Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32322d3232203d3e20323730333438.roa
File: 3139302e38332e32382e302f32322d3232203d3e20323730333438.roa (raw, json)
Hash identifier: KVQzLNp9GCdJoDuDpptxgiD3ReeV0zWZJ77N6vPvAOc=
Subject key identifier: 97:9E:3C:D5:8F:C7:33:48:08:1B:6E:8B:D6:EE:8D:E9:81:67:83:6C
Certificate issuer: /CN=02E066E542EE01043797860D397E283E252CA08A
Certificate serial: 707A1B47F97A5302C182407F9F3D5BD30FE08C23
Authority key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32322d3232203d3e20323730333438.roa
Signing time: Tue 21 Jan 2025 19:05:39 +0000
ROA not before: Tue 21 Jan 2025 19:00:39 +0000
ROA not after: Tue 20 Jan 2026 19:05:39 +0000
asID: 270348
IP address blocks: 190.83.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7a:1b:47:f9:7a:53:02:c1:82:40:7f:9f:3d:5b:d3:0f:e0:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E066E542EE01043797860D397E283E252CA08A
Validity
Not Before: Jan 21 19:00:39 2025 GMT
Not After : Jan 20 19:05:39 2026 GMT
Subject: CN=979E3CD58FC73348081B6E8BD6EE8DE98167836C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:a1:72:44:fc:7d:67:70:ac:e8:f8:c5:5e:
41:89:09:8f:f7:01:f1:5a:fa:09:25:d0:3d:9b:ae:
13:eb:a1:0c:ba:79:fe:60:7f:2b:63:70:cf:5b:24:
93:0d:58:e5:f0:5f:8b:25:37:8e:54:0f:39:62:93:
64:cf:8e:53:ab:9c:64:6f:70:29:90:11:e5:06:32:
c0:5e:76:c8:39:f9:92:01:2b:3f:94:fd:b3:e6:fc:
bb:b7:de:3c:5c:9f:51:aa:0a:4b:6f:c4:6e:6c:7d:
e1:d3:3d:c2:9d:39:10:39:bd:d9:d1:4b:e6:36:09:
99:27:34:b0:cd:a0:9e:68:48:0e:51:2d:0a:f1:cb:
0a:05:ab:76:e8:60:af:31:d6:16:c9:63:87:58:3f:
64:f5:71:56:06:70:fb:3c:a8:d2:26:c0:3b:a8:8c:
9a:9c:b8:a1:07:60:33:e1:69:c2:a1:44:db:ce:29:
13:78:d3:7f:96:2d:d6:15:0e:fb:79:84:e8:95:85:
02:bd:90:4d:d8:92:b9:f6:9a:5a:7a:68:4a:d3:d4:
fb:9b:a9:b5:af:16:5d:94:31:ce:ef:97:28:24:c7:
34:bf:94:bf:5f:48:47:ba:be:cf:65:e8:6d:e0:80:
ea:17:a9:c7:c6:03:73:44:6d:e1:a3:26:6b:81:5d:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:3C:D5:8F:C7:33:48:08:1B:6E:8B:D6:EE:8D:E9:81:67:83:6C
X509v3 Authority Key Identifier:
keyid:02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32322d3232203d3e20323730333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.28.0/22
Signature Algorithm: sha256WithRSAEncryption
51:aa:49:4e:aa:f7:bd:be:ee:8f:ec:d7:f9:86:81:be:c7:44:
2b:f4:51:5f:5e:5e:da:78:fb:4c:44:89:5b:60:21:03:ea:c2:
0f:6b:8f:94:3d:26:b8:93:b8:97:d7:f3:0a:01:34:1f:e7:57:
