Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
File: 3137302e302e3235302e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier: 3KSlJrCfbxnzMz+t6n69v7+Bv+RqWEfSq+P+vEuD0go=
Subject key identifier: F7:24:CC:8A:14:37:44:4E:0D:0D:4F:63:8D:67:3B:7F:B1:4D:62:D9
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 7D563BC18378527381163078EA3885DEA77982D5
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
Signing time: Thu 07 Mar 2024 17:16:25 +0000
ROA not before: Thu 07 Mar 2024 17:11:25 +0000
ROA not after: Thu 06 Mar 2025 17:16:25 +0000
asID: 262301
IP address blocks: 170.0.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:56:3b:c1:83:78:52:73:81:16:30:78:ea:38:85:de:a7:79:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 7 17:11:25 2024 GMT
Not After : Mar 6 17:16:25 2025 GMT
Subject: CN=F724CC8A1437444E0D0D4F638D673B7FB14D62D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:c2:a8:c8:6d:2b:f0:f5:73:0c:83:ca:dc:
5b:5f:07:04:28:24:e0:97:ba:72:b3:bc:ea:67:b0:
1a:e8:aa:3e:e5:24:17:65:4a:ff:66:09:b2:ed:19:
59:2a:b7:b1:9b:7b:85:b5:49:69:89:9b:c4:e9:12:
1a:13:75:22:ac:27:44:f8:75:93:be:27:6f:79:bd:
12:a2:0c:11:3d:6a:39:7c:de:da:4f:15:21:39:57:
83:c1:09:53:a6:ee:ad:27:59:44:37:fc:50:c9:f0:
6f:36:53:e1:17:19:c7:43:4f:d7:62:31:e8:ee:40:
0a:a7:56:73:1e:83:71:95:ba:c2:10:e2:01:d2:d7:
1b:8c:1b:4e:ee:94:1b:53:50:a1:9c:2e:e2:23:73:
a7:64:0a:84:e1:06:41:e8:f5:9a:3b:34:58:5a:d0:
64:32:d6:5b:63:b7:57:7c:91:14:de:5b:fa:77:ed:
b6:58:2d:9a:84:60:22:d3:99:f4:e0:bc:29:4e:d3:
4a:7c:26:da:2e:e9:3c:7f:2c:7c:ff:97:9d:a2:4a:
31:27:31:24:7d:42:75:e0:03:48:a6:f0:f2:53:b3:
eb:9e:0a:e3:3b:ba:c9:b8:68:61:5e:66:9a:2e:9a:
2e:5e:5c:30:04:f2:1e:ac:f9:f0:92:3c:5d:ad:18:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:CC:8A:14:37:44:4E:0D:0D:4F:63:8D:67:3B:7F:B1:4D:62:D9
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.250.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:9d:c7:a6:d7:e1:02:9a:ee:ea:8b:96:bf:aa:67:4a:94:4e:
3e:71:72:94:5c:57:dc:c2:fc:a9:d1:ba:3d:7a:84:46:7b:75:
59:2f:e2:55:03:2d:63:c6:29:99:d5:74:d0:28:18:1d:98:f0:
d1:72:97:91:de:0d:e6:64:22:d3:d8:f3:ea:c6:e1:c9:34:42:
b4:1a:e3:af:5a:f3:7e:0f:e8:1c:f3:19:6f:80:e0:e0:ad:6d:
64:ee:28:35:d7:da:57:ba:a2:f1:d9:0e:b6:10:d4:40:09:ac:
c8:9f:6c:23:91:f4:32:34:e1:ab:1e:61:64:8b:9b:0c:d6:40:
ca:0d:fb:c1:a3:3c:ee:89:03:3d:38:c3:77:ac:0f:2f:dd:d5:
89:2a:09:2c:49:9f:46:21:03:96:fe:21:cb:64:7f:9a:0b:91:
cd:4a:cf:43:df:06:12:2e:a4:15:f0:bf:b9:61:00:85:3f:fe:
30:89:f6:5a:4d:02:4f:67:8f:a9:ff:49:09:0b:a5:74:99:6b:
0d:2b:51:65:d1:04:be:0d:33:24:ed:f0:2b:01:f9:3e:87:99:
5b:ae:77:6d:63:8f:d2:11:7d:09:f5:98:ae:3e:56:8f:98:1e:
02:79:95:8f:a1:04:a8:70:89:1e:d6:75:bb:c7:4a:bf:41:46:
65:f3:86:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfVY7wYN4UnOBFjB46jiF3qd5gtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEMEM1MEM2MjEyOEZGNEQyRjlGRjg1QjZBNTc4NEJG
NDMwMTIzRjAeFw0yNDAzMDcxNzExMjVaFw0yNTAzMDYxNzE2MjVaMDMxMTAvBgNV
BAMTKEY3MjRDQzhBMTQzNzQ0NEUwRDBENEY2MzhENjczQjdGQjE0RDYyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wMKoyG0r8PVzDIPK3FtfBwQo
JOCXunKzvOpnsBroqj7lJBdlSv9mCbLtGVkqt7Gbe4W1SWmJm8TpEhoTdSKsJ0T4
dZO+J295vRKiDBE9ajl83tpPFSE5V4PBCVOm7q0nWUQ3/FDJ8G82U+EXGcdDT9di
MejuQAqnVnMeg3GVusIQ4gHS1xuMG07ulBtTUKGcLuIjc6dkCoThBkHo9Zo7NFha
0GQy1ltjt1d8kRTeW/p37bZYLZqEYCLTmfTgvClO00p8Jtou6Tx/LHz/l52iSjEn
MSR9QnXgA0im8PJTs+ueCuM7usm4aGFeZpoumi5eXDAE8h6s+fCSPF2tGNV3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9yTMihQ3RE4NDU9jjWc7f7FNYtkwHwYDVR0j
BBgwFoAUINDFDGISj/TS+f+FtqV4S/QwEj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC8yMEQwQzUwQzYyMTI4RkY0RDJGOUZGODVCNkE1Nzg0QkY0MzAxMjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwRDBDNTBDNjIxMjhGRjRE
MkY5RkY4NUI2QTU3ODRCRjQzMDEyM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzEzNzMwMmUzMDJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMy
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqgD6MA0GCSqGSIb3DQEBCwUAA4IBAQCfncem1+EC
mu7qi5a/qmdKlE4+cXKUXFfcwvyp0bo9eoRGe3VZL+JVAy1jximZ1XTQKBgdmPDR
cpeR3g3mZCLT2PPqxuHJNEK0GuOvWvN+D+gc8xlvgODgrW1k7ig119pXuqLx2Q62
ENRACazIn2wjkfQyNOGrHmFki5sM1kDKDfvBozzuiQM9OMN3rA8v3dWJKgksSZ9G
IQOW/iHLZH+aC5HNSs9D3wYSLqQV8L+5YQCFP/4wifZaTQJPZ4+p/0kJC6V0mWsN
K1Fl0QS+DTMk7fArAfk+h5lbrndtY4/SEX0J9ZiuPlaPmB4CeZWPoQSocIke1nW7
x0q/QUZl84bp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org