Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa
File: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (raw, json)
Hash identifier: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=
Subject key identifier: 3C:5D:99:8C:84:AC:1D:58:17:D1:4B:45:75:37:F3:C0:A4:EE:02:2B
Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial: 735280179A9A7A8E5E025FDB325EB66EE0153375
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa
Signing time: Thu 06 Mar 2025 13:33:18 +0000
ROA not before: Thu 06 Mar 2025 13:28:18 +0000
ROA not after: Thu 05 Mar 2026 13:33:18 +0000
asID: 263496
IP address blocks: 191.243.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:52:80:17:9a:9a:7a:8e:5e:02:5f:db:32:5e:b6:6e:e0:15:33:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Validity
Not Before: Mar 6 13:28:18 2025 GMT
Not After : Mar 5 13:33:18 2026 GMT
Subject: CN=3C5D998C84AC1D5817D14B457537F3C0A4EE022B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:6a:bb:04:4c:c2:66:36:97:34:ed:ef:f0:
f2:13:0d:e3:6c:8e:c9:b6:5f:d8:61:91:cb:41:01:
93:01:a1:b1:1b:e6:06:08:3e:53:a3:fa:b1:48:82:
d8:41:05:50:a7:4a:5f:07:30:9c:5a:c9:8e:c6:d9:
37:97:ec:a4:79:9d:df:51:a0:64:a5:a6:39:3b:d0:
e5:37:45:c6:0e:84:84:f3:a8:66:ca:65:cb:ca:b7:
87:20:db:d8:43:48:fc:8c:47:70:1a:6b:a9:d1:bf:
61:39:6c:44:d2:d0:9e:fa:78:77:5c:6e:33:d8:2a:
68:fe:74:d8:d2:0f:1b:a2:3d:9d:52:6d:55:42:50:
85:ff:33:79:b4:53:18:66:ef:d4:5d:3e:c6:5d:0d:
4c:dc:d0:4b:46:e7:3f:21:9e:96:2c:ee:59:77:7c:
4e:6a:ef:23:45:85:1e:95:f6:54:a6:be:0f:54:06:
49:c6:e8:a3:08:7f:79:ee:28:69:bd:84:e3:1b:4d:
00:6a:0c:4a:06:8a:1e:91:6b:4f:75:85:f4:b8:14:
e7:21:20:d1:e4:c7:20:a7:58:98:44:9b:92:b8:6d:
57:e6:2b:f1:50:93:b8:c3:f1:e0:a9:9c:da:21:78:
9a:ff:8c:11:c0:16:a5:04:a9:2c:f2:07:dc:da:5d:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:99:8C:84:AC:1D:58:17:D1:4B:45:75:37:F3:C0:A4:EE:02:2B
X509v3 Authority Key Identifier:
keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.56.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:55:05:e7:5a:1e:12:85:28:a1:d5:17:c4:83:6f:fe:f7:71:
11:af:fa:47:a8:ff:8e:52:6e:d8:c2:64:17:ac:eb:1c:f5:2a:
b0:83:60:b7:07:aa:80:d4:a4:de:c4:8e:b9:5a:58:52:c6:0d:
f6:9f:a2:1d:1b:fd:83:be:5e:26:87:6a:e0:39:25:88:3a:0d:
dd:83:d3:71:11:1d:5f:a3:89:5f:69:0f:4f:8a:08:d8:cb:dd:
c0:96:66:3b:54:cc:78:a1:67:42:2e:67:a3:06:47:5b:b4:e4:
be:49:8e:ba:2d:f3:55:d3:66:10:e0:27:fd:65:1f:0d:52:31:
53:87:89:c9:16:84:93:0a:8d:3b:ac:b5:df:19:61:97:f1:d8:
e1:85:95:30:02:2d:3c:24:5f:b5:03:00:c0:df:71:c7:05:36:
62:bb:23:25:26:96:ba:bd:5d:d1:8a:36:4e:ac:ee:5e:4f:8e:
12:07:36:53:2a:53:57:a1:74:e4:f8:78:a0:81:cb:0f:b3:1c:
cc:ba:29:58:81:a2:ae:2b:82:81:8b:1e:58:03:76:70:cb:c9:
ef:6b:2c:c5:43:17:9b:fd:15:8a:3a:ef:63:fd:e8:dd:60:88:
1c:61:ac:c2:69:2f:01:be:12:2e:b6:cf:4f:92:f6:76:15:d8:
98:9c:30:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc1KAF5qaeo5eAl/bMl62buAVM3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE
NkUzODcyOTAeFw0yNTAzMDYxMzI4MThaFw0yNjAzMDUxMzMzMThaMDMxMTAvBgNV
BAMTKDNDNUQ5OThDODRBQzFENTgxN0QxNEI0NTc1MzdGM0MwQTRFRTAyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUb2q7BEzCZjaXNO3v8PITDeNs
jsm2X9hhkctBAZMBobEb5gYIPlOj+rFIgthBBVCnSl8HMJxayY7G2TeX7KR5nd9R
oGSlpjk70OU3RcYOhITzqGbKZcvKt4cg29hDSPyMR3Aaa6nRv2E5bETS0J76eHdc
bjPYKmj+dNjSDxuiPZ1SbVVCUIX/M3m0Uxhm79RdPsZdDUzc0EtG5z8hnpYs7ll3
fE5q7yNFhR6V9lSmvg9UBknG6KMIf3nuKGm9hOMbTQBqDEoGih6Ra091hfS4FOch
INHkxyCnWJhEm5K4bVfmK/FQk7jD8eCpnNoheJr/jBHAFqUEqSzyB9zaXXNHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPF2ZjISsHVgX0UtFdTfzwKTuAiswHwYDVR0j
BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4
ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF
RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwZWNiZXFDSlA1UlFhaGhaa3o2TVlGaGs1UUJDSEFMV0pDS0xMOTdWOHpFLzEv
MzEzOTMxMmUzMjM0MzMyZTM1MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8zgwDQYJKoZIhvcNAQELBQADggEBAF1VBeda
HhKFKKHVF8SDb/73cRGv+keo/45SbtjCZBes6xz1KrCDYLcHqoDUpN7EjrlaWFLG
Dfafoh0b/YO+XiaHauA5JYg6Dd2D03ERHV+jiV9pD0+KCNjL3cCWZjtUzHihZ0Iu
Z6MGR1u05L5Jjrot81XTZhDgJ/1lHw1SMVOHickWhJMKjTustd8ZYZfx2OGFlTAC
LTwkX7UDAMDfcccFNmK7IyUmlrq9XdGKNk6s7l5PjhIHNlMqU1ehdOT4eKCByw+z
HMy6KViBoq4rgoGLHlgDdnDLye9rLMVDF5v9FYo672P96N1giBxhrMJpLwG+Ei62
z0+S9nYV2JicMNc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:13:58 2025 by rpki-client