78:25:3a:88:6b:a3:81:63:09:55:59:31:56:fc:ec:2b:d6:60:
12:61:38:0a:9e:e8:72:ec:bf:03:71:8e:d9:87:1a:b4:83:b8:
75:8e:2b:4d:53:d0:a4:de:63:c3:6c:38:08:91:3f:80:4f:5e:
3a:51:d6:17:f4:23:cf:40:08:e3:44:67:c8:e6:0d:c7:93:32:
a4:e7:c2:d4:ad:9f:1a:cf:65:0d:0f:ec:d2:89:68:d9:67:93:
fb:c8:87:a2:3d:d5:c7:74:aa:67:00:41:2c:de:11:5b:34:2f:
a8:fb:ca:4f:b9:f8:af:07:c6:90:86:7a:29:c0:d5:bd:a2:e9:
fd:66:fd:6b:86:57:b4:92:44:79:fe:85:de:bb:88:c7:8c:99:
8e:eb:f5:f7:79:f4:69:4a:bc:24:be:c5:aa:13:5f:2f:ef:f4:
55:d2:83:39:e2:59:f3:68:57:69:cf:66:d2:f3:3f:71:49:cb:
1e:9c:44:d1:21:71:6a:bf:46:ea:3a:5e:b7:70:3f:f3:28:1f:
55:a8:1a:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcHobR/l6UwLBgkB/nz1b0w/gjCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJFMDY2RTU0MkVFMDEwNDM3OTc4NjBEMzk3RTI4M0Uy
NTJDQTA4QTAeFw0yNTAxMjExOTAwMzlaFw0yNjAxMjAxOTA1MzlaMDMxMTAvBgNV
BAMTKDk3OUUzQ0Q1OEZDNzMzNDgwODFCNkU4QkQ2RUU4REU5ODE2NzgzNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqKFyRPx9Z3Cs6PjFXkGJCY/3
AfFa+gkl0D2brhProQy6ef5gfytjcM9bJJMNWOXwX4slN45UDzlik2TPjlOrnGRv
cCmQEeUGMsBedsg5+ZIBKz+U/bPm/Lu33jxcn1GqCktvxG5sfeHTPcKdORA5vdnR
S+Y2CZknNLDNoJ5oSA5RLQrxywoFq3boYK8x1hbJY4dYP2T1cVYGcPs8qNImwDuo
jJqcuKEHYDPhacKhRNvOKRN403+WLdYVDvt5hOiVhQK9kE3Ykrn2mlp6aErT1Pub
qbWvFl2UMc7vlygkxzS/lL9fSEe6vs9l6G3ggOoXqcfGA3NEbeGjJmuBXTzrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUl5481Y/HM0gIG26L1u6N6YFng2wwHwYDVR0j
BBgwFoAUAuBm5ULuAQQ3l4YNOX4oPiUsoIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RqOEFmZldueGhhcWpzUFRpem00cTRldURIZENGNDJKY25uSkFvamJR
bk0vMC8wMkUwNjZFNTQyRUUwMTA0Mzc5Nzg2MEQzOTdFMjgzRTI1MkNBMDhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRTA2NkU1NDJFRTAxMDQz
Nzk3ODYwRDM5N0UyODNFMjUyQ0EwOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dkajhBZmZXbnhoYXFqc1BUaXptNHE0ZXVESGRDRjQySmNubkpBb2piUW5NLzAv
MzEzOTMwMmUzODMzMmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMw
MzMzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvlMcMA0GCSqGSIb3DQEBCwUAA4IBAQBRqklOqve9
vu6P7Nf5hoG+x0Qr9FFfXl7aePtMRIlbYCED6sIPa4+UPSa4k7iX1/MKATQf51d4
JTqIa6OBYwlVWTFW/Owr1mASYTgKnuhy7L8DcY7Zhxq0g7h1jitNU9Ck3mPDbDgI
kT+AT146UdYX9CPPQAjjRGfI5g3HkzKk58LUrZ8az2UND+zSiWjZZ5P7yIeiPdXH
dKpnAEEs3hFbNC+o+8pPufivB8aQhnopwNW9oun9Zv1rhle0kkR5/oXeu4jHjJmO
6/X3efRpSrwkvsWqE18v7/RV0oM54lnzaFdpz2bS8z9xScsenETRIXFqv0bqOl63
cD/zKB9VqBqT
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:08:41 2025 by rpki-client