Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
File: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (raw, json)
Hash identifier: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=
Subject key identifier: 95:58:CF:AB:B7:8A:85:12:4E:35:DE:61:F4:C3:AC:4C:22:57:12:C3
Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Certificate serial: 78E2D74E18175BC0811808D901B388F8C12C4A42
Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
Signing time: Fri 07 Mar 2025 01:17:33 +0000
ROA not before: Fri 07 Mar 2025 01:12:33 +0000
ROA not after: Fri 06 Mar 2026 01:17:33 +0000
asID: 270282
IP address blocks: 201.71.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e2:d7:4e:18:17:5b:c0:81:18:08:d9:01:b3:88:f8:c1:2c:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Validity
Not Before: Mar 7 01:12:33 2025 GMT
Not After : Mar 6 01:17:33 2026 GMT
Subject: CN=9558CFABB78A85124E35DE61F4C3AC4C225712C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:90:71:78:1c:7f:bf:63:a8:2d:58:98:f4:
20:2d:cc:d4:8c:d2:72:fe:73:65:e9:f0:36:a7:78:
85:1d:8e:2d:5f:25:e2:2d:83:17:0c:93:ba:20:7d:
89:ee:3f:79:3e:61:42:32:72:ff:1e:4b:4a:80:79:
26:d7:6d:05:79:d7:58:3b:10:b6:83:ee:d7:68:d7:
22:c0:d0:19:54:dc:34:6c:fa:3e:45:bf:e1:42:8a:
d1:e1:8f:81:f5:5e:70:ce:13:60:b2:3f:7f:4b:a8:
c4:30:8f:1c:49:45:4d:e7:6b:7c:b3:07:59:78:e5:
90:fb:cb:14:9d:53:29:e5:c5:53:fa:57:f0:a9:7a:
23:29:96:c9:97:c1:ab:ef:42:2c:b4:61:57:15:f0:
3a:53:73:93:47:f6:ab:34:a0:d2:b5:2f:d9:7b:ca:
af:9f:5f:f4:4b:a5:0b:3c:9e:37:fe:b1:2b:a5:a6:
ab:e1:04:86:65:11:f9:f2:c5:15:c7:c6:ff:99:1a:
e7:e5:52:f8:c6:2f:4a:ea:36:0c:3a:8e:ae:dd:af:
61:78:7f:af:a5:44:38:61:bd:c1:d7:ad:99:ba:f6:
16:8c:42:c4:3e:7f:ea:5d:d5:24:f2:92:2e:2b:23:
59:a4:83:95:75:f1:00:56:86:68:87:a0:48:91:af:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:CF:AB:B7:8A:85:12:4E:35:DE:61:F4:C3:AC:4C:22:57:12:C3
X509v3 Authority Key Identifier:
keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e5:7b:24:ca:36:fe:b7:ad:fe:f2:5d:45:23:1b:dd:36:89:
75:15:85:0a:38:26:00:de:59:7c:1c:3f:09:bb:bf:87:43:4c:
73:1d:31:e3:d5:6e:2c:a9:68:26:f8:0c:24:02:c0:a6:98:50:
3e:c0:bb:79:71:71:10:26:c8:47:28:ab:9b:b2:15:d5:4a:13:
e4:c1:90:30:bc:6c:54:3e:6e:e9:6a:58:8d:5c:cd:0b:c3:93:
21:0a:39:78:e4:56:f6:9d:67:1c:47:5d:75:9c:b7:b6:ee:fb:
96:2f:50:fd:a2:1a:0c:dd:80:03:5b:b7:a7:8c:2a:2e:92:61:
31:9e:7f:09:43:90:c0:fd:4b:35:65:f5:46:66:f0:ae:3f:a8:
d0:69:b1:a3:ae:69:92:59:5c:af:1f:af:b2:07:ce:02:3a:a4:
0b:06:4c:e4:76:80:84:66:31:88:25:c9:ae:ac:8d:ac:ae:3a:
20:c8:87:ac:69:c9:06:2a:75:0d:fa:9e:41:9a:6c:0e:54:4b:
93:26:1e:be:24:ff:e5:03:91:ef:84:bf:de:bb:e5:0e:55:ef:
42:0e:ca:dc:87:97:cc:9f:c6:e8:00:60:00:5e:ec:8b:7d:b6:
9c:95:ab:2f:d0:c1:8f:5b:58:65:69:23:2b:1c:a6:0c:88:77:
c0:0b:5a:93
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeOLXThgXW8CBGAjZAbOI+MEsSkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE
MjI3ODc0NDAeFw0yNTAzMDcwMTEyMzNaFw0yNjAzMDYwMTE3MzNaMDMxMTAvBgNV
BAMTKDk1NThDRkFCQjc4QTg1MTI0RTM1REU2MUY0QzNBQzRDMjI1NzEyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSZBxeBx/v2OoLViY9CAtzNSM
0nL+c2Xp8DaneIUdji1fJeItgxcMk7ogfYnuP3k+YUIycv8eS0qAeSbXbQV511g7
ELaD7tdo1yLA0BlU3DRs+j5Fv+FCitHhj4H1XnDOE2CyP39LqMQwjxxJRU3na3yz
B1l45ZD7yxSdUynlxVP6V/CpeiMplsmXwavvQiy0YVcV8DpTc5NH9qs0oNK1L9l7
yq+fX/RLpQs8njf+sSulpqvhBIZlEfnyxRXHxv+ZGuflUvjGL0rqNgw6jq7dr2F4
f6+lRDhhvcHXrZm69haMQsQ+f+pd1STyki4rI1mkg5V18QBWhmiHoEiRr4ubAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlVjPq7eKhRJONd5h9MOsTCJXEsMwHwYDVR0j
BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF
OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG
MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtRWJCMjc2S29SRW1abkpVeXozTjdaWEwxY1M3YjUyem1menlMWVNVRTllLzEv
MzIzMDMxMmUzNzMxMmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMy
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMlHBzANBgkqhkiG9w0BAQsFAAOCAQEATeV7JMo2/ret
/vJdRSMb3TaJdRWFCjgmAN5ZfBw/Cbu/h0NMcx0x49VuLKloJvgMJALApphQPsC7
eXFxECbIRyirm7IV1UoT5MGQMLxsVD5u6WpYjVzNC8OTIQo5eORW9p1nHEdddZy3
tu77li9Q/aIaDN2AA1u3p4wqLpJhMZ5/CUOQwP1LNWX1Rmbwrj+o0Gmxo65pkllc
rx+vsgfOAjqkCwZM5HaAhGYxiCXJrqyNrK46IMiHrGnJBip1DfqeQZpsDlRLkyYe
viT/5QOR74S/3rvlDlXvQg7K3IeXzJ/G6ABgAF7si322nJWrL9DBj1tYZWkjKxym
DIh3wAtakw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:59:13 2025 by rpki-client