Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa
File: 37322e34342e31362e302f32342d3234203d3e20323636313635.roa (raw, json)
Hash identifier: I1ay5ocCctooDFMs7bZAsfybf8Q0inOaMY0CxoBY+10=
Subject key identifier: C6:40:87:70:CF:A6:A0:D0:F6:EE:ED:8C:4A:3D:80:F9:23:A5:60:35
Certificate issuer: /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial: 04137BC1BFF47D80D0514EC864A57B9A9B4D77
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa
Signing time: Mon 03 Mar 2025 23:55:47 +0000
ROA not before: Mon 03 Mar 2025 23:50:47 +0000
ROA not after: Mon 02 Mar 2026 23:55:47 +0000
asID: 266165
IP address blocks: 72.44.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:13:7b:c1:bf:f4:7d:80:d0:51:4e:c8:64:a5:7b:9a:9b:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Validity
Not Before: Mar 3 23:50:47 2025 GMT
Not After : Mar 2 23:55:47 2026 GMT
Subject: CN=C6408770CFA6A0D0F6EEED8C4A3D80F923A56035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:43:93:5b:77:f2:69:f9:17:a8:c6:55:d8:
cf:b9:1d:2b:37:9b:49:a0:30:e7:e5:74:cb:2f:59:
2d:b5:c8:e2:e1:8a:b0:e0:ad:f5:a6:4a:c4:69:86:
7f:6a:a2:bb:fd:6b:d7:a8:b5:77:d5:e2:45:ca:25:
35:95:1f:96:b8:f1:45:11:a0:51:25:78:89:3c:3d:
5f:85:f8:d2:a3:19:9c:2e:98:a9:83:21:6a:c6:f1:
67:e7:b9:97:fe:fd:17:64:ad:e1:86:ca:61:63:d8:
0a:8f:d0:2f:62:6e:16:24:60:eb:2d:ed:32:30:81:
79:61:c2:21:a9:18:bb:79:4f:fe:52:88:bd:d2:29:
63:b6:c7:02:bf:5a:4c:cb:bd:4f:01:7f:69:5e:7c:
60:e9:94:b9:5a:8a:24:1e:7f:07:bf:0e:f8:89:b6:
1b:27:4e:1d:ae:ac:f0:e4:ee:22:09:eb:e3:e5:79:
80:c6:63:c2:23:c8:d8:66:86:0a:95:f9:84:99:73:
65:3e:04:fd:1f:16:6a:c3:e3:5c:3c:61:48:4b:2b:
85:bb:3b:06:f2:1a:39:7c:9f:0e:4c:17:b6:c8:77:
72:bc:90:2c:69:64:65:12:8c:73:c2:70:6a:84:60:
e6:4f:60:13:72:58:22:03:93:47:dd:e2:9f:89:ac:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:87:70:CF:A6:A0:D0:F6:EE:ED:8C:4A:3D:80:F9:23:A5:60:35
X509v3 Authority Key Identifier:
keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.16.0/24
Signature Algorithm: sha256WithRSAEncryption
09:26:90:08:84:84:28:9a:b8:80:60:99:ea:d7:02:1c:e6:0b:
77:97:dd:22:a9:13:63:b9:81:6e:08:20:52:c0:9e:71:47:f2:
71:56:41:1e:26:f4:d8:8c:38:58:10:b9:29:09:97:ce:5d:7c:
57:a1:3d:9e:1e:f7:32:61:a4:28:93:3d:a8:47:c7:59:90:31:
dd:8c:07:b8:28:bf:58:4a:48:67:d5:a6:68:65:fa:61:bf:e0:
