Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa
File: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (raw, json)
Hash identifier: mkCQh8EDg8ox84JdfnIofTxT3TloXhpN2UsaG8wsdsY=
Subject key identifier: 86:38:1A:35:6A:51:7C:3E:A2:06:93:F8:F3:64:C0:87:BF:3C:D3:EA
Certificate issuer: /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial: 520C8D8E8C1B20EAB48501A7BC094391A868E6F3
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa
Signing time: Thu 20 Mar 2025 16:57:12 +0000
ROA not before: Thu 20 Mar 2025 16:52:12 +0000
ROA not after: Thu 19 Mar 2026 16:57:12 +0000
asID: 263470
IP address blocks: 170.83.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0c:8d:8e:8c:1b:20:ea:b4:85:01:a7:bc:09:43:91:a8:68:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Validity
Not Before: Mar 20 16:52:12 2025 GMT
Not After : Mar 19 16:57:12 2026 GMT
Subject: CN=86381A356A517C3EA20693F8F364C087BF3CD3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:4b:cd:66:c9:88:52:4d:e2:bd:84:08:bb:
ba:8d:07:f7:7b:de:33:b1:9f:91:b2:33:a4:48:9c:
f3:51:a8:65:46:c4:e3:5a:d2:92:e2:92:1a:4c:81:
99:a3:8e:dc:99:f5:61:38:3f:1c:66:fc:44:29:d2:
0a:dc:dc:8e:7d:a9:20:aa:d3:16:62:23:5d:7e:85:
af:b5:33:30:6f:8a:73:3e:1a:0a:d4:44:b2:1b:d1:
c1:c0:5d:75:ea:55:e3:4c:11:97:8d:65:77:c2:46:
a0:b1:5f:ac:b0:f6:d2:c8:6d:a4:7d:45:05:da:62:
b1:ba:27:70:02:e7:46:b2:29:6e:e5:58:85:7c:9e:
22:a2:03:c4:06:21:8d:a7:5f:a7:f1:a5:e3:71:99:
bd:bd:ac:e5:f2:6b:5f:d6:fb:8b:47:b7:24:e2:d2:
d4:d3:0d:60:b8:9c:07:b5:e9:9d:34:d0:32:b7:32:
39:b2:bf:a6:36:6a:3f:30:4f:8b:51:17:46:5c:80:
fb:08:ab:bd:82:f6:50:a7:bc:a4:11:e8:47:36:be:
95:05:06:bc:ec:0d:3e:1a:15:b4:83:26:c5:4c:1b:
15:4d:6c:b6:fd:85:9d:d4:29:23:ef:99:e2:e0:58:
cc:8a:f8:f5:62:18:fe:8a:74:f7:28:b2:8c:44:84:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:1A:35:6A:51:7C:3E:A2:06:93:F8:F3:64:C0:87:BF:3C:D3:EA
X509v3 Authority Key Identifier:
keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.200.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e5:6d:af:86:2d:42:49:59:8a:66:34:1e:4e:e4:70:f7:40:
ba:8a:55:d8:98:78:7e:4a:8d:ea:03:a6:4f:75:23:bb:65:07:
41:12:64:05:67:69:59:23:25:9b:66:c2:24:f5:69:2e:aa:36:
d2:69:2c:5c:4d:5c:ef:2b:ff:b3:6d:c8:60:3d:f7:5a:5c:6e:
dc:7a:35:84:9d:2d:cf:4b:25:c6:9b:fb:22:89:7e:3d:28:ea:
6d:ee:10:af:a7:23:e9:45:90:68:ae:5c:d2:b2:aa:59:4e:52:
a5:b9:d6:36:0a:16:1e:53:af:78:fb:9f:b7:77:9a:44:95:e5:
3c:1a:22:0f:e9:02:e4:28:1b:08:4f:0d:e0:86:fb:5b:68:2d:
84:6a:97:9f:82:bf:4e:e8:a1:6f:e7:bd:b8:57:3e:89:f5:73:
05:0a:ac:6c:7f:a8:50:ed:10:3a:bb:bf:94:da:10:35:38:c3:
1f:66:7e:a2:0e:9e:12:b8:85:0d:f0:5e:db:14:25:e9:22:10:
59:8c:af:e7:c9:24:0b:8f:e7:06:7d:d2:11:bb:51:02:b0:02:
c2:a1:7b:a6:bb:69:74:be:13:f5:3b:4d:3e:33:85:39:44:67:
51:b6:db:86:e1:96:96:4d:83:cd:f9:50:bc:ad:c8:af:1c:e3:
9e:91:6b:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUgyNjowbIOq0hQGnvAlDkaho5vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNzM3RjUyREE2MjczRTIzQTBFMUM4QkJCOUVDMURD
OEY0NDZBNDAeFw0yNTAzMjAxNjUyMTJaFw0yNjAzMTkxNjU3MTJaMDMxMTAvBgNV
BAMTKDg2MzgxQTM1NkE1MTdDM0VBMjA2OTNGOEYzNjRDMDg3QkYzQ0QzRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgEvNZsmIUk3ivYQIu7qNB/d7
3jOxn5GyM6RInPNRqGVGxONa0pLikhpMgZmjjtyZ9WE4Pxxm/EQp0grc3I59qSCq
0xZiI11+ha+1MzBvinM+GgrURLIb0cHAXXXqVeNMEZeNZXfCRqCxX6yw9tLIbaR9
RQXaYrG6J3AC50ayKW7lWIV8niKiA8QGIY2nX6fxpeNxmb29rOXya1/W+4tHtyTi
0tTTDWC4nAe16Z000DK3Mjmyv6Y2aj8wT4tRF0ZcgPsIq72C9lCnvKQR6Ec2vpUF
BrzsDT4aFbSDJsVMGxVNbLb9hZ3UKSPvmeLgWMyK+PViGP6KdPcosoxEhJm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhjgaNWpRfD6iBpP482TAh7880+owHwYDVR0j
BBgwFoAUrrc39S2mJz4joOHIu7nsHcj0RqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2
UFkvMC9BRUI3MzdGNTJEQTYyNzNFMjNBMEUxQzhCQkI5RUMxREM4RjQ0NkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQjczN0Y1MkRBNjI3M0Uy
M0EwRTFDOEJCQjlFQzFEQzhGNDQ2QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4UzFIa2JNVUo3NEhxYWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAv
MzEzNzMwMmUzODMzMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqU8gwDQYJKoZIhvcNAQELBQADggEBAETlba+G
LUJJWYpmNB5O5HD3QLqKVdiYeH5KjeoDpk91I7tlB0ESZAVnaVkjJZtmwiT1aS6q
NtJpLFxNXO8r/7NtyGA991pcbtx6NYSdLc9LJcab+yKJfj0o6m3uEK+nI+lFkGiu
XNKyqllOUqW51jYKFh5Tr3j7n7d3mkSV5TwaIg/pAuQoGwhPDeCG+1toLYRql5+C
v07ooW/nvbhXPon1cwUKrGx/qFDtEDq7v5TaEDU4wx9mfqIOnhK4hQ3wXtsUJeki
EFmMr+fJJAuP5wZ90hG7UQKwAsKhe6a7aXS+E/U7TT4zhTlEZ1G224bhlpZNg835
ULytyK8c456Razs=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:33 2025 by rpki-client