Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33312e302e302f31362d3136203d3e2034323330.roa
File: 3230312e33312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: TDRbhpNNForn2/HyEFpQXOn8H4RFqj/Z9RjLMO4CL3M=
Subject key identifier: D2:16:09:57:83:36:77:4B:02:AC:B4:40:57:0A:04:64:DD:FD:D0:DA
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 729560CC929DDC68EA7223E54428D649040F5C72
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33312e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 4230
IP address blocks: 201.31.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:95:60:cc:92:9d:dc:68:ea:72:23:e5:44:28:d6:49:04:0f:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:60:5c:1b:83:8d:e8:5c:5c:a6:c5:82:83:
1f:69:d2:ef:6c:13:5b:e0:41:2d:36:48:23:3e:c4:
e0:97:5b:7f:72:0c:ea:c2:1d:8b:ec:7b:24:f3:00:
1d:75:33:cb:bc:df:87:da:ec:e0:86:98:9c:c6:c6:
69:9a:47:3f:86:59:5b:cb:cc:5a:5a:f1:ee:d3:a5:
f3:c2:5b:49:84:2e:85:6a:4b:c3:52:14:52:85:76:
fc:60:de:67:2b:72:17:3a:f2:f7:d5:1b:2a:ff:ef:
f2:81:43:10:2a:f5:a7:a8:a6:24:ca:be:37:a2:83:
56:7c:b2:46:de:ec:43:4c:72:1e:95:cd:d7:c7:a0:
62:1e:1b:be:7e:79:42:08:02:b1:20:02:a2:e8:5b:
c1:8b:24:c9:c8:30:f4:ae:8e:12:d2:e2:8d:ea:9e:
ae:2b:85:38:1e:8d:bc:d9:d5:5d:28:6d:22:1b:dd:
d8:90:83:96:0f:14:3d:e6:1b:b4:ee:a3:18:17:39:
65:d2:64:1c:2c:11:8f:da:6e:2e:c4:9d:5d:34:e8:
fe:42:90:09:e9:a0:eb:89:e7:c1:f7:ea:31:3c:e7:
bf:50:f7:f8:55:28:39:ba:3a:4f:40:c5:0b:09:b9:
0c:86:46:a3:b2:b3:49:da:72:b8:98:3d:16:8f:45:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:09:57:83:36:77:4B:02:AC:B4:40:57:0A:04:64:DD:FD:D0:DA
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33312e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:35:cd:01:72:05:c9:06:0b:4d:54:36:52:9b:f0:d0:b5:93:
57:7d:26:07:32:53:6e:89:da:21:53:b5:15:e8:2a:2d:6e:3c:
c9:ed:f7:8a:81:7c:1d:56:80:ba:b5:2b:0b:04:3c:be:8e:0c:
79:78:38:7f:be:a1:73:62:9b:e7:1b:4c:fc:fc:ea:de:4e:42:
70:e0:89:e5:b5:57:e7:00:06:37:a1:9d:84:0e:d2:bb:d9:e0:
2c:50:a0:63:3b:ea:e3:2b:34:3c:30:a3:99:b6:d9:84:9a:cb:
89:b9:25:c8:8b:1e:40:63:87:e2:8d:64:96:ab:62:ca:a0:ee:
32:d9:a5:99:f9:9b:22:70:92:51:08:5d:3f:3c:b4:c2:7a:bb:
fb:6e:70:a0:92:b0:03:e3:18:8c:34:40:da:bc:3f:b8:7a:fa:
