Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137302e38312e3234342e302f32322d3234203d3e203532383636.roa
File: 3137302e38312e3234342e302f32322d3234203d3e203532383636.roa (raw, json)
Hash identifier: MJDbdojEju6ksAJmVXUl6ZgIgmfsIdNN9ANSV4I3vSE=
Subject key identifier: 34:FC:84:EE:54:5D:B3:CA:25:7D:C2:7A:F0:AF:B6:5F:DB:39:99:E6
Certificate issuer: /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial: 118F36968907BF90081637ABA8F2E19C65B73576
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137302e38312e3234342e302f32322d3234203d3e203532383636.roa
Signing time: Wed 12 Jul 2023 21:00:34 +0000
ROA not before: Wed 12 Jul 2023 20:55:34 +0000
ROA not after: Wed 10 Jul 2024 21:00:34 +0000
asID: 52866
IP address blocks: 170.81.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8f:36:96:89:07:bf:90:08:16:37:ab:a8:f2:e1:9c:65:b7:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Validity
Not Before: Jul 12 20:55:34 2023 GMT
Not After : Jul 10 21:00:34 2024 GMT
Subject: CN=34FC84EE545DB3CA257DC27AF0AFB65FDB3999E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:26:2b:ec:39:c3:1a:f0:f5:08:0a:67:c0:
91:fe:1d:69:aa:38:be:e4:ec:7a:a0:ce:77:58:d4:
3a:62:5e:8d:f2:60:18:b8:ac:88:43:62:94:95:ce:
d9:33:d3:e6:b2:e4:60:3b:f9:b9:51:99:b0:4f:54:
e5:05:25:92:d3:ed:5b:9a:79:24:44:1c:64:55:42:
05:0c:69:ea:91:8c:f4:f0:3f:75:f8:4d:36:94:16:
15:50:a8:3f:8d:9f:aa:89:82:e5:a2:27:89:79:b5:
59:e8:76:19:e3:47:5c:d6:d1:dd:ee:eb:38:ee:48:
74:cd:cc:cd:e5:60:08:9b:83:83:35:a1:d1:95:66:
70:07:11:06:36:5b:71:28:f6:03:b7:e5:58:93:6b:
5b:97:44:ad:ed:52:c6:25:22:4a:4f:24:cc:64:ab:
56:6d:d5:01:74:dd:12:e6:19:a9:bf:c7:97:7f:35:
6b:4d:6d:38:68:18:c2:29:fc:c7:b4:cc:1f:b9:3f:
97:b3:39:6f:f0:50:14:a5:8c:68:3e:32:75:88:da:
82:a5:7f:32:6d:f5:60:f6:2a:2e:65:3e:4a:0f:5a:
aa:d1:70:b7:c6:3e:05:78:4a:ec:d4:95:32:7e:c4:
ac:3e:e2:86:5d:b7:4c:47:c3:76:ef:fd:80:08:b8:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FC:84:EE:54:5D:B3:CA:25:7D:C2:7A:F0:AF:B6:5F:DB:39:99:E6
X509v3 Authority Key Identifier:
keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137302e38312e3234342e302f32322d3234203d3e203532383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.244.0/22
Signature Algorithm: sha256WithRSAEncryption
39:89:e1:57:1a:60:cb:3e:3f:47:b4:fb:a9:c8:49:d4:de:d6:
f7:a5:1b:54:9f:34:a0:f8:fb:be:70:68:59:54:14:1d:78:80:
97:3c:04:a1:83:a0:ec:4b:b4:a5:a9:00:bf:13:e9:51:60:82:
