Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa
File: 3136342e38352e36352e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier: bnlcBZ31EkB/LfCNJtRieBAgBo2+cgx3j6temeTBeQs=
Subject key identifier: 67:00:D0:8E:4C:F7:39:E4:36:50:5A:C7:F6:65:BF:0D:E0:4E:30:43
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 0A2D3EF42ACB64C05A864DEDA341D388BB4DC363
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa
Signing time: Fri 24 Jan 2025 17:46:09 +0000
ROA not before: Fri 24 Jan 2025 17:41:09 +0000
ROA not after: Fri 23 Jan 2026 17:46:09 +0000
asID: 23074
IP address blocks: 164.85.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2d:3e:f4:2a:cb:64:c0:5a:86:4d:ed:a3:41:d3:88:bb:4d:c3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Jan 24 17:41:09 2025 GMT
Not After : Jan 23 17:46:09 2026 GMT
Subject: CN=6700D08E4CF739E436505AC7F665BF0DE04E3043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:6e:60:3c:31:f5:bd:09:14:95:1c:d3:8b:
3d:21:c1:af:57:ce:f2:9a:db:ae:32:d9:2d:8b:f0:
db:df:60:20:cd:fd:45:b3:73:12:ca:8b:5e:29:df:
f0:ff:6d:9e:5b:df:39:d2:c2:a0:43:3d:5b:3a:97:
9b:44:4d:0f:39:fc:5f:4b:90:13:9f:86:5e:67:e9:
c6:98:65:ee:52:94:f5:21:4e:26:bc:4c:aa:28:20:
67:99:b1:e6:82:23:94:52:22:05:df:0f:3a:e4:1a:
95:bf:73:21:55:29:1d:a6:97:e3:41:56:32:85:94:
a2:07:91:47:fa:c4:ed:ce:ec:01:0c:5e:c9:22:82:
1e:3c:ca:e1:73:c2:a8:5b:73:63:fa:15:a7:36:60:
3b:0d:8a:45:c9:67:e7:e0:f0:1f:93:d4:b7:84:73:
60:47:55:91:c7:1a:82:c7:84:b4:ee:1f:db:60:b4:
68:b5:ab:4e:d1:f2:70:50:51:f7:29:9e:0c:4f:54:
47:49:d3:e7:0c:08:8d:a7:c1:91:af:00:25:3f:8e:
2e:20:88:76:ad:21:5a:ca:f3:a3:d7:2e:f7:36:f3:
76:68:0a:e4:f1:5c:27:ab:a5:cb:25:c4:b3:84:77:
fe:69:96:cf:4a:b0:b5:b2:28:2b:2e:2c:f1:d5:db:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:D0:8E:4C:F7:39:E4:36:50:5A:C7:F6:65:BF:0D:E0:4E:30:43
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.65.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e8:7b:18:c6:a5:65:8f:9c:70:6d:10:8d:7f:e2:b7:64:13:
43:72:5c:f4:ff:1b:74:99:97:03:25:2c:17:53:01:cd:40:0b:
2d:9e:c6:4a:89:5f:0e:24:c4:3a:b1:e2:62:fa:52:7f:03:66:
40:3a:2a:f6:4e:f0:c7:4e:32:27:a4:b9:c3:b5:5e:8e:21:07:
38:3a:3b:6c:0e:67:ff:db:de:74:f0:37:42:d4:1a:a2:e9:bb:
52:0a:47:59:0b:90:76:25:e1:9b:e3:d8:fb:8b:2c:27:8a:a4:
31:49:81:de:5b:6a:78:1c:7a:76:14:fe:5e:70:07:4a:e5:15:
b3:79:71:fd:0a:53:fd:67:d0:9c:a0:6a:f4:ed:7b:52:2b:8c:
91:8f:6c:66:1a:e0:d6:9c:b8:e1:e7:60:34:6c:66:83:d8:6e:
dd:05:42:7b:8f:cd:9c:06:4e:b5:d0:b0:c9:5e:57:d4:ad:e6:
c3:22:5c:b2:55:d1:2f:67:bb:8b:fd:2e:56:49:f3:39:ab:7b:
e4:ea:c0:3f:cb:8f:cb:dd:e1:d0:af:fd:29:59:75:0a:37:3c:
ff:da:1a:dd:9a:a3:bc:20:38:65:43:3b:b5:50:cc:1c:f6:b0:
bd:64:ae:c1:53:c5:d4:f3:80:2f:a5:50:bd:31:33:dd:b7:f1:
6d:e4:3c:11
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCi0+9CrLZMBahk3to0HTiLtNw2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTAxMjQxNzQxMDlaFw0yNjAxMjMxNzQ2MDlaMDMxMTAvBgNV
BAMTKDY3MDBEMDhFNENGNzM5RTQzNjUwNUFDN0Y2NjVCRjBERTA0RTMwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+n25gPDH1vQkUlRzTiz0hwa9X
zvKa264y2S2L8NvfYCDN/UWzcxLKi14p3/D/bZ5b3znSwqBDPVs6l5tETQ85/F9L
kBOfhl5n6caYZe5SlPUhTia8TKooIGeZseaCI5RSIgXfDzrkGpW/cyFVKR2ml+NB
VjKFlKIHkUf6xO3O7AEMXskigh48yuFzwqhbc2P6Fac2YDsNikXJZ+fg8B+T1LeE
c2BHVZHHGoLHhLTuH9tgtGi1q07R8nBQUfcpngxPVEdJ0+cMCI2nwZGvACU/ji4g
iHatIVrK86PXLvc283ZoCuTxXCerpcslxLOEd/5pls9KsLWyKCsuLPHV2+GxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZwDQjkz3OeQ2UFrH9mW/DeBOMEMwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKRVQTANBgkqhkiG9w0BAQsFAAOCAQEAd+h7GMalZY+c
cG0QjX/it2QTQ3Jc9P8bdJmXAyUsF1MBzUALLZ7GSolfDiTEOrHiYvpSfwNmQDoq
9k7wx04yJ6S5w7VejiEHODo7bA5n/9vedPA3QtQaoum7UgpHWQuQdiXhm+PY+4ss
J4qkMUmB3ltqeBx6dhT+XnAHSuUVs3lx/QpT/WfQnKBq9O17UiuMkY9sZhrg1py4
4edgNGxmg9hu3QVCe4/NnAZOtdCwyV5X1K3mwyJcslXRL2e7i/0uVknzOat75OrA
P8uPy93h0K/9KVl1Cjc8/9oa3ZqjvCA4ZUM7tVDMHPawvWSuwVPF1POAL6VQvTEz
3bfxbeQ8EQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:47:12 2025 by rpki-client