cd:88:61:e9:d8:bc:c9:08:03:cd:61:e8:6a:8f:47:52:9f:c4:
99:31:42:fe:d6:ec:2c:ef:80:be:0c:7c:89:55:48:95:29:71:
f8:37:1e:49:2a:02:14:72:c6:01:d7:03:c5:4a:66:d1:d3:a5:
44:e2:5f:25:55:4d:9d:39:e4:14:f2:66:9d:67:31:fa:b4:87:
06:c5:18:2b:c6:9f:59:e1:48:bb:b0:79:58:f5:7f:1f:1f:cf:
d3:d3:ec:dc
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUcpVgzJKd3GjqciPlRCjWSQQPXHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREMwMjYwNUMxQjgzOERFODVD
NUNBNkM1ODI4MzFGNjlEMkVGNkMxMzVCRTA0MTJEMzY0ODIzM0VDNEUwOTc1QjdG
NzIwQ0VBQzIxRDhCRUM3QjI0RjMwMDFENzUzM0NCQkNERjg3REFFQ0UwODY5ODlD
QzZDNjY5OUE0NzNGODY1OTVCQ0JDQzVBNUFGMUVFRDNBNUYzQzI1QjQ5ODQyRTg1
NkE0QkMzNTIxNDUyODU3NkZDNjBERTY3MkI3MjE3M0FGMkY3RDUxQjJBRkZFRkYy
ODE0MzEwMkFGNUE3QThBNjI0Q0FCRTM3QTI4MzU2N0NCMjQ2REVFQzQzNEM3MjFF
OTVDREQ3QzdBMDYyMUUxQkJFN0U3OTQyMDgwMkIxMjAwMkEyRTg1QkMxOEIyNEM5
QzgzMEY0QUU4RTEyRDJFMjhERUE5RUFFMkI4NTM4MUU4REJDRDlENTVEMjg2RDIy
MUJEREQ4OTA4Mzk2MEYxNDNERTYxQkI0RUVBMzE4MTczOTY1RDI2NDFDMkMxMThG
REE2RTJFQzQ5RDVEMzRFOEZFNDI5MDA5RTlBMEVCODlFN0MxRjdFQTMxM0NFN0JG
NTBGN0Y4NTUyODM5QkEzQTRGNDBDNTBCMDlCOTBDODY0NkEzQjJCMzQ5REE3MkI4
OTgzRDE2OEY0NUE5RDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3AJgXBuDjehcXKbFgoMfadLvbBNb4EEtNkgjPsTgl1t/cgzqwh2L
7Hsk8wAddTPLvN+H2uzghpicxsZpmkc/hllby8xaWvHu06XzwltJhC6FakvDUhRS
hXb8YN5nK3IXOvL31Rsq/+/ygUMQKvWnqKYkyr43ooNWfLJG3uxDTHIelc3Xx6Bi
Hhu+fnlCCAKxIAKi6FvBiyTJyDD0ro4S0uKN6p6uK4U4Ho282dVdKG0iG93YkIOW
DxQ95hu07qMYFzll0mQcLBGP2m4uxJ1dNOj+QpAJ6aDriefB9+oxPOe/UPf4VSg5
ujpPQMULCbkMhkajsrNJ2nK4mD0Wj0Wp1QIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FNIWCVeDNndLAqy0QFcKBGTd/dDaMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMTJlMzMzMTJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMkfMA0GCSqG
SIb3DQEBCwUAA4IBAQCFNc0BcgXJBgtNVDZSm/DQtZNXfSYHMlNuidohU7UV6Cot
bjzJ7feKgXwdVoC6tSsLBDy+jgx5eDh/vqFzYpvnG0z8/OreTkJw4InltVfnAAY3
oZ2EDtK72eAsUKBjO+rjKzQ8MKOZttmEmsuJuSXIix5AY4fijWSWq2LKoO4y2aWZ
+ZsicJJRCF0/PLTCerv7bnCgkrAD4xiMNEDavD+4evrNiGHp2LzJCAPNYehqj0dS
n8SZMUL+1uws74C+DHyJVUiVKXH4Nx5JKgIUcsYB1wPFSmbR06VE4l8lVU2dOeQU
8madZzH6tIcGxRgrxp9Z4Ui7sHlY9X8fH8/T0+zc
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:56:20 2025 by rpki-client