Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
File: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (raw, json)
Hash identifier: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=
Subject key identifier: 29:C1:66:B7:41:CA:A1:05:0A:F2:70:B6:DB:DD:FB:47:5A:E4:59:9D
Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial: 5BC0539C743A7A9FC65E8E0E0744CCE5E9004C5C
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
Signing time: Thu 06 Mar 2025 03:16:35 +0000
ROA not before: Thu 06 Mar 2025 03:11:35 +0000
ROA not after: Thu 05 Mar 2026 03:16:35 +0000
asID: 264350
IP address blocks: 131.108.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c0:53:9c:74:3a:7a:9f:c6:5e:8e:0e:07:44:cc:e5:e9:00:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Validity
Not Before: Mar 6 03:11:35 2025 GMT
Not After : Mar 5 03:16:35 2026 GMT
Subject: CN=29C166B741CAA1050AF270B6DBDDFB475AE4599D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:9d:9b:23:64:24:09:8d:ae:c4:fb:f8:60:
f9:48:20:48:b8:e9:46:3d:ee:b1:f9:90:09:ff:55:
8c:33:93:b9:a9:36:b7:1b:63:22:43:0c:ad:03:03:
4a:e1:f7:00:da:cc:17:c7:97:90:97:0b:67:a5:92:
8f:bd:57:99:87:6a:1f:0b:ae:60:fa:8c:e1:98:39:
98:c6:1e:93:3d:c3:c9:1f:6c:e4:85:c3:5c:a7:e9:
00:a3:61:64:f2:b8:5a:79:9c:1c:d6:76:7e:3a:69:
d7:e6:e3:5d:09:74:be:f8:c9:01:45:57:09:3d:c0:
28:8b:e2:5a:b6:ea:70:b8:d2:db:27:e5:0a:67:45:
15:6b:8e:7b:88:fc:28:20:c6:a0:63:10:05:ec:31:
ef:32:0e:31:86:28:7e:0a:e7:74:50:5e:74:ca:82:
22:e4:69:b7:de:77:7d:43:04:88:58:c0:0f:24:86:
41:23:25:9c:f2:70:33:be:9a:d8:03:a1:3d:ae:81:
be:f4:7f:14:5f:d5:2f:57:b0:7e:fe:63:25:5d:39:
d7:c3:fd:20:de:2e:f1:99:ab:d8:52:3a:b7:06:ed:
9f:f1:2f:30:06:ac:89:57:1e:b3:3a:5b:9a:3d:ef:
fa:ff:a7:16:20:f3:7e:26:5f:df:b6:68:08:7c:1f:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:66:B7:41:CA:A1:05:0A:F2:70:B6:DB:DD:FB:47:5A:E4:59:9D
X509v3 Authority Key Identifier:
keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:9a:60:96:21:9b:a6:5a:77:09:60:8c:c5:07:87:b4:5d:c7:
19:ee:f0:69:8b:da:31:95:34:da:1b:04:d7:39:28:56:1f:37:
4c:bd:5d:24:7b:c1:93:ed:d9:9a:45:8e:95:ff:18:a4:f0:2f:
9b:3e:0f:02:a3:e1:ce:d2:c0:29:7d:c7:6c:0a:16:ed:49:21:
50:c8:d5:4e:be:3b:f2:ac:13:e5:0b:47:a2:4e:b9:31:e2:b5:
38:d4:26:62:03:1b:a2:7e:31:ea:88:1d:7b:c9:8e:8d:b3:c9:
14:ed:5b:8e:2b:3b:49:6f:fe:dd:2b:7e:92:e8:38:25:4a:cf:
65:b0:12:1e:e1:b7:06:3c:1d:4a:b4:49:7b:4a:1c:78:ee:64:
e0:cd:8c:ca:09:21:82:b9:5d:96:db:72:d5:59:d9:63:97:16:
fb:c7:53:ba:52:69:02:bd:19:2a:0a:0b:6b:ea:7c:0b:0c:d6:
09:e9:a4:3d:c6:bf:75:3e:a1:49:41:a4:d2:f8:1e:16:e9:f3:
95:51:8e:71:dd:1c:33:c6:ce:90:ec:42:3d:0b:7f:45:6d:79:
23:7c:90:f1:a3:63:95:82:3c:50:ae:e5:8e:99:db:72:a1:c4:
41:d4:40:d0:ea:4d:bc:4b:84:bc:06:b4:c7:0b:05:87:fd:da:
2e:d4:90:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW8BTnHQ6ep/GXo4OB0TM5ekATFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg2RjBCQkZFRkFCMjRDOTBEQ0M0NUQ3NDNDOTIzMzcy
NTFCMkNBNzAeFw0yNTAzMDYwMzExMzVaFw0yNjAzMDUwMzE2MzVaMDMxMTAvBgNV
BAMTKDI5QzE2NkI3NDFDQUExMDUwQUYyNzBCNkRCRERGQjQ3NUFFNDU5OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HJ2bI2QkCY2uxPv4YPlIIEi4
6UY97rH5kAn/VYwzk7mpNrcbYyJDDK0DA0rh9wDazBfHl5CXC2elko+9V5mHah8L
rmD6jOGYOZjGHpM9w8kfbOSFw1yn6QCjYWTyuFp5nBzWdn46adfm410JdL74yQFF
Vwk9wCiL4lq26nC40tsn5QpnRRVrjnuI/CggxqBjEAXsMe8yDjGGKH4K53RQXnTK
giLkabfed31DBIhYwA8khkEjJZzycDO+mtgDoT2ugb70fxRf1S9XsH7+YyVdOdfD
/SDeLvGZq9hSOrcG7Z/xLzAGrIlXHrM6W5o97/r/pxYg834mX9+2aAh8Hz2FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKcFmt0HKoQUK8nC22937R1rkWZ0wHwYDVR0j
BBgwFoAUaG8Lv++rJMkNzEXXQ8kjNyUbLKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZv
ZjIvMS82ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NkYwQkJGRUZBQjI0Qzkw
RENDNDVENzQzQzkyMzM3MjUxQjJDQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hmcWIzUjVnSzJTUTNLdmd4ejZEaG5IM25MMTI1U3czQWpqMndNWG1mb2YyLzEv
MzEzMzMxMmUzMTMwMzgyZTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDbFwwDQYJKoZIhvcNAQELBQADggEBAJKaYJYh
m6ZadwlgjMUHh7Rdxxnu8GmL2jGVNNobBNc5KFYfN0y9XSR7wZPt2ZpFjpX/GKTw
L5s+DwKj4c7SwCl9x2wKFu1JIVDI1U6+O/KsE+ULR6JOuTHitTjUJmIDG6J+MeqI
HXvJjo2zyRTtW44rO0lv/t0rfpLoOCVKz2WwEh7htwY8HUq0SXtKHHjuZODNjMoJ
IYK5XZbbctVZ2WOXFvvHU7pSaQK9GSoKC2vqfAsM1gnppD3Gv3U+oUlBpNL4Hhbp
85VRjnHdHDPGzpDsQj0Lf0VteSN8kPGjY5WCPFCu5Y6Z23KhxEHUQNDqTbxLhLwG
tMcLBYf92i7UkNc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:36 2025 by rpki-client