Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3234203d3e20323634303635.roa
File: 3134332e3230322e302e302f32322d3234203d3e20323634303635.roa (raw, json)
Hash identifier: dbqHpI0kJAdCgePf8pUgoURIzUSax4V8R+0ozTnsFJc=
Subject key identifier: C1:54:91:5E:01:96:A5:C9:EF:FE:8A:A2:2D:7B:18:41:91:12:5C:B5
Certificate issuer: /CN=724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4
Certificate serial: 2B4B443D44F4AB0C52360B049C40F55EAA87BC39
Authority key identifier: 72:4D:C9:03:C9:E8:AA:1F:C0:AF:D0:8B:80:EC:CA:1A:EB:1D:AA:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3234203d3e20323634303635.roa
Signing time: Tue 17 Dec 2024 13:59:50 +0000
ROA not before: Tue 17 Dec 2024 13:54:50 +0000
ROA not after: Tue 16 Dec 2025 13:59:50 +0000
asID: 264065
IP address blocks: 143.202.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4b:44:3d:44:f4:ab:0c:52:36:0b:04:9c:40:f5:5e:aa:87:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4
Validity
Not Before: Dec 17 13:54:50 2024 GMT
Not After : Dec 16 13:59:50 2025 GMT
Subject: CN=C154915E0196A5C9EFFE8AA22D7B184191125CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:97:4b:ec:39:b1:b3:16:ec:37:a0:8b:dd:
cb:0a:da:d0:91:6c:99:2e:ea:b5:47:65:2c:5f:85:
ab:56:a2:5c:6f:ce:8c:91:03:46:81:53:d5:ad:1d:
f2:6e:1a:f9:6e:33:71:e2:ff:96:cf:3e:39:ec:2d:
1a:67:cb:ff:7c:11:8e:8b:48:4d:ba:38:9b:dd:94:
1a:a8:83:ea:bd:19:3d:c8:30:65:6c:30:73:4e:17:
45:d2:06:e8:db:8b:0c:3e:76:75:c9:a5:c9:df:ef:
31:59:a5:99:98:8c:32:e8:0d:46:84:03:c9:2c:b1:
95:b5:3d:e2:26:14:2a:19:0b:35:27:e4:2b:30:41:
43:8f:46:64:7d:e1:e7:25:57:49:1e:51:ea:c7:5d:
25:e4:33:b2:34:bb:4c:bd:a6:b1:2d:af:8a:95:51:
74:b2:d3:c5:35:a5:02:6b:28:b0:a1:34:a2:98:69:
50:bb:7e:94:5b:37:54:fa:03:63:ea:1e:e4:a1:a7:
5a:1e:c6:b4:1a:c7:58:5a:fd:02:53:10:d9:a9:b0:
23:ae:26:5f:23:d8:8b:d8:e3:de:a0:88:0d:7b:e5:
c9:5d:60:67:bb:a9:75:18:02:91:06:ba:19:c3:5c:
56:87:3a:d9:03:c3:c0:b0:0f:b8:e3:b4:1c:ce:4e:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:91:5E:01:96:A5:C9:EF:FE:8A:A2:2D:7B:18:41:91:12:5C:B5
X509v3 Authority Key Identifier:
keyid:72:4D:C9:03:C9:E8:AA:1F:C0:AF:D0:8B:80:EC:CA:1A:EB:1D:AA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3234203d3e20323634303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:49:66:da:38:45:2f:67:3f:ef:d9:9e:f7:d7:7a:72:29:92:
59:d0:37:03:74:6b:3f:5d:65:dc:78:0f:89:44:b9:67:a6:01:
af:34:3d:c1:62:9d:b4:46:0c:08:c8:12:a3:31:60:5b:b2:2d:
de:41:c7:a9:13:40:9a:9a:77:65:43:67:07:99:9d:55:89:fb:
dc:36:ed:8c:f6:31:a3:74:87:c1:a8:ff:69:74:4c:f4:5f:d9:
94:82:60:a1:40:59:ee:24:ec:53:57:4e:02:da:fb:c5:c0:7a:
1f:2d:24:b1:1c:53:b9:ba:69:6b:8c:97:8a:f3:ca:99:a8:b6:
30:80:89:2a:02:4e:52:ba:61:16:90:5a:36:70:5c:41:a9:32:
4a:86:90:41:57:72:8d:6d:20:23:76:3f:15:6c:52:06:8d:07:
d4:5e:c9:78:64:31:00:de:3d:57:1c:1e:25:d5:57:b4:09:10:
e5:93:9a:00:61:81:a7:c7:73:b9:52:72:ba:18:49:5d:60:1b:
60:d0:75:6e:b3:5f:a4:43:3d:b0:cb:5f:3b:ee:7d:ef:45:25:
b5:03:8f:2f:d8:cb:f4:1e:e9:67:9c:2e:bc:a6:85:6b:be:80:
bf:13:40:cb:12:a3:62:4a:36:b0:ad:8e:26:97:b2:65:73:8d:
7e:0f:26:4e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK0tEPUT0qwxSNgsEnED1XqqHvDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI0REM5MDNDOUU4QUExRkMwQUZEMDhCODBFQ0NBMUFF
QjFEQUFCNDAeFw0yNDEyMTcxMzU0NTBaFw0yNTEyMTYxMzU5NTBaMDMxMTAvBgNV
BAMTKEMxNTQ5MTVFMDE5NkE1QzlFRkZFOEFBMjJEN0IxODQxOTExMjVDQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmqJdL7DmxsxbsN6CL3csK2tCR
bJku6rVHZSxfhatWolxvzoyRA0aBU9WtHfJuGvluM3Hi/5bPPjnsLRpny/98EY6L
SE26OJvdlBqog+q9GT3IMGVsMHNOF0XSBujbiww+dnXJpcnf7zFZpZmYjDLoDUaE
A8kssZW1PeImFCoZCzUn5CswQUOPRmR94eclV0keUerHXSXkM7I0u0y9prEtr4qV
UXSy08U1pQJrKLChNKKYaVC7fpRbN1T6A2PqHuShp1oexrQax1ha/QJTENmpsCOu
Jl8j2IvY496giA175cldYGe7qXUYApEGuhnDXFaHOtkDw8CwD7jjtBzOTqzdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwVSRXgGWpcnv/oqiLXsYQZESXLUwHwYDVR0j
BBgwFoAUck3JA8noqh/Ar9CLgOzKGusdqrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmM5OWRxVmVRVzI2ZVNvVzg3aG82QWNUR2dhdG5kY0VGWGFva01wczVt
RlYvMC83MjREQzkwM0M5RThBQTFGQzBBRkQwOEI4MEVDQ0ExQUVCMURBQUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNERDOTAzQzlFOEFBMUZD
MEFGRDA4QjgwRUNDQTFBRUIxREFBQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZjOTlkcVZlUVcyNmVTb1c4N2hvNkFjVEdnYXRuZGNFRlhhb2tNcHM1bUZWLzAv
MzEzNDMzMmUzMjMwMzIyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCj8oAMA0GCSqGSIb3DQEBCwUAA4IBAQArSWbaOEUv
Zz/v2Z7313pyKZJZ0DcDdGs/XWXceA+JRLlnpgGvND3BYp20RgwIyBKjMWBbsi3e
QcepE0CamndlQ2cHmZ1VifvcNu2M9jGjdIfBqP9pdEz0X9mUgmChQFnuJOxTV04C
2vvFwHofLSSxHFO5umlrjJeK88qZqLYwgIkqAk5SumEWkFo2cFxBqTJKhpBBV3KN
bSAjdj8VbFIGjQfUXsl4ZDEA3j1XHB4l1Ve0CRDlk5oAYYGnx3O5UnK6GEldYBtg
0HVus1+kQz2wy1877n3vRSW1A48v2Mv0HulnnC68poVrvoC/E0DLEqNiSjawrY4m
l7Jlc41+DyZO
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:35:12 2025 by rpki-client