Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
File: 3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier: yvPqNt6g1q2bkhgbR4eRQ8aU2xgPY7DrOCd4HvQzFdg=
Subject key identifier: 33:31:4F:0A:36:4D:40:3E:2C:AE:6A:81:74:91:7A:74:DD:3C:68:B9
Certificate issuer: /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial: 2C4FE653DC2ADE41888BAE206CA87446A8BD9610
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
Signing time: Wed 05 Mar 2025 20:00:06 +0000
ROA not before: Wed 05 Mar 2025 19:55:06 +0000
ROA not after: Wed 04 Mar 2026 20:00:06 +0000
asID: 263900
IP address blocks: 138.204.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4f:e6:53:dc:2a:de:41:88:8b:ae:20:6c:a8:74:46:a8:bd:96:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Validity
Not Before: Mar 5 19:55:06 2025 GMT
Not After : Mar 4 20:00:06 2026 GMT
Subject: CN=33314F0A364D403E2CAE6A8174917A74DD3C68B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:ee:d5:42:4c:8e:90:f2:d1:aa:7c:32:69:
73:7f:66:cd:2a:7a:fc:1f:0e:97:f4:3b:45:27:bd:
77:aa:6e:71:15:8c:ee:4a:cb:d7:94:f6:66:74:98:
ad:f1:f4:5d:bc:b3:7b:35:40:cc:6e:6f:aa:44:fe:
b3:b5:fe:36:7b:be:28:b1:60:0c:79:7b:09:9d:f9:
b9:9e:57:55:82:42:53:bc:4a:8d:eb:6e:ca:51:f7:
93:f4:bb:f8:d2:36:c8:1b:2a:f1:19:09:ed:0a:0e:
af:89:f4:e5:a9:a9:1d:e2:a2:03:e0:b2:c1:3f:b8:
d4:92:71:d7:bf:36:11:55:28:d4:32:af:96:79:eb:
93:97:ac:45:24:a1:e8:15:b7:d1:20:a9:e3:d8:49:
78:b0:0d:1e:44:34:eb:60:e7:71:ef:ec:0d:66:02:
f7:e8:26:e5:5f:bc:f0:e7:d9:64:c8:c8:c4:92:3e:
a0:34:15:08:e0:c8:61:4a:96:5c:f3:66:2b:15:e0:
df:a8:d4:ba:cb:6d:2e:bf:78:cc:43:cd:1b:35:f0:
2d:58:ac:cb:45:ca:24:9b:72:ab:7d:c3:1a:c2:17:
d9:b3:b0:f5:80:3f:24:2b:43:8a:b2:f3:83:3b:a0:
45:6b:4a:c4:27:16:c2:b3:35:c8:0c:04:ba:77:55:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:4F:0A:36:4D:40:3E:2C:AE:6A:81:74:91:7A:74:DD:3C:68:B9
X509v3 Authority Key Identifier:
keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.150.0/24
Signature Algorithm: sha256WithRSAEncryption
65:31:98:00:20:3c:2a:e7:82:f3:06:cf:34:c7:e2:d1:99:1e:
62:c7:49:86:e0:72:21:fe:67:4c:a2:eb:10:98:83:8b:45:5c:
da:ee:cb:30:8c:e3:ee:8e:f6:db:ec:ff:c3:8d:92:d4:e3:e2:
be:6e:82:98:f6:20:f5:d4:1a:7f:91:eb:46:92:0e:85:19:f3:
70:ee:cb:f8:e9:8e:af:a8:99:6d:95:b7:99:fa:ae:21:84:be:
c1:79:eb:30:47:b0:3e:cc:a0:86:fd:30:80:9c:4c:f2:b5:e4:
c3:89:dc:25:b2:4b:8f:8e:8d:1d:8f:84:f7:6f:9b:4b:b8:97:
0d:48:e1:11:a4:7a:ec:e0:42:f4:ef:15:0a:38:4d:e0:e1:e2:
e6:70:ba:e8:0f:0f:34:e5:98:de:6f:f5:30:e5:29:25:32:48:
94:0d:fb:12:a3:c5:d8:dd:ec:95:b5:cf:e4:4c:e3:e1:85:45:
04:2e:29:39:4b:bd:aa:f4:99:89:5f:4a:ff:e7:b7:97:cc:fa:
bc:d3:05:4e:d0:5f:be:34:0c:1e:a9:2d:98:0a:98:6e:55:96:
6f:6d:c7:f8:b4:3c:4a:c9:9f:47:a3:3d:ab:55:c0:9d:54:4d:
aa:b4:7b:14:93:89:df:26:52:ea:df:2e:62:27:80:00:5b:2e:
9e:7b:bc:96
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULE/mU9wq3kGIi64gbKh0Rqi9lhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwOEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4
Q0Y3OUQ5MDAeFw0yNTAzMDUxOTU1MDZaFw0yNjAzMDQyMDAwMDZaMDMxMTAvBgNV
BAMTKDMzMzE0RjBBMzY0RDQwM0UyQ0FFNkE4MTc0OTE3QTc0REQzQzY4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pe7VQkyOkPLRqnwyaXN/Zs0q
evwfDpf0O0UnvXeqbnEVjO5Ky9eU9mZ0mK3x9F28s3s1QMxub6pE/rO1/jZ7viix
YAx5ewmd+bmeV1WCQlO8So3rbspR95P0u/jSNsgbKvEZCe0KDq+J9OWpqR3iogPg
ssE/uNSScde/NhFVKNQyr5Z565OXrEUkoegVt9EgqePYSXiwDR5ENOtg53Hv7A1m
AvfoJuVfvPDn2WTIyMSSPqA0FQjgyGFKllzzZisV4N+o1LrLbS6/eMxDzRs18C1Y
rMtFyiSbcqt9wxrCF9mzsPWAPyQrQ4qy84M7oEVrSsQnFsKzNcgMBLp3VdGBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMzFPCjZNQD4srmqBdJF6dN08aLkwHwYDVR0j
BBgwFoAU0QimpJizg5tPP4BazK6TT4z3nZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJSTVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1
dXovMi9EMTA4QTZBNDk4QjM4MzlCNEYzRjgwNUFDQ0FFOTM0RjhDRjc5RDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMDhBNkE0OThCMzgzOUI0
RjNGODA1QUNDQUU5MzRGOENGNzlEOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIv
MzEzMzM4MmUzMjMwMzQyZTMxMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMljANBgkqhkiG9w0BAQsFAAOCAQEAZTGY
ACA8KueC8wbPNMfi0ZkeYsdJhuByIf5nTKLrEJiDi0Vc2u7LMIzj7o722+z/w42S
1OPivm6CmPYg9dQaf5HrRpIOhRnzcO7L+OmOr6iZbZW3mfquIYS+wXnrMEewPsyg
hv0wgJxM8rXkw4ncJbJLj46NHY+E92+bS7iXDUjhEaR67OBC9O8VCjhN4OHi5nC6
6A8PNOWY3m/1MOUpJTJIlA37EqPF2N3slbXP5Ezj4YVFBC4pOUu9qvSZiV9K/+e3
l8z6vNMFTtBfvjQMHqktmAqYblWWb23H+LQ8SsmfR6M9q1XAnVRNqrR7FJOJ3yZS
6t8uYieAAFsunnu8lg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:29:36 2025 by rpki-client