Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
File: 3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier: GE+6Mfv78ypvI0QBvVuUpZ/Q526mmTuCMknY3Xmj0Ow=
Subject key identifier: 5C:C7:5B:B4:BB:17:84:BA:ED:E8:0B:42:28:CC:10:FD:D7:E0:47:20
Certificate issuer: /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial: 167657DD520BC4F6C3E958F0CAB262A4FC462745
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
Signing time: Wed 05 Mar 2025 20:54:48 +0000
ROA not before: Wed 05 Mar 2025 20:49:48 +0000
ROA not after: Wed 04 Mar 2026 20:54:48 +0000
asID: 264444
IP address blocks: 131.221.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:76:57:dd:52:0b:c4:f6:c3:e9:58:f0:ca:b2:62:a4:fc:46:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Validity
Not Before: Mar 5 20:49:48 2025 GMT
Not After : Mar 4 20:54:48 2026 GMT
Subject: CN=5CC75BB4BB1784BAEDE80B4228CC10FDD7E04720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:9a:15:d3:81:16:de:c0:fe:46:06:bf:1a:
fb:00:06:0a:91:7a:09:4c:f3:42:1c:6d:ef:9f:db:
bf:5e:35:b4:14:4a:86:16:61:d3:b5:8c:93:a2:c5:
20:d3:6b:cc:84:64:1f:8d:66:22:8f:41:3c:60:6a:
2b:e7:5d:f1:9e:7c:1a:a6:70:dd:24:72:45:95:1a:
64:4b:96:40:e3:e0:39:f0:5b:ae:1a:37:a1:ec:37:
56:c7:28:ab:b6:b5:66:00:9a:aa:1b:76:ba:5b:a9:
d8:9a:a2:06:95:42:e6:b4:68:04:2a:f5:48:3d:9f:
31:92:7f:09:9d:ba:38:68:22:ef:10:1d:65:25:4d:
5f:ac:d3:ac:ad:2e:d6:b0:26:f6:54:0b:fb:4f:ac:
8d:d1:32:41:fd:f2:21:e4:99:35:86:66:93:f3:e2:
97:67:09:a9:4e:c5:40:7e:d5:7c:a2:63:a8:6b:c1:
ef:e1:9e:c0:67:cc:21:79:9b:db:be:ad:e1:43:33:
d0:e7:9c:4e:a4:d0:1b:d1:5b:2d:cd:4b:59:48:81:
13:a1:00:95:83:5c:1b:f7:ef:db:b5:b3:cf:43:68:
10:ea:b8:23:1e:42:13:5d:e3:a9:84:93:40:c8:88:
64:3c:f8:f3:18:f5:07:04:2c:64:d1:91:46:24:0c:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:5B:B4:BB:17:84:BA:ED:E8:0B:42:28:CC:10:FD:D7:E0:47:20
X509v3 Authority Key Identifier:
keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:24:09:d7:a6:84:24:ed:f6:b9:70:02:8c:ce:33:74:d8:24:
00:4b:7c:3a:ac:b2:96:61:d8:7f:bb:67:a9:d2:7c:f9:84:8f:
15:b1:82:3d:0a:1c:7a:53:4f:86:56:dc:86:c4:6e:72:5d:43:
29:e1:fd:0d:de:eb:c2:af:64:70:52:32:e7:18:45:4d:ef:3e:
89:fb:60:f2:e2:a9:a6:bf:2d:9d:71:79:18:c9:7e:45:ef:ca:
6f:19:75:35:37:9f:0b:71:53:69:62:2c:f5:44:56:80:78:05:
b1:20:29:24:01:3d:6c:f7:f7:1c:ed:68:1b:c7:a2:1e:92:c3:
49:e5:65:fd:45:9b:75:00:11:cc:8b:7e:1e:53:c5:ed:33:8c:
f5:a8:80:67:76:e4:2e:1a:e1:5f:cf:0b:7f:6f:a3:53:61:8e:
ba:e4:11:3d:7f:25:0c:9d:3c:11:ba:f0:8d:73:df:d8:18:a1:
c1:4f:75:60:18:d8:bd:84:5c:84:6a:06:53:6b:bd:02:3d:e3:
ca:81:ee:cd:ae:73:7e:6d:90:95:48:15:04:86:db:74:6f:30:
90:c5:1d:7e:3c:ec:17:39:e1:33:8d:fe:62:19:6d:5b:28:b0:
ec:f5:de:e6:f1:63:8d:f1:6a:8e:48:6a:77:42:11:e6:e9:dd:
9f:72:99:4f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFnZX3VILxPbD6VjwyrJipPxGJ0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0NDhCREVDRDgzQUJBM0QwOEFENTkyOUI2ODIzNzRG
RTEzQkU5ODAeFw0yNTAzMDUyMDQ5NDhaFw0yNjAzMDQyMDU0NDhaMDMxMTAvBgNV
BAMTKDVDQzc1QkI0QkIxNzg0QkFFREU4MEI0MjI4Q0MxMEZERDdFMDQ3MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+a5oV04EW3sD+Rga/GvsABgqR
eglM80Icbe+f279eNbQUSoYWYdO1jJOixSDTa8yEZB+NZiKPQTxgaivnXfGefBqm
cN0kckWVGmRLlkDj4DnwW64aN6HsN1bHKKu2tWYAmqobdrpbqdiaogaVQua0aAQq
9Ug9nzGSfwmdujhoIu8QHWUlTV+s06ytLtawJvZUC/tPrI3RMkH98iHkmTWGZpPz
4pdnCalOxUB+1XyiY6hrwe/hnsBnzCF5m9u+reFDM9DnnE6k0BvRWy3NS1lIgROh
AJWDXBv379u1s89DaBDquCMeQhNd46mEk0DIiGQ8+PMY9QcELGTRkUYkDBJfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXMdbtLsXhLrt6AtCKMwQ/dfgRyAwHwYDVR0j
BBgwFoAUmUSL3s2Dq6PQitWSm2gjdP4TvpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhFNVp1eHFqSmtXdzloZjRnOXMxUnYyNHc0WDROeXBBREozRHBnb2dB
cXIvMS85OTQ0OEJERUNEODNBQkEzRDA4QUQ1OTI5QjY4MjM3NEZFMTNCRTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDQ4QkRFQ0Q4M0FCQTNE
MDhBRDU5MjlCNjgyMzc0RkUxM0JFOTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4RTVadXhxakprV3c5aGY0ZzlzMVJ2MjR3NFg0TnlwQURKM0RwZ29nQXFyLzEv
MzEzMzMxMmUzMjMyMzEyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPd4DANBgkqhkiG9w0BAQsFAAOCAQEAoCQJ
16aEJO32uXACjM4zdNgkAEt8OqyylmHYf7tnqdJ8+YSPFbGCPQocelNPhlbchsRu
cl1DKeH9Dd7rwq9kcFIy5xhFTe8+iftg8uKppr8tnXF5GMl+Re/Kbxl1NTefC3FT
aWIs9URWgHgFsSApJAE9bPf3HO1oG8eiHpLDSeVl/UWbdQARzIt+HlPF7TOM9aiA
Z3bkLhrhX88Lf2+jU2GOuuQRPX8lDJ08EbrwjXPf2BihwU91YBjYvYRchGoGU2u9
Aj3jyoHuza5zfm2QlUgVBIbbdG8wkMUdfjzsFznhM43+YhltWyiw7PXe5vFjjfFq
jkhqd0IR5undn3KZTw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:37:59 2025 by rpki-client