1b:01:21:b8:28:0d:ca:b6:1d:52:54:09:cf:05:86:69:80:09:
c2:a3:20:33:cd:35:30:11:c8:f1:a5:cf:ab:fc:87:38:4c:e1:
51:43:e6:65:18:ef:e0:35:45:0d:5e:bd:e1:a6:77:61:54:94:
c4:16:25:f8:de:23:ca:ba:7f:28:f3:ea:4f:5d:4a:86:a9:65:
a7:d1:da:d7:a4:5c:95:8e:c4:6c:88:33:e6:af:92:e9:f3:a2:
58:5f:c3:29:0e:f6:b4:71:c0:8f:02:78:62:48:8d:bf:82:c1:
c5:a1:54:af:bc:01:60:1c:12:15:3f:da:60:22:3c:d3:b1:6b:
95:e0:ef:fa:ec:fa:5e:e1:a5:b6:90:46:90:72:24:db:15:0a:
ca:29:8d:d1:07:84:be:a8:12:0e:44:0c:87:88:6f:6a:4e:58:
47:36:b1:ed:35:5e:27:e6:91:2d:b6:39:6d:bb:52:36:e7:48:
88:c6:ef:00:41:a2:54:b7:55:db:41:2e:b4:f6:c1:39:67:0a:
5f:7f:ce:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEY82lokHv5AIFjerqPLhnGW3NXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE3OTM3Qjg5RjNCMDg2MTQ5MEIzREQ2MTc0QkUxRDUx
QUQyQTk0QzAeFw0yMzA3MTIyMDU1MzRaFw0yNDA3MTAyMTAwMzRaMDMxMTAvBgNV
BAMTKDM0RkM4NEVFNTQ1REIzQ0EyNTdEQzI3QUYwQUZCNjVGREIzOTk5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLCYr7DnDGvD1CApnwJH+HWmq
OL7k7HqgzndY1DpiXo3yYBi4rIhDYpSVztkz0+ay5GA7+blRmbBPVOUFJZLT7Vua
eSREHGRVQgUMaeqRjPTwP3X4TTaUFhVQqD+Nn6qJguWiJ4l5tVnodhnjR1zW0d3u
6zjuSHTNzM3lYAibg4M1odGVZnAHEQY2W3Eo9gO35ViTa1uXRK3tUsYlIkpPJMxk
q1Zt1QF03RLmGam/x5d/NWtNbThoGMIp/Me0zB+5P5ezOW/wUBSljGg+MnWI2oKl
fzJt9WD2Ki5lPkoPWqrRcLfGPgV4SuzUlTJ+xKw+4oZdt0xHw3bv/YAIuBhfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNPyE7lRds8olfcJ68K+2X9s5meYwHwYDVR0j
BBgwFoAU2nk3uJ87CGFJCz3WF0vh1RrSqUwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDQ1aThmTm9UMkc5eXFWSnNlb2QxdjhOb0x2RVQ3Z0F3a0wzSHlnOHEx
ODIvMC9EQTc5MzdCODlGM0IwODYxNDkwQjNERDYxNzRCRTFENTFBRDJBOTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RBNzkzN0I4OUYzQjA4NjE0
OTBCM0RENjE3NEJFMUQ1MUFEMkE5NEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0NWk4Zk5vVDJHOXlxVkpzZW9kMXY4Tm9MdkVUN2dBd2tMM0h5ZzhxMTgyLzAv
MzEzNzMwMmUzODMxMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzgzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlH0MA0GCSqGSIb3DQEBCwUAA4IBAQA5ieFXGmDL
Pj9HtPupyEnU3tb3pRtUnzSg+Pu+cGhZVBQdeICXPAShg6DsS7SlqQC/E+lRYIIb
ASG4KA3Kth1SVAnPBYZpgAnCoyAzzTUwEcjxpc+r/Ic4TOFRQ+ZlGO/gNUUNXr3h
pndhVJTEFiX43iPKun8o8+pPXUqGqWWn0drXpFyVjsRsiDPmr5Lp86JYX8MpDva0
ccCPAnhiSI2/gsHFoVSvvAFgHBIVP9pgIjzTsWuV4O/67Ppe4aW2kEaQciTbFQrK
KY3RB4S+qBIORAyHiG9qTlhHNrHtNV4n5pEttjltu1I250iIxu8AQaJUt1XbQS60
9sE5Zwpff84/
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:14 2025 by rpki-client