Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
File: 3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa (raw, json)
Hash identifier: mbcktOJZCLHdqszA/t9rTKFJsSPBbT8Uk0pSZNNglgc=
Subject key identifier: 73:30:6A:2B:F4:DC:36:C4:A7:26:EF:52:FC:7B:3A:BB:EC:3F:3C:4F
Certificate issuer: /CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Certificate serial: 3ABDF55912328D8495E424C1A53F08D377B3548F
Authority key identifier: 14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
Signing time: Fri 28 Mar 2025 14:48:07 +0000
ROA not before: Fri 28 Mar 2025 14:43:07 +0000
ROA not after: Fri 27 Mar 2026 14:48:07 +0000
asID: 263483
IP address blocks: 191.242.224.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:bd:f5:59:12:32:8d:84:95:e4:24:c1:a5:3f:08:d3:77:b3:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Validity
Not Before: Mar 28 14:43:07 2025 GMT
Not After : Mar 27 14:48:07 2026 GMT
Subject: CN=73306A2BF4DC36C4A726EF52FC7B3ABBEC3F3C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:40:f5:2e:03:e0:75:19:1d:cf:05:95:6d:
b5:9a:e9:da:ef:06:91:7e:d6:0d:7f:99:c2:a9:f1:
26:4e:a5:52:07:e6:37:64:9f:e8:46:48:4a:66:79:
2e:9f:37:9e:e0:5a:cf:a3:22:42:88:6b:2e:e6:3a:
59:ed:fc:b9:2d:f4:c8:45:50:fa:79:9f:6e:e4:c2:
66:3d:b4:f9:46:d0:9e:53:58:28:01:6f:76:c7:24:
7c:83:24:9f:dd:73:dd:73:c7:2b:16:85:b2:5e:36:
fd:96:55:eb:be:b6:6f:37:6a:64:b8:c1:27:2f:18:
cc:ae:04:74:ce:67:65:eb:25:f9:52:2a:52:68:e9:
1c:9f:94:49:c0:7e:b5:0f:70:7c:35:c7:d3:0b:66:
fe:28:68:12:78:4c:c9:ae:ab:c5:42:fe:4c:2e:d3:
2e:86:2d:40:11:bf:df:16:8c:21:f6:14:35:db:05:
c8:b6:aa:87:e2:9d:1b:59:d8:a6:35:ef:5f:49:de:
d4:7b:cf:a8:a7:51:aa:9f:79:44:ab:a7:73:52:92:
93:43:3c:a1:99:ca:82:f5:94:05:2e:bc:13:c4:3a:
eb:9c:c2:73:c6:68:a2:2c:e1:87:3e:6d:1d:e6:c8:
64:72:ee:ba:28:08:ca:0b:6d:bd:9c:10:9e:a6:3e:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:6A:2B:F4:DC:36:C4:A7:26:EF:52:FC:7B:3A:BB:EC:3F:3C:4F
X509v3 Authority Key Identifier:
keyid:14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.224.0/22
Signature Algorithm: sha256WithRSAEncryption
34:05:84:de:9a:9b:65:b8:93:25:9a:a6:40:f1:62:b2:d3:0f:
f5:14:17:bd:59:8e:15:f7:e2:6c:f3:e2:e6:7e:f9:27:6f:1f:
76:02:a2:cd:5d:9b:62:41:6b:69:5b:8c:0f:e5:a9:a1:3a:2a:
76:96:f0:15:ae:19:5d:5a:a0:8e:ca:2e:17:e5:a4:ce:c4:42:
67:09:03:54:ff:f0:ff:bc:51:68:a1:6a:15:3f:ea:6b:77:67:
3f:01:15:98:d2:16:6c:60:a8:d2:5b:1e:4c:37:a4:58:16:3e:
97:1a:bb:08:73:cd:f0:cc:4e:07:50:b4:d8:46:ec:54:6c:bd:
38:4b:47:bd:a6:c3:ac:d5:a6:e1:1c:ff:09:ce:8e:2f:38:e6:
d1:6b:be:22:3e:c9:f0:e6:23:77:a0:84:a5:e2:64:fe:c6:5e:
b0:03:b9:99:d4:dc:e7:c4:41:46:61:46:36:24:3a:af:30:bb:
48:6c:1a:dd:bd:ac:e2:36:1e:90:8b:c3:94:f5:c2:9a:d6:00:
9b:18:fa:3a:e0:01:ac:23:0f:e3:3d:6e:6c:e3:51:7b:fd:2f:
f0:e1:52:68:6b:b1:3c:45:e1:61:4d:58:71:6c:bd:8b:37:04:
74:3a:7f:5b:e8:c5:ed:6d:00:36:25:87:42:c2:7c:3f:dd:a3:
2e:86:4d:52
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOr31WRIyjYSV5CTBpT8I03ezVI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUYzQ0EzNTZDNTJCMDNGMkJERDdGNDNEM0Q1QkNC
MjREMjVDMTAeFw0yNTAzMjgxNDQzMDdaFw0yNjAzMjcxNDQ4MDdaMDMxMTAvBgNV
BAMTKDczMzA2QTJCRjREQzM2QzRBNzI2RUY1MkZDN0IzQUJCRUMzRjNDNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHED1LgPgdRkdzwWVbbWa6drv
BpF+1g1/mcKp8SZOpVIH5jdkn+hGSEpmeS6fN57gWs+jIkKIay7mOlnt/Lkt9MhF
UPp5n27kwmY9tPlG0J5TWCgBb3bHJHyDJJ/dc91zxysWhbJeNv2WVeu+tm83amS4
wScvGMyuBHTOZ2XrJflSKlJo6RyflEnAfrUPcHw1x9MLZv4oaBJ4TMmuq8VC/kwu
0y6GLUARv98WjCH2FDXbBci2qofinRtZ2KY1719J3tR7z6inUaqfeUSrp3NSkpND
PKGZyoL1lAUuvBPEOuucwnPGaKIs4Yc+bR3myGRy7rooCMoLbb2cEJ6mPqfDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUczBqK/TcNsSnJu9S/Hs6u+w/PE8wHwYDVR0j
BBgwFoAUFNrzyjVsUrA/K91/Q9PVvLJNJcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RZM2YzRGZOazhtdG1BaUhxOGpRN1R6c2dBY0JITnZQbkNmS3VOZFVt
NzgvMC8xNERBRjNDQTM1NkM1MkIwM0YyQkREN0Y0M0QzRDVCQ0IyNEQyNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0REFGM0NBMzU2QzUyQjAz
RjJCREQ3RjQzRDNENUJDQjI0RDI1QzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dEWTNmM0RmTms4bXRtQWlIcThqUTdUenNnQWNCSE52UG5DZkt1TmRVbTc4LzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM0MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/y4DANBgkqhkiG9w0BAQsFAAOCAQEANAWE
3pqbZbiTJZqmQPFistMP9RQXvVmOFffibPPi5n75J28fdgKizV2bYkFraVuMD+Wp
oToqdpbwFa4ZXVqgjsouF+WkzsRCZwkDVP/w/7xRaKFqFT/qa3dnPwEVmNIWbGCo
0lseTDekWBY+lxq7CHPN8MxOB1C02EbsVGy9OEtHvabDrNWm4Rz/Cc6OLzjm0Wu+
Ij7J8OYjd6CEpeJk/sZesAO5mdTc58RBRmFGNiQ6rzC7SGwa3b2s4jYekIvDlPXC
mtYAmxj6OuABrCMP4z1ubONRe/0v8OFSaGuxPEXhYU1YcWy9izcEdDp/W+jF7W0A
NiWHQsJ8P92jLoZNUg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:28:10 2025 by rpki-client