36:b9:5b:a2:7b:af:ba:c5:99:06:7a:54:e3:fd:8a:47:ff:a0:
d4:93:de:ca:5c:a1:8c:9c:41:f6:29:42:99:cd:ef:66:48:08:
dc:c0:0c:70:92:bb:44:1f:7b:6a:88:a0:df:00:7d:f2:71:50:
bf:37:fd:6e:8b:6a:d3:f4:06:f3:2f:30:3c:cb:49:21:37:0b:
12:10:bb:08:a2:47:35:c7:be:23:cd:40:b2:f2:e9:09:34:6a:
ce:85:ba:57:33:9b:16:f1:b9:b2:c5:47:8d:df:04:73:fe:4b:
75:d6:22:34:f2:a2:d8:18:11:ab:36:3d:66:33:df:15:a4:ee:
e8:54:de:50:fa:53:64:a4:60:07:21:9d:26:5d:e5:fe:9c:9a:
0f:ce:20:4d:0d:01:d4:fe:63:0b:f7:4e:b9:f6:f0:71:a3:6d:
8b:9f:cc:de
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgITBBN7wb/0fYDQUU7IZKV7mptNdzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhERkIxNjVBNTVCMzBBQUM0RTMyQ0VDOEZFOUI0Mzg2RUYw
RUE4RDNDMB4XDTI1MDMwMzIzNTA0N1oXDTI2MDMwMjIzNTU0N1owMzExMC8GA1UE
AxMoQzY0MDg3NzBDRkE2QTBEMEY2RUVFRDhDNEEzRDgwRjkyM0E1NjAzNTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALG4Q5Nbd/Jp+ReoxlXYz7kdKzeb
SaAw5+V0yy9ZLbXI4uGKsOCt9aZKxGmGf2qiu/1r16i1d9XiRcolNZUflrjxRRGg
USV4iTw9X4X40qMZnC6YqYMhasbxZ+e5l/79F2St4YbKYWPYCo/QL2JuFiRg6y3t
MjCBeWHCIakYu3lP/lKIvdIpY7bHAr9aTMu9TwF/aV58YOmUuVqKJB5/B78O+Im2
GydOHa6s8OTuIgnr4+V5gMZjwiPI2GaGCpX5hJlzZT4E/R8WasPjXDxhSEsrhbs7
BvIaOXyfDkwXtsh3cryQLGlkZRKMc8JwaoRg5k9gE3JYIgOTR93in4msT+MCAwEA
AaOCAk0wggJJMB0GA1UdDgQWBBTGQIdwz6ag0Pbu7YxKPYD5I6VgNTAfBgNVHSME
GDAWgBTfsWWlWzCqxOMs7I/ptDhu8OqNPDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KNGhzVWdSSDhtb2NYREE1QndTSDJUVHBEdnNCZHdxU1Q0M0JFQkpnRXFq
Mi8wL0RGQjE2NUE1NUIzMEFBQzRFMzJDRUM4RkU5QjQzODZFRjBFQThEM0MuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvREZCMTY1QTU1QjMwQUFDNEUz
MkNFQzhGRTlCNDM4NkVGMEVBOEQzQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGX
BggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0VxajIvMC8z
NzMyMmUzNDM0MmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzEz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQASCwQMA0GCSqGSIb3DQEBCwUAA4IBAQAJJpAIhIQomriA
YJnq1wIc5gt3l90iqRNjuYFuCCBSwJ5xR/JxVkEeJvTYjDhYELkpCZfOXXxXoT2e
HvcyYaQokz2oR8dZkDHdjAe4KL9YSkhn1aZoZfphv+A2uVuie6+6xZkGelTj/YpH
/6DUk97KXKGMnEH2KUKZze9mSAjcwAxwkrtEH3tqiKDfAH3ycVC/N/1ui2rT9Abz
LzA8y0khNwsSELsIokc1x74jzUCy8ukJNGrOhbpXM5sW8bmyxUeN3wRz/kt11iI0
8qLYGBGrNj1mM98VpO7oVN5Q+lNkpGAHIZ0mXeX+nJoPziBNDQHU/mML90659vBx
o22Ln8ze
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:47 2025 by rpki-client