Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32342d3234203d3e20323634343936.roa
File: 3134332e3235352e3230342e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier: 7etO3UN5QdoYWzuEKlR0TwtLCJDvlt7DVy8mU6keDAQ=
Subject key identifier: 35:0D:BE:21:A1:56:16:AB:31:79:87:79:7F:3C:98:93:59:8A:7D:4F
Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial: 5B6F43F6EDEAC9C55A697BCDB1CB71113C01A112
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32342d3234203d3e20323634343936.roa
Signing time: Tue 25 Feb 2025 10:18:16 +0000
ROA not before: Tue 25 Feb 2025 10:13:16 +0000
ROA not after: Tue 24 Feb 2026 10:18:16 +0000
asID: 264496
IP address blocks: 143.255.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6f:43:f6:ed:ea:c9:c5:5a:69:7b:cd:b1:cb:71:11:3c:01:a1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Validity
Not Before: Feb 25 10:13:16 2025 GMT
Not After : Feb 24 10:18:16 2026 GMT
Subject: CN=350DBE21A15616AB317987797F3C9893598A7D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:62:a8:e4:ce:0a:31:01:74:b3:25:37:23:
67:2d:f4:50:49:13:52:b0:b3:04:24:a7:bc:fc:a8:
1f:ed:17:b9:d5:42:98:9e:ca:f1:57:df:9a:cd:35:
1e:3c:0b:50:02:55:54:c1:8f:ea:11:11:28:9c:a4:
01:37:b9:02:ac:c5:90:10:cc:a1:a2:c8:60:d7:d0:
35:07:25:30:5b:4a:59:8f:75:d3:0d:4c:31:9a:48:
69:c7:5f:c6:23:ee:ff:b2:79:7b:ab:5b:03:6b:d3:
c1:3f:c0:17:8e:52:ac:50:a5:ab:7d:f4:e5:65:7e:
a4:31:7e:4d:10:5a:7f:e9:3a:50:3c:3b:c3:48:35:
d8:2f:a0:d7:ba:32:61:5b:3a:78:ef:25:44:87:1c:
de:16:b5:f1:3b:ce:b1:0c:c0:24:d3:2e:2d:48:65:
29:7e:4c:4f:84:11:b1:e4:b0:c8:c3:84:97:61:12:
95:f9:cd:78:4e:36:5c:4b:0a:d2:1f:27:fd:d7:28:
83:ca:3f:05:87:ff:4d:e0:c8:bc:83:f2:dd:b6:13:
e8:41:63:12:c7:f5:cf:8e:a9:c8:4b:ab:5b:56:cd:
46:38:ca:38:1a:73:6e:26:9a:c8:c3:b3:26:38:5b:
91:a1:a5:e7:5d:a3:d4:9b:1c:af:86:77:8c:68:01:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:BE:21:A1:56:16:AB:31:79:87:79:7F:3C:98:93:59:8A:7D:4F
X509v3 Authority Key Identifier:
keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32342d3234203d3e20323634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e7:de:bf:d4:9b:1f:71:9f:93:0a:13:eb:02:eb:98:dc:c9:
a6:57:e9:c3:ee:d4:f4:66:53:ee:a5:20:8a:3d:98:82:be:56:
ad:67:0d:55:5c:d4:f3:70:7c:0d:58:a3:10:b6:dc:07:c5:36:
e5:67:33:27:bf:1b:0c:4f:6d:6b:2e:a4:46:8b:b4:68:61:75:
9a:b8:09:bd:aa:dc:42:50:f9:2e:93:e4:e4:c7:b7:6f:10:2e:
04:04:4b:4f:23:2b:a8:d4:3d:42:e0:5a:b1:78:14:97:74:4b:
be:2e:a9:04:fe:59:13:f2:d0:89:22:35:5b:de:1a:d3:6d:3f:
ad:cd:41:11:42:18:21:20:1a:9f:14:47:f4:ad:79:37:a6:29:
60:11:6a:99:c0:a5:3c:61:29:ce:f0:1c:95:55:ea:ea:f8:4d:
30:28:d3:96:75:b9:31:31:79:fe:e3:59:e2:52:c1:db:e9:31:
16:30:fc:80:83:ad:24:22:24:6a:6d:00:bc:a1:d7:7f:e6:23:
57:05:b3:d1:bc:b2:ce:89:23:40:6d:1b:f2:5e:4d:dc:57:1f:
f2:c6:35:09:90:6e:0b:4e:6d:61:67:1f:24:bc:eb:ee:1e:49:
e4:97:bd:31:17:33:78:13:69:e8:47:19:09:07:35:cd:19:db:
f7:95:78:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW29D9u3qycVaaXvNsctxETwBoRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTAyMjUxMDEzMTZaFw0yNjAyMjQxMDE4MTZaMDMxMTAvBgNV
BAMTKDM1MERCRTIxQTE1NjE2QUIzMTc5ODc3OTdGM0M5ODkzNTk4QTdENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRmKo5M4KMQF0syU3I2ct9FBJ
E1KwswQkp7z8qB/tF7nVQpieyvFX35rNNR48C1ACVVTBj+oRESicpAE3uQKsxZAQ
zKGiyGDX0DUHJTBbSlmPddMNTDGaSGnHX8Yj7v+yeXurWwNr08E/wBeOUqxQpat9
9OVlfqQxfk0QWn/pOlA8O8NINdgvoNe6MmFbOnjvJUSHHN4WtfE7zrEMwCTTLi1I
ZSl+TE+EEbHksMjDhJdhEpX5zXhONlxLCtIfJ/3XKIPKPwWH/03gyLyD8t22E+hB
YxLH9c+OqchLq1tWzUY4yjgac24mmsjDsyY4W5Ghpeddo9SbHK+Gd4xoAQbfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNQ2+IaFWFqsxeYd5fzyYk1mKfU8wHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzNDMzMmUzMjM1MzUyZTMyMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI//zDANBgkqhkiG9w0BAQsFAAOCAQEAdefe
v9SbH3GfkwoT6wLrmNzJplfpw+7U9GZT7qUgij2Ygr5WrWcNVVzU83B8DVijELbc
B8U25WczJ78bDE9tay6kRou0aGF1mrgJvarcQlD5LpPk5Me3bxAuBARLTyMrqNQ9
QuBasXgUl3RLvi6pBP5ZE/LQiSI1W94a020/rc1BEUIYISAanxRH9K15N6YpYBFq
mcClPGEpzvAclVXq6vhNMCjTlnW5MTF5/uNZ4lLB2+kxFjD8gIOtJCIkam0AvKHX
f+YjVwWz0byyzokjQG0b8l5N3Fcf8sY1CZBuC05tYWcfJLzr7h5J5Je9MRczeBNp
6EcZCQc1zRnb95V4jQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:34 2025 by rpki-client