Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa
File: 3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: QgaURYmdvJLs826p6ydkjjncTWx424uyn+Pw5lScrLc=
Subject key identifier: D9:D3:51:6B:E4:1D:9C:0E:C2:35:ED:7C:9B:E9:2E:2A:E8:6B:35:56
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 343EC164259376A6B349CB6FFB8685D5E05A0A11
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:09 +0000
ROA not before: Fri 22 Dec 2023 20:20:09 +0000
ROA not after: Fri 20 Dec 2024 20:25:09 +0000
asID: 263073
IP address blocks: 177.223.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3e:c1:64:25:93:76:a6:b3:49:cb:6f:fb:86:85:d5:e0:5a:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:09 2023 GMT
Not After : Dec 20 20:25:09 2024 GMT
Subject: CN=D9D3516BE41D9C0EC235ED7C9BE92E2AE86B3556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:02:f6:bb:6c:c1:f5:fc:15:62:eb:44:54:
c5:e9:16:e0:d4:99:d4:e0:c7:e9:38:0a:5c:fd:ba:
50:d7:04:77:f3:13:f0:b0:4a:ae:fd:83:80:a9:74:
75:c1:5c:50:78:f7:a4:6c:f6:1b:88:6d:8e:d4:9f:
78:ba:2b:c5:4d:a2:9c:a2:39:1e:b5:88:f5:36:54:
3b:b6:84:36:83:17:c7:72:4a:e8:05:e6:7e:a2:36:
a5:bd:ea:bd:ee:20:9a:4c:2a:f9:06:82:f6:29:f6:
f0:5a:3c:8c:c0:0e:a9:b6:79:35:54:a6:32:0b:30:
75:b8:9a:50:d5:83:98:19:ae:d4:87:03:f3:c0:55:
20:06:e0:b3:bc:8c:85:07:37:76:ba:10:a9:b3:51:
c8:06:a2:41:25:11:67:0d:64:55:84:cf:40:f6:f9:
a5:cf:3d:a2:03:6e:1c:5b:3c:c1:0f:5b:ba:9d:c2:
4b:b4:97:f3:3c:06:42:20:6a:d8:13:28:0f:5e:54:
db:c0:bc:68:ab:b7:51:74:c5:5e:7e:5b:35:9d:ad:
b1:68:ed:73:1d:4a:ac:9c:9d:5b:a4:74:83:d8:62:
e2:1d:a2:e3:1d:af:85:b6:fa:41:be:45:e6:16:2b:
dd:fb:f8:f1:ae:4e:4d:ea:0f:0d:0c:35:7b:65:a7:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:51:6B:E4:1D:9C:0E:C2:35:ED:7C:9B:E9:2E:2A:E8:6B:35:56
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ef:59:68:f2:40:96:37:e1:80:db:73:5c:08:91:5b:9a:aa:
33:e2:d7:03:91:4a:d3:49:b2:d4:ba:10:f4:de:78:d2:7e:5e:
2e:be:af:ba:b8:ba:7b:ae:ce:89:22:3f:3e:57:2e:9e:02:30:
b1:16:b7:f1:c2:86:98:81:ab:d6:f9:45:68:70:16:f6:e0:61:
d4:51:da:a8:ee:fa:d5:ef:7c:4d:9f:25:e3:08:90:a5:61:5c:
c4:15:db:7d:2d:c4:2c:f3:4f:f4:4e:fb:ea:67:a7:f2:0f:31:
b3:12:0a:de:f8:12:ca:78:65:6d:d3:93:90:75:cc:21:55:1f:
f1:ef:3b:b7:19:33:62:39:09:65:70:84:dc:fd:ab:25:e2:39:
95:fb:74:f3:93:be:ff:70:59:cb:8b:6c:bf:1e:a4:2a:08:53:
b2:a5:18:02:36:a3:84:42:de:b6:4b:cb:9e:f4:9a:27:e5:b3:
94:35:08:22:ed:8d:50:da:9f:01:fe:b3:2a:4a:82:f1:fc:cf:
35:c7:7b:74:5a:86:92:b5:11:b0:f1:a4:f2:bf:c9:17:d2:e7:
62:94:b6:64:fe:8d:24:5c:02:94:3d:44:13:88:38:2b:5d:e8:
ee:cd:a9:1a:a4:ec:66:86:6c:fc:87:9f:c0:cd:39:38:84:7e:
9f:55:a8:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUND7BZCWTdqazSctv+4aF1eBaChEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDlaFw0yNDEyMjAyMDI1MDlaMDMxMTAvBgNV
BAMTKEQ5RDM1MTZCRTQxRDlDMEVDMjM1RUQ3QzlCRTkyRTJBRTg2QjM1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7AL2u2zB9fwVYutEVMXpFuDU
mdTgx+k4Clz9ulDXBHfzE/CwSq79g4CpdHXBXFB496Rs9huIbY7Un3i6K8VNopyi
OR61iPU2VDu2hDaDF8dySugF5n6iNqW96r3uIJpMKvkGgvYp9vBaPIzADqm2eTVU
pjILMHW4mlDVg5gZrtSHA/PAVSAG4LO8jIUHN3a6EKmzUcgGokElEWcNZFWEz0D2
+aXPPaIDbhxbPMEPW7qdwku0l/M8BkIgatgTKA9eVNvAvGirt1F0xV5+WzWdrbFo
7XMdSqycnVukdIPYYuIdouMdr4W2+kG+ReYWK937+PGuTk3qDw0MNXtlp/hfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2dNRa+QdnA7CNe18m+kuKuhrNVYwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzM3MmUzMjMyMzMyZTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3xYwDQYJKoZIhvcNAQELBQADggEBAGjvWWjy
QJY34YDbc1wIkVuaqjPi1wORStNJstS6EPTeeNJ+Xi6+r7q4unuuzokiPz5XLp4C
MLEWt/HChpiBq9b5RWhwFvbgYdRR2qju+tXvfE2fJeMIkKVhXMQV230txCzzT/RO
++pnp/IPMbMSCt74Esp4ZW3Tk5B1zCFVH/HvO7cZM2I5CWVwhNz9qyXiOZX7dPOT
vv9wWcuLbL8epCoIU7KlGAI2o4RC3rZLy570mifls5Q1CCLtjVDanwH+sypKgvH8
zzXHe3RahpK1EbDxpPK/yRfS52KUtmT+jSRcApQ9RBOIOCtd6O7NqRqk7GaGbPyH
n8DNOTiEfp9VqK0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:51 2025 by rpki-client