
Subject: CN=2BB159F72013CB1F59E38C7EA5E1098C25E91718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:8d:71:53:17:b3:9a:e0:32:04:32:e0:d6:
92:aa:d2:19:c8:b6:d2:6f:29:db:81:38:3b:04:50:
9a:b1:8b:0d:2b:24:95:2e:a4:8e:48:e4:b0:25:74:
0b:84:13:ab:aa:e5:42:e1:ab:cc:3b:2b:28:58:34:
d1:02:b0:25:5f:19:1b:ce:99:5a:f6:01:9d:61:66:
4f:fc:17:b1:a0:c6:34:25:d4:03:5a:62:74:4a:4c:
84:67:9d:9b:60:8e:a1:3b:1b:1a:d5:db:0a:79:52:
fa:49:19:fd:4f:28:e1:ec:a6:48:b0:b9:db:a1:30:
a2:21:6d:e2:40:76:06:2c:dd:af:ab:fd:4a:91:08:
f8:f8:63:84:84:ba:b5:a5:b9:f5:73:21:53:7a:d8:
17:7d:b0:b5:09:b5:4b:44:3f:2c:fd:33:45:7b:69:
58:16:fc:7c:f0:b4:25:ac:7d:8b:7d:a8:a0:e7:e8:
f5:b9:9c:5f:88:93:9d:41:b7:40:ef:35:82:fa:79:
e2:96:0e:41:51:ee:98:b1:b5:6c:05:1e:5c:d0:62:
bd:4a:02:e2:71:c0:db:54:99:fd:ae:17:11:d0:96:
e3:8a:24:5e:0a:05:9f:92:05:a8:f8:89:c6:07:f1:
2d:c6:b8:d0:03:77:3c:89:6c:c1:a0:9b:71:c8:e2:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:59:F7:20:13:CB:1F:59:E3:8C:7E:A5:E1:09:8C:25:E9:17:18
X509v3 Authority Key Identifier:
keyid:0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.236.0/22
Signature Algorithm: sha256WithRSAEncryption
09:28:c0:b0:15:c4:19:62:fc:71:54:f3:3c:60:2b:e7:22:37:
04:a9:4f:e8:fa:58:6e:47:ea:19:75:d2:b6:ab:c9:1b:26:31:
7e:33:9f:ba:a2:40:31:12:50:f7:8d:85:89:57:79:63:cb:cf:
11:52:17:fc:44:7d:47:c9:b9:d4:57:70:c0:48:72:ad:8a:1f:
a3:6f:9e:8f:78:0d:e3:cc:02:81:38:f7:dc:2b:f1:0c:2e:23:
aa:06:0a:2b:2b:de:17:00:ca:27:b7:a9:61:7f:8c:40:d8:94:
9a:1e:08:5f:01:cd:b1:f3:a2:7c:1d:0a:2b:9c:28:e3:f4:ae:
bb:24:b7:80:e2:20:66:41:92:8c:2e:ba:47:bd:a9:f3:07:10:
de:f8:9c:4b:ca:46:0a:d8:70:0d:2e:c1:97:7c:39:b4:90:11:
c0:32:45:ef:15:da:65:7e:cb:46:ed:d0:b1:2f:48:72:2e:ae:
e8:50:e5:1d:3d:21:a2:4f:51:c2:81:99:8a:0c:7f:9c:ac:01:
76:52:41:54:90:cd:ab:42:21:85:98:d9:76:b6:3e:13:3f:43:
2b:bf:0a:c5:13:3b:f3:2a:6a:5b:9a:bb:2b:7f:aa:37:31:9b:
13:e4:38:d6:47:c4:ad:f8:55:38:9f:16:c4:60:71:de:93:64:
45:c2:b4:6a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcsNbdrEeFHQk/9gHWp0+npWSD/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENEN0ZCNjJGQ0NCNzJFNEQ3NzJCNDlFQzJCQzI4MzQ2
MjREMUNDRTAeFw0yNTAzMjQxMjIyNDRaFw0yNjAzMjMxMjI3NDRaMDMxMTAvBgNV
BAMTKDJCQjE1OUY3MjAxM0NCMUY1OUUzOEM3RUE1RTEwOThDMjVFOTE3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs41xUxezmuAyBDLg1pKq0hnI
ttJvKduBODsEUJqxiw0rJJUupI5I5LAldAuEE6uq5ULhq8w7KyhYNNECsCVfGRvO
mVr2AZ1hZk/8F7GgxjQl1ANaYnRKTIRnnZtgjqE7GxrV2wp5UvpJGf1PKOHspkiw
uduhMKIhbeJAdgYs3a+r/UqRCPj4Y4SEurWlufVzIVN62Bd9sLUJtUtEPyz9M0V7
aVgW/HzwtCWsfYt9qKDn6PW5nF+Ik51Bt0DvNYL6eeKWDkFR7pixtWwFHlzQYr1K
AuJxwNtUmf2uFxHQluOKJF4KBZ+SBaj4icYH8S3GuNADdzyJbMGgm3HI4rfPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUK7FZ9yATyx9Z44x+peEJjCXpFxgwHwYDVR0j
BBgwFoAUDNf7YvzLcuTXcrSewrwoNGJNHM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxZWDJSZ1F1b3NOQlBxbXdUeHZIWnRmWWZ1UkZhNWlmZkNUYkhjSkVV
cEUvMC8wQ0Q3RkI2MkZDQ0I3MkU0RDc3MkI0OUVDMkJDMjgzNDYyNEQxQ0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRDdGQjYyRkNDQjcyRTRE
NzcyQjQ5RUMyQkMyODM0NjI0RDFDQ0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMWVgyUmdRdW9zTkJQcW13VHh2SFp0ZllmdVJGYTVpZmZDVGJIY0pFVXBFLzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF7DANBgkqhkiG9w0BAQsFAAOCAQEACSjA
sBXEGWL8cVTzPGAr5yI3BKlP6PpYbkfqGXXStqvJGyYxfjOfuqJAMRJQ942FiVd5
Y8vPEVIX/ER9R8m51FdwwEhyrYofo2+ej3gN48wCgTj33CvxDC4jqgYKKyveFwDK
J7epYX+MQNiUmh4IXwHNsfOifB0KK5wo4/SuuyS3gOIgZkGSjC66R72p8wcQ3vic
S8pGCthwDS7Bl3w5tJARwDJF7xXaZX7LRu3QsS9Ici6u6FDlHT0hok9RwoGZigx/
nKwBdlJBVJDNq0IhhZjZdrY+Ez9DK78KxRM78ypqW5q7K3+qNzGbE+Q41kfErfhV
OJ8WxGBx3pNkRcK0ag==
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:53:31 2025 by rpki-client