Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa
File: 3136382e302e36342e302f32322d3234203d3e203532383634.roa (raw, json)
Hash identifier: rHQW9ta3ytJwdQ8GjKvAeslbkJ+dKjZAV5lSlsio2X4=
Subject key identifier: 68:0E:F2:58:53:9B:E0:46:83:E3:42:23:BB:AF:F1:1D:A6:B5:13:69
Certificate issuer: /CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
Certificate serial: 7F1DD76CF479AC877831E232203AA419AE19C107
Authority key identifier: 9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa
Signing time: Wed 29 Jan 2025 18:54:28 +0000
ROA not before: Wed 29 Jan 2025 18:49:28 +0000
ROA not after: Wed 28 Jan 2026 18:54:28 +0000
asID: 52864
IP address blocks: 168.0.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1d:d7:6c:f4:79:ac:87:78:31:e2:32:20:3a:a4:19:ae:19:c1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
Validity
Not Before: Jan 29 18:49:28 2025 GMT
Not After : Jan 28 18:54:28 2026 GMT
Subject: CN=680EF258539BE04683E34223BBAFF11DA6B51369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:e3:7c:49:38:61:3b:72:da:5f:7d:17:a3:
cd:63:90:60:b1:7a:96:d1:60:c3:3d:ac:f2:c1:88:
f5:ac:5e:1d:2d:32:af:82:07:2d:92:f4:f1:a3:05:
7b:8b:f5:5e:6c:f5:6d:7a:46:bb:eb:86:b4:4f:48:
48:dd:3f:6c:9e:7e:49:9a:e8:a7:38:5a:06:de:72:
9c:35:9e:c2:9a:57:41:b6:08:ac:43:a8:69:c5:91:
27:8e:25:02:91:a9:af:33:2e:3e:c0:a0:c3:61:a7:
4b:f3:59:15:d8:ef:58:84:c9:ba:fd:c3:b6:e0:57:
42:52:a6:06:bc:23:f8:24:e1:47:83:b6:70:0a:cd:
b9:6a:35:db:b0:a6:b1:c9:47:cb:35:cf:fc:a4:d1:
3c:80:fe:52:ff:33:09:16:25:32:90:f6:65:f4:e5:
09:10:2b:6d:37:86:f9:72:c9:9b:12:ba:2f:97:82:
30:8f:19:00:d1:db:4f:15:d4:bd:df:36:56:b2:b7:
0c:a8:a3:ee:0b:f5:15:be:47:8f:f9:1a:e6:51:c4:
4f:f6:a7:e0:8b:a7:3c:d4:41:4e:b4:21:65:63:7d:
a7:d3:4a:04:d5:08:73:52:0c:59:7b:e3:7c:83:a6:
33:85:c2:3c:d1:ba:26:45:c0:a0:6c:c4:64:4d:43:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:F2:58:53:9B:E0:46:83:E3:42:23:BB:AF:F1:1D:A6:B5:13:69
X509v3 Authority Key Identifier:
keyid:9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.64.0/22
Signature Algorithm: sha256WithRSAEncryption
14:3d:c0:34:4d:75:25:05:ba:71:93:96:97:f6:80:fb:75:a0:
c1:01:7c:d2:b0:fd:c8:32:d0:89:6b:60:63:bb:9d:91:12:25:
2d:39:61:c7:24:fd:eb:7a:0d:03:5c:d7:1f:90:ab:8e:8f:9e:
39:5a:24:f2:a4:a6:90:38:0d:f3:2e:e7:25:29:c1:b8:17:95:
f5:1e:de:79:f6:fb:c1:b8:2b:a0:10:35:d6:8a:19:ba:ef:29:
