Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
File: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=
Subject key identifier: CB:AC:E5:04:03:15:7D:7D:A1:4B:07:7A:36:74:68:EC:B8:26:18:DD
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 16F8B219E79658676BC04ECEB47F7DE1CB7375A2
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
Signing time: Thu 06 Mar 2025 14:53:30 +0000
ROA not before: Thu 06 Mar 2025 14:48:30 +0000
ROA not after: Thu 05 Mar 2026 14:53:30 +0000
asID: 53029
IP address blocks: 168.181.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f8:b2:19:e7:96:58:67:6b:c0:4e:ce:b4:7f:7d:e1:cb:73:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Mar 6 14:48:30 2025 GMT
Not After : Mar 5 14:53:30 2026 GMT
Subject: CN=CBACE50403157D7DA14B077A367468ECB82618DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:16:a9:5f:5a:ff:fa:69:89:28:d0:1f:27:
dd:3a:70:af:7e:85:ed:03:66:2c:46:aa:00:3b:dd:
49:18:a5:30:45:b3:15:0c:01:d6:9f:56:e2:db:83:
e9:2e:f5:24:d4:f4:74:1d:63:ed:07:b7:7a:cc:77:
49:96:79:cb:0d:17:99:b9:d5:c1:03:58:ce:a1:16:
30:f2:4c:3d:63:b2:ef:92:82:32:d5:58:72:83:d9:
31:ea:a7:e3:a0:dd:17:64:76:09:95:cc:50:52:6f:
a2:a9:92:03:e2:e7:d1:39:92:c9:98:3c:fa:91:34:
b7:18:62:3a:ea:3d:2d:b5:d7:b0:13:08:e2:fb:1b:
0f:52:57:d1:c8:f4:9a:89:34:e8:ad:e3:0c:c0:3b:
f6:02:d8:dc:32:0b:6b:80:b4:bb:1c:fc:35:70:3d:
5d:2b:ec:48:50:35:44:3a:a5:84:f2:fe:6b:18:9c:
59:6e:ff:4c:10:2d:48:fc:c5:e2:c9:7a:00:97:ac:
9f:9b:6b:6f:00:c8:0a:2b:d2:18:75:3e:3d:87:e3:
96:3e:5e:1a:64:4c:c4:5d:08:a2:d4:09:99:a6:6c:
12:df:a0:34:31:95:7d:de:84:71:26:85:2b:33:dc:
51:a8:de:0b:d3:39:7d:1f:4a:ec:00:b5:95:57:12:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:E5:04:03:15:7D:7D:A1:4B:07:7A:36:74:68:EC:B8:26:18:DD
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.40.0/22
Signature Algorithm: sha256WithRSAEncryption
79:1e:f5:d9:92:f4:43:fc:11:c4:7e:dd:19:b7:1e:69:36:71:
97:5b:8f:30:cc:0e:80:c7:1e:28:d1:6a:69:ab:a5:4d:e3:05:
4a:bc:1b:29:30:fa:e0:29:cf:94:2d:1d:d7:92:42:33:ed:3b:
21:59:23:0b:33:e9:23:f3:17:dd:58:bd:ab:40:23:69:5b:f4:
21:d6:0e:01:53:78:88:ba:5a:a1:14:5f:1d:86:43:5f:29:b1:
8b:b2:72:64:b8:62:fe:59:55:50:36:c4:12:28:16:f5:6a:f2:
60:7e:7f:78:d7:b4:ee:32:c3:a1:1d:82:3f:ef:3e:7c:73:49:
fc:aa:86:2b:f8:65:43:68:8c:cd:78:e4:b2:62:c1:e4:e4:eb:
1b:73:c1:c8:e5:d0:4f:00:b8:c3:a5:0c:f7:35:99:95:6c:fb:
e1:37:6f:28:70:ce:cb:04:86:f6:c4:e1:bd:63:bd:ec:d0:b5:
f2:8f:f7:48:7d:6c:d1:4f:7b:f1:90:38:3e:3c:4a:bd:e5:b9:
eb:1e:08:4a:72:a4:0f:3b:68:dd:59:03:7d:77:24:18:6b:3f:
25:c7:af:b1:30:bf:ea:30:cf:d5:c5:f7:68:d6:fa:8f:45:9c:
b6:97:cc:56:7a:6f:e6:f0:60:17:f6:5c:ec:b9:69:cf:e9:f0:
7f:ed:cc:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFviyGeeWWGdrwE7OtH994ctzdaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC
NTAzMkZDMDAeFw0yNTAzMDYxNDQ4MzBaFw0yNjAzMDUxNDUzMzBaMDMxMTAvBgNV
BAMTKENCQUNFNTA0MDMxNTdEN0RBMTRCMDc3QTM2NzQ2OEVDQjgyNjE4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QBapX1r/+mmJKNAfJ906cK9+
he0DZixGqgA73UkYpTBFsxUMAdafVuLbg+ku9STU9HQdY+0Ht3rMd0mWecsNF5m5
1cEDWM6hFjDyTD1jsu+SgjLVWHKD2THqp+Og3RdkdgmVzFBSb6KpkgPi59E5ksmY
PPqRNLcYYjrqPS2117ATCOL7Gw9SV9HI9JqJNOit4wzAO/YC2NwyC2uAtLsc/DVw
PV0r7EhQNUQ6pYTy/msYnFlu/0wQLUj8xeLJegCXrJ+ba28AyAor0hh1Pj2H45Y+
XhpkTMRdCKLUCZmmbBLfoDQxlX3ehHEmhSsz3FGo3gvTOX0fSuwAtZVXElOfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy6zlBAMVfX2hSwd6NnRo7LgmGN0wHwYDVR0j
BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW
RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG
QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzWnFFTXpDOXBtMkZoVjZacTJYck56SjFCdUJmNU5DOEZqNFg2S0JHVkZFLzEv
MzEzNjM4MmUzMTM4MzEyZTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqLUoMA0GCSqGSIb3DQEBCwUAA4IBAQB5HvXZkvRD
/BHEft0Ztx5pNnGXW48wzA6Axx4o0Wppq6VN4wVKvBspMPrgKc+ULR3XkkIz7Tsh
WSMLM+kj8xfdWL2rQCNpW/Qh1g4BU3iIulqhFF8dhkNfKbGLsnJkuGL+WVVQNsQS
KBb1avJgfn9417TuMsOhHYI/7z58c0n8qoYr+GVDaIzNeOSyYsHk5Osbc8HI5dBP
ALjDpQz3NZmVbPvhN28ocM7LBIb2xOG9Y73s0LXyj/dIfWzRT3vxkDg+PEq95bnr
HghKcqQPO2jdWQN9dyQYaz8lx6+xML/qMM/Vxfdo1vqPRZy2l8xWem/m8GAX9lzs
uWnP6fB/7czZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:31 2025 by rpki-client