Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
File: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (raw, json)
Hash identifier: P0RfTJJBKMCwHlQNY6B4YysuDWbqgRP+uMy8I3GdAMI=
Subject key identifier: E8:B0:6E:65:7B:8A:38:EB:BD:7E:90:47:24:78:C8:B8:E7:B5:CE:44
Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial: 6EE74B5976C4764418674B62548FC5130DEDD816
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
Signing time: Wed 11 Dec 2024 11:16:28 +0000
ROA not before: Wed 11 Dec 2024 11:11:28 +0000
ROA not after: Wed 10 Dec 2025 11:16:28 +0000
asID: 61719
IP address blocks: 131.0.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e7:4b:59:76:c4:76:44:18:67:4b:62:54:8f:c5:13:0d:ed:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Validity
Not Before: Dec 11 11:11:28 2024 GMT
Not After : Dec 10 11:16:28 2025 GMT
Subject: CN=E8B06E657B8A38EBBD7E90472478C8B8E7B5CE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:06:e7:dc:68:ae:6f:1e:ab:d6:e1:22:4e:
43:73:90:29:49:ec:12:36:ca:4f:e5:5d:32:1a:6e:
b8:de:38:41:0b:82:a0:25:22:6d:05:5b:20:fe:1d:
14:37:24:c3:5a:cc:57:96:6b:b6:61:28:bd:6a:25:
0b:22:dc:58:ea:2c:94:64:8a:4e:67:52:8a:df:a5:
5a:cf:5e:51:56:52:95:7c:59:6d:d2:27:07:19:cc:
ea:34:43:ea:be:22:ed:87:6b:5c:0f:66:ca:f3:6e:
2c:34:f6:eb:00:d2:1b:ec:ec:13:00:2b:0a:15:ce:
4d:c3:79:bf:ae:e0:f8:ea:ec:23:39:c5:7d:30:07:
b3:f3:fc:66:26:bd:68:0d:9a:11:07:0a:44:64:56:
5c:f5:e3:78:19:e5:8b:49:35:b5:f5:74:ce:ab:78:
e2:7e:7a:89:54:fe:6e:8a:d2:b9:cd:93:16:d5:55:
09:da:08:59:19:3b:01:ef:64:8f:84:20:23:43:39:
f3:06:d1:ac:f1:f3:37:1c:25:f2:fe:03:c7:20:6a:
2f:e0:7c:a4:9e:a1:14:71:37:47:f0:06:9b:3d:98:
09:78:09:c1:77:9d:07:36:55:92:12:4c:7b:0c:23:
0f:4e:e2:8d:71:8c:ff:7f:d4:78:50:f4:ef:e5:07:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:6E:65:7B:8A:38:EB:BD:7E:90:47:24:78:C8:B8:E7:B5:CE:44
X509v3 Authority Key Identifier:
keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.194.0/23
Signature Algorithm: sha256WithRSAEncryption
16:0a:34:33:b7:30:3e:c0:18:7c:f6:dd:31:c2:74:39:f8:d9:
bf:d2:ac:93:bd:0e:d0:eb:de:fc:a7:b5:22:d8:5f:68:46:e4:
f4:11:a6:f7:2a:cf:89:aa:47:5a:67:27:79:d3:ec:c4:85:fc:
29:3c:a7:71:f2:fe:6a:bd:e9:3b:c3:ac:02:54:fc:85:ef:77:
77:47:73:1b:de:4c:c7:8c:20:1d:ba:d0:b2:e3:46:73:b8:06:
51:8e:b5:a8:a9:91:9c:c4:35:ca:4a:a9:a5:34:42:4b:ca:27:
f2:90:bf:62:3b:57:d6:fe:a4:16:e4:b6:25:85:c8:f8:ae:7c:
7b:ef:38:e6:df:39:fd:1b:bb:60:44:a6:25:58:46:f8:a7:66:
4c:68:c8:ae:1c:d2:98:c8:c5:ac:eb:78:c6:b1:e9:4c:9f:0b:
75:4d:29:02:5d:12:d7:4f:ef:b4:68:d3:ae:64:c1:6b:73:d1:
a6:26:3d:05:be:44:18:c9:c4:98:ba:74:89:64:b5:af:f7:be:
c1:58:e0:9c:d6:73:81:36:a7:af:ee:97:11:e0:31:32:11:25:
d0:27:43:83:6b:a0:a9:02:c3:ff:96:c7:6c:92:6c:8e:6e:07:
2a:f5:3f:8a:dc:86:02:e7:87:88:3e:ec:3a:dc:6d:ae:5d:8e:
49:82:93:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbudLWXbEdkQYZ0tiVI/FEw3t2BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4
OTgyNzFFQTAeFw0yNDEyMTExMTExMjhaFw0yNTEyMTAxMTE2MjhaMDMxMTAvBgNV
BAMTKEU4QjA2RTY1N0I4QTM4RUJCRDdFOTA0NzI0NzhDOEI4RTdCNUNFNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6Abn3Giubx6r1uEiTkNzkClJ
7BI2yk/lXTIabrjeOEELgqAlIm0FWyD+HRQ3JMNazFeWa7ZhKL1qJQsi3FjqLJRk
ik5nUorfpVrPXlFWUpV8WW3SJwcZzOo0Q+q+Iu2Ha1wPZsrzbiw09usA0hvs7BMA
KwoVzk3Deb+u4Pjq7CM5xX0wB7Pz/GYmvWgNmhEHCkRkVlz143gZ5YtJNbX1dM6r
eOJ+eolU/m6K0rnNkxbVVQnaCFkZOwHvZI+EICNDOfMG0azx8zccJfL+A8cgai/g
fKSeoRRxN0fwBps9mAl4CcF3nQc2VZISTHsMIw9O4o1xjP9/1HhQ9O/lBw4hAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6LBuZXuKOOu9fpBHJHjIuOe1zkQwHwYDVR0j
BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK
M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC
MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzS0RwclI5Q0RpWHUxM2o2bnpFemhXY1RuSk5kQ0ZRTjMyajRiVDZoSjNTLzAv
MzEzMzMxMmUzMDJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM3
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYMAwjANBgkqhkiG9w0BAQsFAAOCAQEAFgo0M7cwPsAY
fPbdMcJ0OfjZv9Ksk70O0Ove/Ke1IthfaEbk9BGm9yrPiapHWmcnedPsxIX8KTyn
cfL+ar3pO8OsAlT8he93d0dzG95Mx4wgHbrQsuNGc7gGUY61qKmRnMQ1ykqppTRC
S8on8pC/YjtX1v6kFuS2JYXI+K58e+845t85/Ru7YESmJVhG+KdmTGjIrhzSmMjF
rOt4xrHpTJ8LdU0pAl0S10/vtGjTrmTBa3PRpiY9Bb5EGMnEmLp0iWS1r/e+wVjg
nNZzgTanr+6XEeAxMhEl0CdDg2ugqQLD/5bHbJJsjm4HKvU/ityGAueHiD7sOtxt
rl2OSYKTlQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:28 2025 by rpki-client