Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32322d3234203d3e20323636343430.roa
File: 3137302e38322e32302e302f32322d3234203d3e20323636343430.roa (raw, json)
Hash identifier: T9B6S3+xZPh2z8qg7c7WQor9fbcnygmd8F2SveeBlT4=
Subject key identifier: 02:CC:A6:AF:88:AB:FA:2A:4D:FE:CD:65:97:66:5F:D7:E2:24:35:17
Certificate issuer: /CN=A0BF272263CB0F3B93DC90643A26B1B201C8CA5E
Certificate serial: 688786C1A93A2015A0D7C3EA024980A1D6F0AF57
Authority key identifier: A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32322d3234203d3e20323636343430.roa
Signing time: Thu 07 Dec 2023 18:07:14 +0000
ROA not before: Thu 07 Dec 2023 18:02:14 +0000
ROA not after: Thu 05 Dec 2024 18:07:14 +0000
asID: 266440
IP address blocks: 170.82.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:87:86:c1:a9:3a:20:15:a0:d7:c3:ea:02:49:80:a1:d6:f0:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0BF272263CB0F3B93DC90643A26B1B201C8CA5E
Validity
Not Before: Dec 7 18:02:14 2023 GMT
Not After : Dec 5 18:07:14 2024 GMT
Subject: CN=02CCA6AF88ABFA2A4DFECD6597665FD7E2243517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:49:bc:24:b0:78:c0:60:b8:35:03:88:f0:
52:98:10:04:72:c7:13:7a:06:04:d7:af:d1:06:ab:
68:c0:a2:b9:1d:2c:c6:31:df:19:6a:62:d0:12:bc:
93:f8:1c:dc:15:e7:9a:17:7a:c4:74:f8:ad:5c:ce:
90:8a:be:1c:ee:26:dd:b2:8f:62:33:7b:30:bd:23:
03:24:60:9c:0f:95:57:23:4e:4e:5d:20:2f:f5:01:
3a:a0:67:e2:a8:42:f3:a3:0f:ec:53:fd:20:1e:fa:
23:6a:a9:d3:77:7e:68:e6:a8:d1:c2:b6:d8:27:d7:
cd:a1:28:6b:20:f7:b8:1e:28:92:6b:c2:f3:0c:4d:
4e:a9:cd:a0:02:a4:98:d6:17:c9:a0:d6:74:3d:06:
09:2a:5d:4c:e0:38:d2:e8:a8:77:37:87:ce:49:83:
c9:c4:83:49:ac:e3:71:d8:01:c3:b5:0a:41:01:1c:
a3:13:db:39:b2:90:90:b8:66:46:af:43:60:3d:0e:
f7:8c:50:65:5b:35:d6:c1:45:61:05:06:97:4b:0e:
b2:6d:36:06:55:8e:b4:8e:f4:ba:95:ec:40:42:63:
69:46:98:64:5a:c6:b4:27:2e:52:8c:36:20:cc:29:
1b:fd:c5:e6:5d:89:2c:b2:f0:45:e9:e4:81:c3:38:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:A6:AF:88:AB:FA:2A:4D:FE:CD:65:97:66:5F:D7:E2:24:35:17
X509v3 Authority Key Identifier:
keyid:A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32322d3234203d3e20323636343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.20.0/22
Signature Algorithm: sha256WithRSAEncryption
88:eb:59:d8:1b:23:74:b9:ed:6f:1c:9f:1d:27:b2:16:3c:0f:
ce:e2:bf:93:c5:df:27:28:2d:ed:86:81:c2:64:1a:17:a3:01:
8f:10:ea:1b:8f:ab:c8:28:ff:96:66:8b:48:b0:b2:1b:8c:59:
10:ab:f9:99:f9:9f:97:2a:32:13:78:9c:8f:8e:ef:bf:15:af:
c0:b8:73:df:84:fc:6a:1b:c2:11:76:7b:e7:57:7a:a1:f4:a4:
ce:b4:fa:2e:70:6b:3a:a1:27:c6:96:d9:e4:b1:d2:e5:1b:e4:
92:8c:7b:a4:42:c0:fd:e1:eb:90:cc:31:59:0a:08:69:2a:8e:
84:b2:fd:ed:20:a1:34:6b:c9:c9:d9:3e:04:71:7f:e7:5e:2d:
7a:39:8d:86:fa:81:0b:1f:48:40:8f:46:33:b5:e1:11:09:d4:
b8:91:7f:5a:4f:af:a5:61:fc:27:cd:de:7a:65:aa:98:7f:82:
ef:28:1f:0d:4a:a8:33:22:00:de:e3:8e:85:f2:30:a2:03:f8:
07:8f:27:33:88:c5:08:b0:f2:b2:88:c2:12:a2:bc:28:c3:af:
c9:26:9f:6a:4a:bb:dd:a0:ce:ef:9a:47:3d:81:c0:a9:76:ca:
c4:46:2f:bb:f3:0b:3c:a2:1e:95:be:e0:04:bd:f3:c6:8b:8f:
6f:26:b1:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaIeGwak6IBWg18PqAkmAodbwr1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCRjI3MjI2M0NCMEYzQjkzREM5MDY0M0EyNkIxQjIw
MUM4Q0E1RTAeFw0yMzEyMDcxODAyMTRaFw0yNDEyMDUxODA3MTRaMDMxMTAvBgNV
BAMTKDAyQ0NBNkFGODhBQkZBMkE0REZFQ0Q2NTk3NjY1RkQ3RTIyNDM1MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZEm8JLB4wGC4NQOI8FKYEARy
xxN6BgTXr9EGq2jAorkdLMYx3xlqYtASvJP4HNwV55oXesR0+K1czpCKvhzuJt2y
j2IzezC9IwMkYJwPlVcjTk5dIC/1ATqgZ+KoQvOjD+xT/SAe+iNqqdN3fmjmqNHC
ttgn182hKGsg97geKJJrwvMMTU6pzaACpJjWF8mg1nQ9BgkqXUzgONLoqHc3h85J
g8nEg0ms43HYAcO1CkEBHKMT2zmykJC4ZkavQ2A9DveMUGVbNdbBRWEFBpdLDrJt
NgZVjrSO9LqV7EBCY2lGmGRaxrQnLlKMNiDMKRv9xeZdiSyy8EXp5IHDONTXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAsymr4ir+ipN/s1ll2Zf1+IkNRcwHwYDVR0j
BBgwFoAUoL8nImPLDzuT3JBkOiaxsgHIyl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC9BMEJGMjcyMjYzQ0IwRjNCOTNEQzkwNjQzQTI2QjFCMjAxQzhDQTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwQkYyNzIyNjNDQjBGM0I5
M0RDOTA2NDNBMjZCMUIyMDFDOENBNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzEzNzMwMmUzODMyMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlIUMA0GCSqGSIb3DQEBCwUAA4IBAQCI61nYGyN0
ue1vHJ8dJ7IWPA/O4r+Txd8nKC3thoHCZBoXowGPEOobj6vIKP+WZotIsLIbjFkQ
q/mZ+Z+XKjITeJyPju+/Fa/AuHPfhPxqG8IRdnvnV3qh9KTOtPoucGs6oSfGltnk
sdLlG+SSjHukQsD94euQzDFZCghpKo6Esv3tIKE0a8nJ2T4EcX/nXi16OY2G+oEL
H0hAj0YzteERCdS4kX9aT6+lYfwnzd56ZaqYf4LvKB8NSqgzIgDe446F8jCiA/gH
jycziMUIsPKyiMISorwow6/JJp9qSrvdoM7vmkc9gcCpdsrERi+78ws8oh6VvuAE
vfPGi49vJrHc
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:33 2025 by rpki-client