bf:d9:eb:9b:7a:c3:48:df:c7:c6:1d:1d:44:e8:c8:e4:3c:ad:
67:bf:68:46:64:ae:bd:9f:7b:26:2a:c3:54:c4:17:35:03:6e:
7e:8c:d0:72:52:9e:92:d3:7e:0d:8c:65:df:c6:d3:b2:ae:54:
9e:ea:03:42:91:34:1d:9c:42:ac:e1:8d:b9:d7:7b:e0:7e:b8:
d2:33:6e:10:4d:6d:6f:35:1e:05:86:dc:ca:15:f1:9e:52:7c:
ea:43:38:6a:2e:33:f7:d7:34:62:e3:26:97:67:81:07:a5:21:
1f:3d:ce:3b:23:b3:44:db:73:1a:29:99:2f:49:6a:8a:27:d3:
32:8c:5e:49:f3:8d:00:69:d3:bf:36:63:dd:76:53:47:44:ca:
73:80:57:ff:46:5a:49:2c:f2:8d:19:4c:ce:6d:20:66:62:a5:
44:be:94:bd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfx3XbPR5rId4MeIyIDqkGa4ZwQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUExM0Q0QzAyRDlCNDM5QzhBRDcwOTY5NjVDMzcyMEUz
RjFCOUE1QzAeFw0yNTAxMjkxODQ5MjhaFw0yNjAxMjgxODU0MjhaMDMxMTAvBgNV
BAMTKDY4MEVGMjU4NTM5QkUwNDY4M0UzNDIyM0JCQUZGMTFEQTZCNTEzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3uN8SThhO3LaX30Xo81jkGCx
epbRYMM9rPLBiPWsXh0tMq+CBy2S9PGjBXuL9V5s9W16RrvrhrRPSEjdP2yefkma
6Kc4Wgbecpw1nsKaV0G2CKxDqGnFkSeOJQKRqa8zLj7AoMNhp0vzWRXY71iEybr9
w7bgV0JSpga8I/gk4UeDtnAKzblqNduwprHJR8s1z/yk0TyA/lL/MwkWJTKQ9mX0
5QkQK203hvlyyZsSui+XgjCPGQDR208V1L3fNlaytwyoo+4L9RW+R4/5GuZRxE/2
p+CLpzzUQU60IWVjfafTSgTVCHNSDFl743yDpjOFwjzRuiZFwKBsxGRNQyRHAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUaA7yWFOb4EaD40Iju6/xHaa1E2kwHwYDVR0j
BBgwFoAUmhPUwC2bQ5yK1wlpZcNyDj8bmlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjVRTEtub21OV25kYWJhd25YWmJIU2RBMkNCbTVjM3VSOXltdkNzaThQ
bVgvMC85QTEzRDRDMDJEOUI0MzlDOEFENzA5Njk2NUMzNzIwRTNGMUI5QTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMTNENEMwMkQ5QjQzOUM4
QUQ3MDk2OTY1QzM3MjBFM0YxQjlBNUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1UUxLbm9tTlduZGFiYXduWFpiSFNkQTJDQm01YzN1Ujl5bXZDc2k4UG1YLzAv
MzEzNjM4MmUzMDJlMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzODM2
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKoAEAwDQYJKoZIhvcNAQELBQADggEBABQ9wDRNdSUFunGT
lpf2gPt1oMEBfNKw/cgy0IlrYGO7nZESJS05Ycck/et6DQNc1x+Qq46PnjlaJPKk
ppA4DfMu5yUpwbgXlfUe3nn2+8G4K6AQNdaKGbrvKb/Z65t6w0jfx8YdHUToyOQ8
rWe/aEZkrr2feyYqw1TEFzUDbn6M0HJSnpLTfg2MZd/G07KuVJ7qA0KRNB2cQqzh
jbnXe+B+uNIzbhBNbW81HgWG3MoV8Z5SfOpDOGouM/fXNGLjJpdngQelIR89zjsj
s0TbcxopmS9Jaoon0zKMXknzjQBp0782Y912U0dEynOAV/9GWkks8o0ZTM5tIGZi
pUS+lL0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:19 2025 by rpki-client