Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa
File: 3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa (raw, json)
Hash identifier: WvIyz0O3nrvFcJHF5fxL++/WSlBbRmeBi+knh9eAK5U=
Subject key identifier: 1D:29:F7:FB:96:74:DF:9A:B8:CF:D1:4E:0B:B7:2E:A9:A5:F6:E7:62
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 47623F7250F5D79F9CD3CA02AEAA84F5212EE194
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 14:01:26 +0000
ROA not before: Tue 14 Jan 2025 13:56:26 +0000
ROA not after: Tue 13 Jan 2026 14:01:26 +0000
asID: 270997
IP address blocks: 138.99.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:62:3f:72:50:f5:d7:9f:9c:d3:ca:02:ae:aa:84:f5:21:2e:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:56:26 2025 GMT
Not After : Jan 13 14:01:26 2026 GMT
Subject: CN=1D29F7FB9674DF9AB8CFD14E0BB72EA9A5F6E762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:3a:c5:8a:4f:ee:99:b1:4c:fc:04:7c:11:
b9:b2:f2:73:34:46:fc:01:ab:c5:99:f9:02:3b:85:
1a:79:2c:43:c7:c2:23:8d:5d:5d:4a:f7:98:dd:8a:
75:bb:15:14:66:00:22:53:10:df:33:74:06:6f:e3:
40:3a:79:0e:5d:84:5a:e9:65:93:f5:f3:4c:3a:15:
83:a5:a4:ba:93:5f:19:9f:b6:e9:50:76:77:ec:13:
36:41:36:c9:55:03:57:33:c3:47:86:81:40:b8:3f:
c6:61:ce:09:22:97:6e:6f:d1:2b:75:d1:52:7d:e2:
b3:05:dd:ab:13:b5:62:fd:70:29:a9:95:a8:f6:1d:
d5:08:d5:90:10:61:66:a9:d8:cc:98:ce:0f:84:91:
15:cd:95:17:e2:ff:d9:2a:40:ce:12:cd:4c:e7:cc:
2f:07:b5:69:94:d3:7f:d9:71:ba:bc:0a:94:35:bd:
f4:b3:67:2c:e7:fe:2c:92:68:91:91:0b:f9:e0:b2:
b2:58:83:e7:da:65:0a:22:93:1b:cb:01:20:a2:44:
7e:53:47:b8:a2:ba:22:7e:b6:f0:c4:c7:e5:3a:07:
e8:f9:c8:d8:13:67:16:91:c9:75:e1:67:99:6c:7b:
cf:07:48:b8:5d:b2:7d:2e:1a:df:7e:77:1c:4a:a5:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:F7:FB:96:74:DF:9A:B8:CF:D1:4E:0B:B7:2E:A9:A5:F6:E7:62
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0f:e3:d5:3d:e5:37:bc:62:71:47:7c:66:dd:2a:fc:28:fe:
8a:a1:7c:c4:b0:4e:a6:f3:b3:20:ce:37:62:03:db:48:05:8b:
ca:17:f9:68:eb:59:fa:4c:ad:3d:25:d8:1e:38:89:9a:f8:5a:
08:34:93:2a:5c:e2:a4:a6:fb:22:76:84:90:12:7a:c7:6e:23:
44:21:d6:d4:c0:80:9f:ca:75:07:c5:d7:a4:84:d9:72:3e:5c:
3a:4b:27:89:6a:2a:19:c3:77:d2:65:9a:53:ac:76:a5:aa:17:
57:a9:33:0d:6a:a7:4b:a7:12:2e:e3:39:95:99:8e:64:d3:ea:
7e:5d:77:a7:b8:70:2a:a7:a6:14:5f:b2:81:78:40:ff:70:51:
a0:47:a0:36:af:85:7e:8f:1a:0d:5d:fa:94:7b:61:51:fd:e2:
35:4a:a4:06:db:14:a2:a8:45:82:aa:ca:59:89:36:b8:bb:f0:
e9:cb:26:19:72:4b:65:97:df:8e:4f:08:31:26:b1:18:ab:bb:
a3:d6:4b:7a:fb:52:a8:13:3d:f0:96:b4:22:a7:50:bc:a4:e2:
7c:f7:c0:e7:2a:08:61:63:ce:ee:ec:ff:e3:00:5d:f8:18:2b:
a2:ba:6f:05:ed:10:78:d9:7b:7b:5c:4a:73:27:9f:7e:63:bf:
33:4a:bc:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR2I/clD115+c08oCrqqE9SEu4ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y2RkFFOUNBMzNFRDAxRjdEMTE3RkQzNTA5MUJBOEFG
NDRGRjBBMjAeFw0yNTAxMTQxMzU2MjZaFw0yNjAxMTMxNDAxMjZaMDMxMTAvBgNV
BAMTKDFEMjlGN0ZCOTY3NERGOUFCOENGRDE0RTBCQjcyRUE5QTVGNkU3NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMTrFik/umbFM/AR8Ebmy8nM0
RvwBq8WZ+QI7hRp5LEPHwiONXV1K95jdinW7FRRmACJTEN8zdAZv40A6eQ5dhFrp
ZZP180w6FYOlpLqTXxmftulQdnfsEzZBNslVA1czw0eGgUC4P8Zhzgkil25v0St1
0VJ94rMF3asTtWL9cCmplaj2HdUI1ZAQYWap2MyYzg+EkRXNlRfi/9kqQM4SzUzn
zC8HtWmU03/Zcbq8CpQ1vfSzZyzn/iySaJGRC/ngsrJYg+faZQoikxvLASCiRH5T
R7iiuiJ+tvDEx+U6B+j5yNgTZxaRyXXhZ5lse88HSLhdsn0uGt9+dxxKpe5TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHSn3+5Z035q4z9FOC7cuqaX252IwHwYDVR0j
BBgwFoAUf2+unKM+0B99EX/TUJG6ivRP8KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhXZTZCdnB3WkJLWjRUTFVWUnFEb0ZUYndSRGI4dXpnN3dqSnI4Vjlh
Q00vMC83RjZGQUU5Q0EzM0VEMDFGN0QxMTdGRDM1MDkxQkE4QUY0NEZGMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGNkZBRTlDQTMzRUQwMUY3
RDExN0ZEMzUwOTFCQThBRjQ0RkYwQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoV2U2QnZwd1pCS1o0VExVVlJxRG9GVGJ3UkRiOHV6Zzd3akpyOFY5YUNNLzAv
MzEzMzM4MmUzOTM5MmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKY34wDQYJKoZIhvcNAQELBQADggEBAE8P49U9
5Te8YnFHfGbdKvwo/oqhfMSwTqbzsyDON2ID20gFi8oX+WjrWfpMrT0l2B44iZr4
Wgg0kypc4qSm+yJ2hJASesduI0Qh1tTAgJ/KdQfF16SE2XI+XDpLJ4lqKhnDd9Jl
mlOsdqWqF1epMw1qp0unEi7jOZWZjmTT6n5dd6e4cCqnphRfsoF4QP9wUaBHoDav
hX6PGg1d+pR7YVH94jVKpAbbFKKoRYKqylmJNri78OnLJhlyS2WX345PCDEmsRir
u6PWS3r7UqgTPfCWtCKnULyk4nz3wOcqCGFjzu7s/+MAXfgYK6K6bwXtEHjZe3tc
SnMnn35jvzNKvIM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:52 2025 by rpki-client