Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: oDCxXQn81mikDL1cX62ivShqm2NIAaabT19rhT+KMI0=
Subject key identifier: D1:4D:51:03:00:79:20:37:B6:8F:35:C3:5A:09:83:06:45:1B:0C:F2
Certificate issuer: /CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
Certificate serial: 175AC1F6F9315C4A646F651C1F067ECF6873A051
Authority key identifier: 65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
Signing time: Thu 04 Apr 2024 08:10:46 +0000
ROA not before: Thu 04 Apr 2024 08:05:46 +0000
ROA not after: Thu 03 Apr 2025 08:10:46 +0000
asID: 265080
IP address blocks: 170.233.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:5a:c1:f6:f9:31:5c:4a:64:6f:65:1c:1f:06:7e:cf:68:73:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
Validity
Not Before: Apr 4 08:05:46 2024 GMT
Not After : Apr 3 08:10:46 2025 GMT
Subject: CN=D14D510300792037B68F35C35A098306451B0CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:8e:1f:9a:53:db:16:85:07:d5:ec:9e:09:
bb:33:0d:de:36:18:1f:0c:c6:28:1f:d6:11:e3:f0:
f6:f7:1f:17:f8:ac:d6:70:94:f5:fb:2e:81:d8:99:
f8:39:82:b5:f4:b4:49:63:51:df:53:75:22:1a:5d:
0c:99:51:55:8e:a4:6b:c1:cf:f9:d6:bc:93:bb:9a:
99:a7:5d:6f:af:e6:59:05:91:2c:c4:0c:b5:00:00:
75:fd:93:c0:ab:1d:ce:3f:7b:a4:3b:e0:2f:ef:09:
9c:79:7e:93:33:35:4a:33:ba:b9:98:d9:5b:62:fc:
0c:73:0c:b8:06:ca:2f:e3:ee:7f:5c:44:0e:b4:ad:
af:ad:3a:59:5f:36:aa:fd:a8:f6:3a:10:8e:c1:62:
4f:a4:ee:7a:26:23:bd:12:08:83:61:6c:13:11:50:
87:bf:ac:30:a2:be:93:aa:c2:3f:17:3d:99:70:2a:
d0:27:e3:dc:ca:c3:01:b7:9d:49:fd:4e:5b:2b:3a:
44:89:42:87:93:88:b9:7c:c8:3d:81:cc:96:58:89:
f3:d0:0a:95:a5:8a:07:89:5f:01:ba:c3:d5:28:c5:
e1:24:9c:50:7e:15:c4:5f:da:30:3d:9c:98:f5:4f:
c1:37:14:78:4e:d0:aa:1f:2e:1e:dc:80:95:d9:7f:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:51:03:00:79:20:37:B6:8F:35:C3:5A:09:83:06:45:1B:0C:F2
X509v3 Authority Key Identifier:
keyid:65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.121.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3a:e2:d9:09:04:31:cd:b1:a9:fc:f1:86:08:73:cb:5b:e9:
83:24:b2:b8:5f:33:60:a6:08:99:b6:0b:e5:43:65:f3:78:73:
87:40:ef:52:0b:83:b4:7d:ed:93:39:93:f9:66:cc:1c:f0:7f:
84:cc:2d:96:48:af:08:e0:86:30:a4:80:1b:93:a0:c4:cb:0c:
91:cb:c0:e0:35:e3:90:0e:f0:30:d1:e5:45:5a:47:54:c2:48:
4d:2e:69:d5:c6:75:8e:63:5c:84:21:14:06:fd:66:3c:83:06:
db:b6:cc:fb:39:56:a8:14:b5:a5:94:f2:ef:d0:61:ed:f3:a3:
e5:83:83:20:21:f6:41:94:fd:5e:61:e0:7e:dd:b2:f5:d5:1e:
40:19:bd:18:3c:64:c1:2f:1f:9a:6f:47:81:58:9f:91:0c:fa:
7d:7b:f5:3d:06:7d:72:e4:0b:54:19:c7:95:74:07:ba:ab:41:
3e:2d:d4:84:20:39:f4:96:69:82:9f:83:b5:f6:53:34:d3:19:
ba:10:e3:9b:84:ae:de:5d:63:f3:5a:c5:c0:e9:1f:e9:f3:19:
60:4f:8e:97:11:68:dd:c4:01:ba:f2:82:87:99:76:4f:4f:be:
9e:26:4e:74:fc:18:8e:de:21:ad:80:83:f1:c4:20:4e:b6:23:
21:0d:3e:af
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF1rB9vkxXEpkb2UcHwZ+z2hzoFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3NzMxRUE4QUFEQkQzNjcwN0M1QzdENjYxNTMyMUM1
MzgwRUVFMDAeFw0yNDA0MDQwODA1NDZaFw0yNTA0MDMwODEwNDZaMDMxMTAvBgNV
BAMTKEQxNEQ1MTAzMDA3OTIwMzdCNjhGMzVDMzVBMDk4MzA2NDUxQjBDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qY4fmlPbFoUH1eyeCbszDd42
GB8Mxigf1hHj8Pb3Hxf4rNZwlPX7LoHYmfg5grX0tEljUd9TdSIaXQyZUVWOpGvB
z/nWvJO7mpmnXW+v5lkFkSzEDLUAAHX9k8CrHc4/e6Q74C/vCZx5fpMzNUozurmY
2Vti/AxzDLgGyi/j7n9cRA60ra+tOllfNqr9qPY6EI7BYk+k7nomI70SCINhbBMR
UIe/rDCivpOqwj8XPZlwKtAn49zKwwG3nUn9TlsrOkSJQoeTiLl8yD2BzJZYifPQ
CpWligeJXwG6w9UoxeEknFB+FcRf2jA9nJj1T8E3FHhO0KofLh7cgJXZf0YdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0U1RAwB5IDe2jzXDWgmDBkUbDPIwHwYDVR0j
BBgwFoAUZXcx6oqtvTZwfFx9ZhUyHFOA7uAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMS82NTc3MzFFQThBQURCRDM2NzA3QzVDN0Q2NjE1MzIxQzUzODBFRUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzczMUVBOEFBREJEMzY3
MDdDNUM3RDY2MTUzMjFDNTM4MEVFRTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzEv
MzEzNzMwMmUzMjMzMzMyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpeTANBgkqhkiG9w0BAQsFAAOCAQEAZzri
2QkEMc2xqfzxhghzy1vpgySyuF8zYKYImbYL5UNl83hzh0DvUguDtH3tkzmT+WbM
HPB/hMwtlkivCOCGMKSAG5OgxMsMkcvA4DXjkA7wMNHlRVpHVMJITS5p1cZ1jmNc
hCEUBv1mPIMG27bM+zlWqBS1pZTy79Bh7fOj5YODICH2QZT9XmHgft2y9dUeQBm9
GDxkwS8fmm9HgVifkQz6fXv1PQZ9cuQLVBnHlXQHuqtBPi3UhCA59JZpgp+DtfZT
NNMZuhDjm4Su3l1j81rFwOkf6fMZYE+OlxFo3cQBuvKCh5l2T0++niZOdPwYjt4h
rYCD8cQgTrYjIQ0+rw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:47 2025 by rpki-client