Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
File: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier: tn7RLZxDY4+tby4hFB+zJ9K1hsTCWY7+LWvTWawl+M8=
Subject key identifier: 7E:5E:55:D1:50:10:1F:BA:61:19:2C:12:12:AD:3A:71:85:33:EB:56
Certificate issuer: /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial: 6831C3A1F47141F8B2891C40E3B35DDC98043A62
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
Signing time: Wed 30 Apr 2025 17:17:52 +0000
ROA not before: Wed 30 Apr 2025 17:12:52 +0000
ROA not after: Wed 29 Apr 2026 17:17:52 +0000
asID: 265080
IP address blocks: 170.233.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:31:c3:a1:f4:71:41:f8:b2:89:1c:40:e3:b3:5d:dc:98:04:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Validity
Not Before: Apr 30 17:12:52 2025 GMT
Not After : Apr 29 17:17:52 2026 GMT
Subject: CN=7E5E55D150101FBA61192C1212AD3A718533EB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:21:7a:91:b3:ec:5b:82:da:e4:93:96:18:
bb:88:d4:cc:96:20:c7:7f:16:40:c2:81:5e:d7:6b:
4d:0e:f6:83:60:aa:08:0a:ca:98:ab:cc:51:b9:b8:
16:a0:fc:98:21:a9:77:4b:f7:5a:0b:06:6e:68:cb:
6a:59:5f:9b:63:c7:d5:58:95:be:6e:ea:88:ae:db:
4c:bc:3b:b1:66:21:89:24:06:ee:47:a4:14:e6:92:
08:a9:d7:0c:a2:19:81:1b:05:56:41:43:9c:85:b3:
5c:14:89:12:a9:6e:39:0b:94:8c:82:c8:3a:70:61:
10:83:60:57:d4:91:0a:68:8e:21:6a:f5:e0:8e:d9:
0c:7a:69:49:8a:13:07:13:e8:96:00:1b:78:bb:2e:
02:4b:3a:20:c3:7e:ce:66:39:cc:42:de:7a:96:5e:
ab:3e:08:b5:4d:71:33:84:bf:13:04:3d:7d:b2:63:
73:15:bf:5e:70:be:57:af:1f:02:cc:99:b5:5d:0d:
a2:37:1d:bd:c3:3d:ff:44:15:36:d0:80:93:82:de:
3d:51:f8:cf:47:27:c3:67:4c:ea:82:54:5e:86:a1:
39:d5:8d:8e:ae:2a:21:f7:bd:8c:03:17:b1:b0:57:
d5:e3:96:ab:98:59:c5:af:2f:83:2a:86:c3:5c:91:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:55:D1:50:10:1F:BA:61:19:2C:12:12:AD:3A:71:85:33:EB:56
X509v3 Authority Key Identifier:
keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
61:28:d3:ad:5f:5b:32:bf:2f:9f:69:63:35:a6:71:37:ad:b6:
c2:b6:7a:63:52:fd:72:20:e7:e5:74:e6:97:13:58:a3:12:23:
02:ee:ee:e6:00:86:a5:40:23:ab:26:77:46:11:47:c5:ba:96:
5c:60:1a:17:15:a5:20:0d:ef:60:eb:9d:2c:b1:02:8f:4f:51:
7a:04:63:b8:d3:97:2f:b9:d1:0d:bc:fb:1f:cb:38:b9:1c:87:
9f:e5:08:d2:55:ad:cb:e4:77:b5:59:e5:c9:11:46:af:9d:e3:
44:48:1d:f5:e1:fd:c9:cb:65:ae:44:01:6c:7b:7a:b8:66:e4:
a0:73:a6:07:d4:92:b4:0a:e2:ff:6b:17:aa:e7:72:40:8c:f8:
8a:78:5b:38:47:b5:a8:f2:95:22:d2:8c:cd:60:36:a6:70:49:
15:39:90:f7:50:73:0d:85:5a:8b:15:d4:b7:4a:6d:20:06:c4:
9e:30:2f:66:8b:d2:a0:b6:61:cc:9b:2e:78:97:d8:4e:c6:2f:
37:24:69:51:d2:c3:4e:68:6e:f5:09:21:60:ed:a1:0a:54:f1:
1f:31:9e:f2:bb:59:2f:9b:6a:f3:82:da:51:62:dc:ec:2a:4f:
4a:d0:1a:a6:ae:77:76:b3:a7:14:68:25:c4:d1:93:49:97:53:
14:29:be:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaDHDofRxQfiyiRxA47Nd3JgEOmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0MUI5RTFDMEQ2QUMxN0JGMTE1QkIxQjdBODdCMjlC
RUREQjBERjAeFw0yNTA0MzAxNzEyNTJaFw0yNjA0MjkxNzE3NTJaMDMxMTAvBgNV
BAMTKDdFNUU1NUQxNTAxMDFGQkE2MTE5MkMxMjEyQUQzQTcxODUzM0VCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPiF6kbPsW4La5JOWGLuI1MyW
IMd/FkDCgV7Xa00O9oNgqggKypirzFG5uBag/JghqXdL91oLBm5oy2pZX5tjx9VY
lb5u6oiu20y8O7FmIYkkBu5HpBTmkgip1wyiGYEbBVZBQ5yFs1wUiRKpbjkLlIyC
yDpwYRCDYFfUkQpojiFq9eCO2Qx6aUmKEwcT6JYAG3i7LgJLOiDDfs5mOcxC3nqW
Xqs+CLVNcTOEvxMEPX2yY3MVv15wvlevHwLMmbVdDaI3Hb3DPf9EFTbQgJOC3j1R
+M9HJ8NnTOqCVF6GoTnVjY6uKiH3vYwDF7GwV9XjlquYWcWvL4MqhsNckR3DAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfl5V0VAQH7phGSwSEq06cYUz61YwHwYDVR0j
BBgwFoAU1UG54cDWrBe/EVuxt6h7Kb7dsN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENTQxQjlFMUMwRDZBQzE3QkYxMTVCQjFCN0E4N0IyOUJFRERCMERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NDFCOUUxQzBENkFDMTdC
RjExNUJCMUI3QTg3QjI5QkVEREIwREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpeDANBgkqhkiG9w0BAQsFAAOCAQEAYSjT
rV9bMr8vn2ljNaZxN622wrZ6Y1L9ciDn5XTmlxNYoxIjAu7u5gCGpUAjqyZ3RhFH
xbqWXGAaFxWlIA3vYOudLLECj09RegRjuNOXL7nRDbz7H8s4uRyHn+UI0lWty+R3
tVnlyRFGr53jREgd9eH9yctlrkQBbHt6uGbkoHOmB9SStAri/2sXqudyQIz4inhb
OEe1qPKVItKMzWA2pnBJFTmQ91BzDYVaixXUt0ptIAbEnjAvZovSoLZhzJsueJfY
TsYvNyRpUdLDTmhu9QkhYO2hClTxHzGe8rtZL5tq84LaUWLc7CpPStAapq53drOn
FGglxNGTSZdTFCm+OA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:09:43 2025 by rpki-client