Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
File: 3137372e33382e3139302e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier: U8khVwoO/ODduo+mERrn/WTa95G0RaqetOcn1QmzEaY=
Subject key identifier: 85:12:DC:D2:B6:E8:A7:FB:66:3A:E8:A6:D5:05:C7:A5:CD:CA:73:6E
Certificate issuer: /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial: 66420C0411CFA09BBC47C1A48C9C091AF2AD268C
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
Signing time: Tue 12 Mar 2024 18:18:27 +0000
ROA not before: Tue 12 Mar 2024 18:13:27 +0000
ROA not after: Tue 11 Mar 2025 18:18:27 +0000
asID: 52758
IP address blocks: 177.38.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:42:0c:04:11:cf:a0:9b:bc:47:c1:a4:8c:9c:09:1a:f2:ad:26:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Validity
Not Before: Mar 12 18:13:27 2024 GMT
Not After : Mar 11 18:18:27 2025 GMT
Subject: CN=8512DCD2B6E8A7FB663AE8A6D505C7A5CDCA736E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:c5:36:0c:d8:1d:4c:f6:ee:e5:a6:13:2e:
f1:94:6b:08:70:49:f7:db:31:52:fb:88:6d:cc:e4:
57:0e:d2:14:8a:1d:e6:f8:26:ce:66:2b:be:8c:8c:
14:93:0f:a0:ed:e4:d6:b0:ad:f4:7f:57:9b:66:95:
1e:b6:64:3d:7d:e3:c6:28:e2:b0:74:f1:84:f8:8f:
79:ac:4a:2e:bf:f6:03:ec:3f:82:9e:a5:26:c9:7f:
36:e6:04:4f:64:39:37:82:b0:10:87:67:84:ac:bb:
d2:80:e3:ad:76:51:f9:71:d1:f9:d6:eb:fe:ed:6e:
6e:ee:52:09:f8:89:64:05:93:fe:11:c9:0b:1f:9b:
b4:a2:70:e7:97:44:eb:8a:1e:bc:c2:a5:83:68:5d:
48:c5:48:0e:1c:c6:4a:86:f4:5c:f8:93:90:ee:fc:
11:49:17:12:a5:84:cf:8c:27:b9:be:61:b0:34:53:
6a:6c:73:2e:26:7e:86:c1:f3:71:f4:27:9f:df:3d:
e6:6e:10:04:37:63:42:c0:01:9f:92:f6:4f:e2:ed:
0d:c9:ba:7f:77:59:bf:ab:c8:ec:16:a2:67:cf:c6:
90:de:56:6a:40:ff:7a:a4:b2:43:75:82:c5:85:c0:
05:84:a9:4c:94:25:bc:83:88:b5:09:c8:bb:4d:18:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:DC:D2:B6:E8:A7:FB:66:3A:E8:A6:D5:05:C7:A5:CD:CA:73:6E
X509v3 Authority Key Identifier:
keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.190.0/23
Signature Algorithm: sha256WithRSAEncryption
76:4c:1c:9c:30:da:28:7d:53:22:51:68:f1:dd:e7:ac:e8:58:
7d:88:f5:cd:29:34:6b:a8:92:85:6d:71:7e:d9:8d:a9:e1:09:
e7:28:55:c6:8b:97:1f:f5:f9:e5:5c:04:1e:de:6e:30:25:31:
0a:6d:95:05:54:c4:d4:1f:af:1b:62:46:dd:37:34:51:79:95:
2a:63:21:ab:34:2e:f3:81:c3:fe:30:87:38:b4:bc:7d:7b:03:
5f:36:5e:92:05:13:4e:cb:67:da:43:c8:04:53:25:fe:fc:57:
c2:9b:96:b3:2e:f3:8a:f8:af:28:92:5d:b6:78:04:0e:30:99:
5a:fd:6a:5e:47:67:28:d8:ab:76:7e:df:15:2c:b0:71:b8:36:
de:b5:ee:f7:c9:80:8c:88:72:54:99:9d:00:2f:dc:7d:13:5f:
45:26:81:90:21:1c:e6:b6:52:b5:b8:0f:1d:b0:92:2b:c4:3d:
3e:30:b5:58:15:01:64:ef:98:91:18:ca:ae:e1:71:48:f0:67:
1b:c3:a5:66:f9:d3:a5:c8:c3:22:3f:9e:0f:c9:5d:40:a6:f3:
ea:20:0c:71:5e:ba:45:cd:4e:59:76:32:76:ad:47:c9:4b:13:
6b:76:bf:ae:60:cd:d8:ec:0a:ff:ba:c8:2f:35:40:45:85:b9:
87:d1:5f:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZkIMBBHPoJu8R8GkjJwJGvKtJowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEzMjdaFw0yNTAzMTExODE4MjdaMDMxMTAvBgNV
BAMTKDg1MTJEQ0QyQjZFOEE3RkI2NjNBRThBNkQ1MDVDN0E1Q0RDQTczNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb48U2DNgdTPbu5aYTLvGUawhw
SffbMVL7iG3M5FcO0hSKHeb4Js5mK76MjBSTD6Dt5NawrfR/V5tmlR62ZD1948Yo
4rB08YT4j3msSi6/9gPsP4KepSbJfzbmBE9kOTeCsBCHZ4Ssu9KA4612Uflx0fnW
6/7tbm7uUgn4iWQFk/4RyQsfm7SicOeXROuKHrzCpYNoXUjFSA4cxkqG9Fz4k5Du
/BFJFxKlhM+MJ7m+YbA0U2pscy4mfobB83H0J5/fPeZuEAQ3Y0LAAZ+S9k/i7Q3J
un93Wb+ryOwWomfPxpDeVmpA/3qkskN1gsWFwAWEqUyUJbyDiLUJyLtNGNPpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhRLc0rbop/tmOuim1QXHpc3Kc24wHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzEzNzM3MmUzMzM4MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSa+MA0GCSqGSIb3DQEBCwUAA4IBAQB2TBycMNoo
fVMiUWjx3ees6Fh9iPXNKTRrqJKFbXF+2Y2p4QnnKFXGi5cf9fnlXAQe3m4wJTEK
bZUFVMTUH68bYkbdNzRReZUqYyGrNC7zgcP+MIc4tLx9ewNfNl6SBRNOy2faQ8gE
UyX+/FfCm5azLvOK+K8okl22eAQOMJla/WpeR2co2Kt2ft8VLLBxuDbete73yYCM
iHJUmZ0AL9x9E19FJoGQIRzmtlK1uA8dsJIrxD0+MLVYFQFk75iRGMqu4XFI8Gcb
w6Vm+dOlyMMiP54PyV1ApvPqIAxxXrpFzU5ZdjJ2rUfJSxNrdr+uYM3Y7Ar/usgv
NUBFhbmH0V+q
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:15 2025 by rpki-client