Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31302e302f32342d3234203d3e20323633323536.roa
File: 3139382e35382e31302e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier: jWl+fmnuurP3kbGpp5BAA8XSZpgn+QhbYrURRGoN6uo=
Subject key identifier: CB:17:DD:DB:AA:6A:91:4B:37:9F:4D:F2:25:71:16:A2:4B:A7:9A:B9
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 0150D62127D8224E193573F271827A01843B9505
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31302e302f32342d3234203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:54 +0000
ROA not before: Fri 10 Jan 2025 16:36:54 +0000
ROA not after: Fri 09 Jan 2026 16:41:54 +0000
asID: 263256
IP address blocks: 198.58.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:50:d6:21:27:d8:22:4e:19:35:73:f2:71:82:7a:01:84:3b:95:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:54 2025 GMT
Not After : Jan 9 16:41:54 2026 GMT
Subject: CN=CB17DDDBAA6A914B379F4DF2257116A24BA79AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:05:77:e4:88:26:8b:d7:d3:6f:8a:9b:4d:
ef:58:70:45:11:f4:5a:e6:65:d5:88:d8:42:9c:3c:
85:70:79:df:1a:29:46:8f:92:e6:b6:e6:6f:8c:27:
8c:d9:f8:db:3e:d6:1d:fa:5e:dd:1f:63:4c:c7:d4:
75:3d:bf:b0:47:e3:a8:54:8b:de:15:0d:86:e3:58:
d1:41:a2:91:2b:a7:e7:dc:93:5a:e7:4b:8a:ed:3d:
ee:54:bc:79:8e:4e:46:2e:49:e2:58:e3:6c:fc:0d:
26:3d:d5:07:c4:5a:7e:15:de:2c:ec:71:51:48:3a:
32:37:c0:81:08:0a:b7:0b:4a:02:7a:e6:d3:9c:53:
8c:88:da:c3:b2:e3:ac:87:6b:12:64:72:cc:cf:46:
60:61:d8:5d:5f:40:4d:ef:7b:20:a5:9a:99:40:49:
e5:89:14:28:7b:46:50:87:6e:fc:62:83:7a:b5:3e:
6b:62:1d:3d:8a:1b:16:a7:92:9e:04:d8:42:a7:c7:
3e:4f:d9:1b:44:47:e7:33:91:65:b5:df:21:f7:45:
e8:c5:d4:9d:11:49:d4:e4:d8:c5:e5:1a:f3:d6:76:
f6:18:00:5a:10:79:97:e8:ff:2e:7e:0f:4c:34:37:
26:58:73:35:34:7c:2b:24:3e:48:8c:99:ee:89:2e:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:DD:DB:AA:6A:91:4B:37:9F:4D:F2:25:71:16:A2:4B:A7:9A:B9
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31302e302f32342d3234203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9a:af:45:1f:87:ad:9c:56:27:7e:64:b8:ec:26:99:02:4f:
6e:be:56:d8:e7:e9:90:fb:ae:ec:15:8b:3c:35:16:d5:ea:f0:
d5:8c:52:8b:7c:96:53:b3:97:02:bf:4f:fe:ee:5a:20:c7:b3:
2f:99:bc:69:51:f2:39:4e:0b:33:b2:f2:32:6c:0e:61:9b:51:
69:fb:92:fd:cd:d3:e2:68:59:ee:d2:75:16:b1:54:b6:04:90:
aa:86:60:78:e3:c2:2c:8f:c8:f4:5d:d8:54:cc:f7:9b:87:3b:
5a:ab:0f:57:aa:8a:ea:d7:00:f9:b1:b3:9b:bc:7a:e6:62:34:
eb:1b:a3:6a:c9:30:f7:a8:47:da:1d:2e:84:72:7e:59:03:0a:
8b:49:01:73:75:92:da:40:a1:ae:93:97:77:b4:97:c7:d4:6f:
d7:a8:d9:de:a7:10:be:e3:b7:4a:07:0a:af:80:95:0a:af:84:
f9:37:32:95:21:18:fc:d2:3a:b5:38:36:fc:72:fd:33:df:b1:
78:32:64:fe:62:ed:8a:07:99:9b:b7:c9:53:b9:fb:a9:a9:24:
04:de:05:e4:85:22:66:21:d9:73:ae:4c:b5:fd:4a:8e:5e:8e:
d3:1c:88:1e:e2:d0:1f:cd:a5:b0:c2:f1:85:02:be:91:05:6f:
43:69:db:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAVDWISfYIk4ZNXPycYJ6AYQ7lQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG
OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTRaFw0yNjAxMDkxNjQxNTRaMDMxMTAvBgNV
BAMTKENCMTdERERCQUE2QTkxNEIzNzlGNERGMjI1NzExNkEyNEJBNzlBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VgV35Igmi9fTb4qbTe9YcEUR
9FrmZdWI2EKcPIVwed8aKUaPkua25m+MJ4zZ+Ns+1h36Xt0fY0zH1HU9v7BH46hU
i94VDYbjWNFBopErp+fck1rnS4rtPe5UvHmOTkYuSeJY42z8DSY91QfEWn4V3izs
cVFIOjI3wIEICrcLSgJ65tOcU4yI2sOy46yHaxJkcszPRmBh2F1fQE3veyClmplA
SeWJFCh7RlCHbvxig3q1PmtiHT2KGxankp4E2EKnxz5P2RtER+czkWW13yH3RejF
1J0RSdTk2MXlGvPWdvYYAFoQeZfo/y5+D0w0NyZYczU0fCskPkiMme6JLj2FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyxfd26pqkUs3n03yJXEWokunmrkwHwYDVR0j
BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1
QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzOTM4MmUzNTM4MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxjoKMA0GCSqGSIb3DQEBCwUAA4IBAQCtmq9FH4et
nFYnfmS47CaZAk9uvlbY5+mQ+67sFYs8NRbV6vDVjFKLfJZTs5cCv0/+7logx7Mv
mbxpUfI5TgszsvIybA5hm1Fp+5L9zdPiaFnu0nUWsVS2BJCqhmB448Isj8j0XdhU
zPebhztaqw9Xqorq1wD5sbObvHrmYjTrG6NqyTD3qEfaHS6Ecn5ZAwqLSQFzdZLa
QKGuk5d3tJfH1G/XqNnepxC+47dKBwqvgJUKr4T5NzKVIRj80jq1ODb8cv0z37F4
MmT+Yu2KB5mbt8lTufupqSQE3gXkhSJmIdlzrky1/UqOXo7THIge4tAfzaWwwvGF
Ar6RBW9Dadur
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:48:03 2025 by rpki-client