Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: eqcNctD7fDU4AypnJo4ScI5z1R/keFCs6JeExt0pF58=
Subject key identifier: B4:30:A8:79:42:A6:E8:C9:B6:CB:58:64:19:C5:41:CE:1F:C3:6F:D4
Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial: 518E6F61AC202E459E5957C79372151E5D37398C
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
Signing time: Mon 10 Feb 2025 17:25:10 +0000
ROA not before: Mon 10 Feb 2025 17:20:10 +0000
ROA not after: Mon 09 Feb 2026 17:25:10 +0000
asID: 265080
IP address blocks: 170.233.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8e:6f:61:ac:20:2e:45:9e:59:57:c7:93:72:15:1e:5d:37:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Validity
Not Before: Feb 10 17:20:10 2025 GMT
Not After : Feb 9 17:25:10 2026 GMT
Subject: CN=B430A87942A6E8C9B6CB586419C541CE1FC36FD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:6f:6d:ca:e6:da:2f:7e:3f:43:d9:38:7f:
f8:74:84:bf:c1:3f:74:fb:5f:8a:25:28:18:e2:c6:
3b:d5:e5:9f:fc:d4:3d:01:8c:69:16:64:a9:ef:32:
75:54:fb:a2:7a:0b:78:6d:82:25:97:a9:c4:db:97:
32:f4:69:ea:86:6c:df:d8:6c:44:d7:c9:ce:e6:1c:
86:5d:c4:53:b8:ad:0f:93:ba:27:eb:70:02:0b:2e:
1c:eb:36:38:e8:64:6c:6d:15:09:4f:ab:e0:72:41:
bc:f2:73:ad:73:1d:7c:68:c7:d5:e9:46:fe:2d:61:
d4:d0:ac:09:30:8b:ae:01:8f:14:ad:6c:1e:f3:2c:
e2:ae:23:5b:be:0f:12:90:93:6e:c1:6b:9d:e4:ce:
90:49:e5:68:f6:dc:9c:a2:7c:dc:d9:7e:72:a3:a6:
a7:f6:c3:b1:b9:ce:7c:66:a5:05:e3:94:c9:73:6c:
35:52:41:2a:fc:94:ba:12:26:7b:12:0e:29:56:02:
5c:9d:79:34:b0:32:04:7b:9c:de:c3:cd:fe:4b:e5:
e6:a9:83:5d:9c:93:d7:e4:37:3d:46:4b:84:09:06:
ed:fb:f9:97:66:30:34:d4:e6:c8:8d:db:69:f5:75:
c4:bc:3d:aa:c7:24:0e:ed:74:5d:74:ba:a9:03:a6:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:A8:79:42:A6:E8:C9:B6:CB:58:64:19:C5:41:CE:1F:C3:6F:D4
X509v3 Authority Key Identifier:
keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:93:3b:d0:bf:16:1a:51:e2:0b:48:95:60:da:a2:ee:ac:e4:
58:cf:e9:f6:b7:2b:d9:bd:bb:69:b8:8a:ce:ba:ec:1e:af:9c:
44:62:54:f2:0e:51:ba:f4:65:3c:80:8b:af:5b:87:fe:cb:1d:
09:a8:c3:84:2e:7c:aa:73:c7:0c:2a:86:7a:54:e4:9e:1b:2b:
15:40:57:e9:bf:d9:c2:c5:3b:f2:c1:83:99:a9:1a:3b:19:24:
d9:aa:a4:92:f6:80:32:5d:5a:5b:0e:a5:f6:55:5d:66:d4:73:
19:22:2a:d4:53:29:40:2b:12:1a:b1:c8:c6:35:5e:0c:65:32:
4e:9a:3a:31:96:cc:fb:f0:3c:40:4f:ed:0c:a9:34:91:a2:9c:
b3:2c:b4:20:8b:e1:0d:cc:60:df:96:ad:00:2c:b5:87:c8:37:
e1:4a:17:bd:8b:b9:c1:37:78:58:07:c4:85:02:b8:3b:50:00:
c0:30:f3:26:88:00:a0:46:60:67:ac:3e:4b:52:87:31:fb:34:
f4:19:fe:6b:70:46:24:7d:6d:0e:5b:7a:e6:82:f1:3c:63:02:
b2:4d:12:c6:30:79:bb:f9:07:d3:04:e8:e2:53:65:19:80:cd:
42:92:7e:26:54:30:f4:e9:7b:69:7d:72:d3:99:b3:df:f0:ca:
46:80:16:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUY5vYawgLkWeWVfHk3IVHl03OYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwNkNDNzRFQzkzNkFBOEVEN0YzODRBOUUxQjdDMEE5
NDVDMEEzODAeFw0yNTAyMTAxNzIwMTBaFw0yNjAyMDkxNzI1MTBaMDMxMTAvBgNV
BAMTKEI0MzBBODc5NDJBNkU4QzlCNkNCNTg2NDE5QzU0MUNFMUZDMzZGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaG9tyubaL34/Q9k4f/h0hL/B
P3T7X4olKBjixjvV5Z/81D0BjGkWZKnvMnVU+6J6C3htgiWXqcTblzL0aeqGbN/Y
bETXyc7mHIZdxFO4rQ+TuifrcAILLhzrNjjoZGxtFQlPq+ByQbzyc61zHXxox9Xp
Rv4tYdTQrAkwi64BjxStbB7zLOKuI1u+DxKQk27Ba53kzpBJ5Wj23JyifNzZfnKj
pqf2w7G5znxmpQXjlMlzbDVSQSr8lLoSJnsSDilWAlydeTSwMgR7nN7Dzf5L5eap
g12ck9fkNz1GS4QJBu37+ZdmMDTU5siN22n1dcS8ParHJA7tdF10uqkDpoADAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtDCoeUKm6Mm2y1hkGcVBzh/Db9QwHwYDVR0j
BBgwFoAU1gbMdOyTaqjtfzhKnht8CpRcCjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENjA2Q0M3NEVDOTM2QUE4RUQ3RjM4NEE5RTFCN0MwQTk0NUMwQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MDZDQzc0RUM5MzZBQThF
RDdGMzg0QTlFMUI3QzBBOTQ1QzBBMzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpezANBgkqhkiG9w0BAQsFAAOCAQEAjJM7
0L8WGlHiC0iVYNqi7qzkWM/p9rcr2b27abiKzrrsHq+cRGJU8g5RuvRlPICLr1uH
/ssdCajDhC58qnPHDCqGelTknhsrFUBX6b/ZwsU78sGDmakaOxkk2aqkkvaAMl1a
Ww6l9lVdZtRzGSIq1FMpQCsSGrHIxjVeDGUyTpo6MZbM+/A8QE/tDKk0kaKcsyy0
IIvhDcxg35atACy1h8g34UoXvYu5wTd4WAfEhQK4O1AAwDDzJogAoEZgZ6w+S1KH
Mfs09Bn+a3BGJH1tDlt65oLxPGMCsk0SxjB5u/kH0wTo4lNlGYDNQpJ+JlQw9Ol7
aX1y05mz3/DKRoAWLA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:06 2025 by rpki-client