Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
File: 3138392e35322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: NBQFbgEC3WBnpwJhQ4qiKCAIHSvbhhpJTuA4wgNevEE=
Subject key identifier: 39:9A:E5:98:2A:87:11:62:EA:27:C8:27:9E:87:34:C7:76:24:0C:2F
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 39907BF35369A09171D54224B1245DD3EDD3AA37
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:06 +0000
ROA not before: Wed 05 Mar 2025 18:55:06 +0000
ROA not after: Wed 04 Mar 2026 19:00:06 +0000
asID: 4230
IP address blocks: 189.52.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:90:7b:f3:53:69:a0:91:71:d5:42:24:b1:24:5d:d3:ed:d3:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:06 2025 GMT
Not After : Mar 4 19:00:06 2026 GMT
Subject: CN=3082010A0282010100C9FB4B633E46C1C0D3E515423391E70576294BAD6CD324FBA9700A014CA4CB67F28EC93F4618E8BD6AB0F82F3A536EBCCC86B1FB25A7352CB16EDFABCCF2B0713D2B452CEE891D8C572BA9394E3A2F8A9F4DD7C2401BEF249FE996B1E92C7AC8C87F1924938277597BACB7669FA9514EC219E8A0F811402A4A075971829E9E412C8AE15D58D68048596164195D7922B1B9ED0855F4EDB9FF71D638869176772C2AAF14776A7091BDADAAC5E0B68516EA4019DA334D4430E29186C77AA1E8FA97A36A8271435DB5732FF1FDCA4B225F94D1B91D8BA83952128D0C1D798781456DE470C1BCBE370854EFA9B6D2531DB4D34E9E2028CAD7A98919133384AF41EC4B0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:4b:63:3e:46:c1:c0:d3:e5:15:42:33:91:
e7:05:76:29:4b:ad:6c:d3:24:fb:a9:70:0a:01:4c:
a4:cb:67:f2:8e:c9:3f:46:18:e8:bd:6a:b0:f8:2f:
3a:53:6e:bc:cc:86:b1:fb:25:a7:35:2c:b1:6e:df:
ab:cc:f2:b0:71:3d:2b:45:2c:ee:89:1d:8c:57:2b:
a9:39:4e:3a:2f:8a:9f:4d:d7:c2:40:1b:ef:24:9f:
e9:96:b1:e9:2c:7a:c8:c8:7f:19:24:93:82:77:59:
7b:ac:b7:66:9f:a9:51:4e:c2:19:e8:a0:f8:11:40:
2a:4a:07:59:71:82:9e:9e:41:2c:8a:e1:5d:58:d6:
80:48:59:61:64:19:5d:79:22:b1:b9:ed:08:55:f4:
ed:b9:ff:71:d6:38:86:91:76:77:2c:2a:af:14:77:
6a:70:91:bd:ad:aa:c5:e0:b6:85:16:ea:40:19:da:
33:4d:44:30:e2:91:86:c7:7a:a1:e8:fa:97:a3:6a:
82:71:43:5d:b5:73:2f:f1:fd:ca:4b:22:5f:94:d1:
b9:1d:8b:a8:39:52:12:8d:0c:1d:79:87:81:45:6d:
e4:70:c1:bc:be:37:08:54:ef:a9:b6:d2:53:1d:b4:
d3:4e:9e:20:28:ca:d7:a9:89:19:13:33:84:af:41:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:E5:98:2A:87:11:62:EA:27:C8:27:9E:87:34:C7:76:24:0C:2F
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:54:0b:6b:00:23:3c:0b:f7:35:74:51:c2:d3:0b:fd:61:9e:
17:fa:40:58:e2:91:1a:ba:9e:b2:b6:7b:ab:35:6b:3c:6b:b0:
93:1c:b3:c6:a7:9b:70:b7:a9:9a:ec:50:aa:b9:ef:01:4a:c1:
8c:41:33:16:4f:7c:ab:ab:1e:a3:b2:e8:d7:2e:93:09:e8:f2:
ed:1f:c6:77:15:f8:87:7e:f4:49:cb:71:92:4c:dd:31:4f:92:
8b:15:d3:75:74:20:a2:35:36:77:2a:89:91:9c:4e:ae:ac:4a:
e9:3f:87:98:35:2d:cc:df:de:79:55:28:94:9f:60:bd:0f:cc:
37:65:2d:d9:37:5d:19:13:d6:34:fa:9d:f7:8d:7f:75:a1:6a:
31:90:9f:ac:ab:a2:39:b8:50:93:5b:1f:e5:86:36:75:65:24:
96:af:6e:8c:d1:e0:e7:c4:9c:c9:ed:81:34:b8:e7:bc:fb:43:
cc:7f:54:ad:5d:0e:72:4e:d2:40:10:d4:25:a7:6f:62:34:f8:
c1:a4:86:2c:6b:f5:a0:ca:6f:13:ad:68:5c:ed:a7:04:77:c3:
c0:37:85:d7:87:12:e3:25:97:3d:69:f1:a9:82:9e:1f:24:2d:
e7:70:51:57:c8:38:f8:82:e7:64:3e:fd:6e:26:63:62:3c:7f:
cb:aa:79:d3
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUOZB781NpoJFx1UIksSRd0+3TqjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlGQjRCNjMzRTQ2QzFDMEQz
RTUxNTQyMzM5MUU3MDU3NjI5NEJBRDZDRDMyNEZCQTk3MDBBMDE0Q0E0Q0I2N0Yy
OEVDOTNGNDYxOEU4QkQ2QUIwRjgyRjNBNTM2RUJDQ0M4NkIxRkIyNUE3MzUyQ0Ix
NkVERkFCQ0NGMkIwNzEzRDJCNDUyQ0VFODkxRDhDNTcyQkE5Mzk0RTNBMkY4QTlG
NEREN0MyNDAxQkVGMjQ5RkU5OTZCMUU5MkM3QUM4Qzg3RjE5MjQ5MzgyNzc1OTdC
QUNCNzY2OUZBOTUxNEVDMjE5RThBMEY4MTE0MDJBNEEwNzU5NzE4MjlFOUU0MTJD
OEFFMTVENThENjgwNDg1OTYxNjQxOTVENzkyMkIxQjlFRDA4NTVGNEVEQjlGRjcx
RDYzODg2OTE3Njc3MkMyQUFGMTQ3NzZBNzA5MUJEQURBQUM1RTBCNjg1MTZFQTQw
MTlEQTMzNEQ0NDMwRTI5MTg2Qzc3QUExRThGQTk3QTM2QTgyNzE0MzVEQjU3MzJG
RjFGRENBNEIyMjVGOTREMUI5MUQ4QkE4Mzk1MjEyOEQwQzFENzk4NzgxNDU2REU0
NzBDMUJDQkUzNzA4NTRFRkE5QjZEMjUzMURCNEQzNEU5RTIwMjhDQUQ3QTk4OTE5
MTMzMzg0QUY0MUVDNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyftLYz5GwcDT5RVCM5HnBXYpS61s0yT7qXAKAUyky2fyjsk/Rhjo
vWqw+C86U268zIax+yWnNSyxbt+rzPKwcT0rRSzuiR2MVyupOU46L4qfTdfCQBvv
JJ/plrHpLHrIyH8ZJJOCd1l7rLdmn6lRTsIZ6KD4EUAqSgdZcYKenkEsiuFdWNaA
SFlhZBldeSKxue0IVfTtuf9x1jiGkXZ3LCqvFHdqcJG9rarF4LaFFupAGdozTUQw
4pGGx3qh6PqXo2qCcUNdtXMv8f3KSyJflNG5HYuoOVISjQwdeYeBRW3kcMG8vjcI
VO+pttJTHbTTTp4gKMrXqYkZEzOEr0HsSwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FDma5ZgqhxFi6ifIJ56HNMd2JAwvMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzOTJlMzUzMjJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL00MA0GCSqG
SIb3DQEBCwUAA4IBAQA6VAtrACM8C/c1dFHC0wv9YZ4X+kBY4pEaup6ytnurNWs8
a7CTHLPGp5twt6ma7FCque8BSsGMQTMWT3yrqx6jsujXLpMJ6PLtH8Z3FfiHfvRJ
y3GSTN0xT5KLFdN1dCCiNTZ3KomRnE6urErpP4eYNS3M3955VSiUn2C9D8w3ZS3Z
N10ZE9Y0+p33jX91oWoxkJ+sq6I5uFCTWx/lhjZ1ZSSWr26M0eDnxJzJ7YE0uOe8
+0PMf1StXQ5yTtJAENQlp29iNPjBpIYsa/Wgym8TrWhc7acEd8PAN4XXhxLjJZc9
afGpgp4fJC3ncFFXyDj4gudkPv1uJmNiPH/LqnnT
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:56:29 2025 by rpki-client