Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier: 7tRFreLJPwCbHS2sOoPrasURGGKhS4LVNjfDmB0OmrM=
Subject key identifier: B2:0D:AD:E4:E2:A0:8C:29:C0:99:FB:14:4C:F8:55:C3:3A:24:F8:7F
Certificate issuer: /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial: 11D299EB4F8D51A44F1922875B3EB854A26CE2D4
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
Signing time: Mon 10 Feb 2025 19:20:54 +0000
ROA not before: Mon 10 Feb 2025 19:15:54 +0000
ROA not after: Mon 09 Feb 2026 19:20:54 +0000
asID: 263940
IP address blocks: 138.185.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:99:eb:4f:8d:51:a4:4f:19:22:87:5b:3e:b8:54:a2:6c:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Validity
Not Before: Feb 10 19:15:54 2025 GMT
Not After : Feb 9 19:20:54 2026 GMT
Subject: CN=B20DADE4E2A08C29C099FB144CF855C33A24F87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:67:5f:f2:d5:c9:1c:0d:a9:d4:c6:1b:99:
50:01:c7:fd:49:17:27:f8:f4:bf:e2:49:ba:7a:dd:
e7:43:0a:4d:7d:06:d0:70:58:1a:7e:00:0c:8d:6f:
e2:c1:07:1b:36:92:72:8e:aa:bf:23:47:53:d6:09:
a4:16:57:20:65:f3:dd:aa:f1:cd:76:22:e4:fd:2d:
c9:de:cb:00:3b:94:81:b7:36:de:07:f1:17:53:a7:
06:fc:2b:d2:0d:93:0e:a1:fd:80:d9:f8:ce:ac:89:
db:53:32:b5:b7:5a:d5:20:63:ff:ff:c9:2e:4c:79:
b4:a2:33:7e:86:33:7c:58:c2:e0:3f:7a:6f:df:d7:
cf:6a:84:7a:9c:b5:72:61:2d:ff:d3:a6:ba:ff:12:
d4:26:a4:85:c9:fc:e9:f3:7b:73:d3:b4:e6:1a:77:
6d:ab:e9:fc:39:11:c2:22:71:8a:32:32:bf:2c:dd:
3f:5b:c1:5d:b6:c0:eb:f0:1d:12:1f:b3:fc:8e:a8:
6d:53:04:87:5f:15:c0:e7:ec:b9:31:6e:43:db:14:
70:8a:ac:cc:11:94:3e:fe:81:f6:5d:a0:9e:fb:b5:
a5:91:21:45:4f:ec:0b:c7:a7:f4:7e:63:e5:f6:18:
20:fa:2e:7d:92:22:4a:b9:45:84:c2:89:44:fe:68:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:AD:E4:E2:A0:8C:29:C0:99:FB:14:4C:F8:55:C3:3A:24:F8:7F
X509v3 Authority Key Identifier:
keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/23
Signature Algorithm: sha256WithRSAEncryption
93:81:ab:9e:b1:99:5e:00:b7:45:89:26:9a:cc:fa:ba:26:3f:
c1:24:75:b8:75:37:f3:5d:7d:74:f3:d8:e9:3d:cb:a9:8c:33:
39:2c:35:29:a3:b1:74:5e:84:5f:3f:ac:41:10:ea:f0:52:1a:
7e:9b:fc:61:d3:ba:b4:79:d5:57:df:83:1b:c5:e7:75:1b:fd:
3e:9c:d4:cc:bb:51:6f:3e:29:7b:17:93:06:0d:e6:f0:86:95:
38:34:2e:2e:12:a8:f4:d9:db:b4:39:08:a4:4e:bd:7e:b9:b5:
27:34:fa:26:af:91:43:14:30:f2:64:68:57:e7:c4:37:e1:87:
67:9f:26:a2:f4:1f:53:7e:94:f3:e5:15:df:f2:24:9b:a5:c3:
5c:98:13:4c:28:a5:da:ef:f6:61:bb:3e:f5:a7:6c:8a:5e:2c:
f3:d1:37:55:5e:f6:99:5b:36:2b:3c:ef:6a:f1:d0:1c:0a:e9:
20:77:14:41:4c:2c:4d:66:c2:bf:65:03:15:cb:92:2c:d5:f8:
0b:30:0d:a4:03:03:9c:a3:14:7c:6d:4e:74:8b:27:da:d4:0b:
f1:d0:83:3f:8c:2b:de:1f:fa:c6:84:b8:8d:68:46:76:cf:3c:
67:83:35:15:1c:46:a9:67:6d:84:01:38:a8:52:d7:f5:1f:7b:
b6:fa:5a:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEdKZ60+NUaRPGSKHWz64VKJs4tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwODk0QTQxNTlFMjc0OEVEM0Y5NTA2NDFFQ0VBOEE5
RDAxMTI4RDAeFw0yNTAyMTAxOTE1NTRaFw0yNjAyMDkxOTIwNTRaMDMxMTAvBgNV
BAMTKEIyMERBREU0RTJBMDhDMjlDMDk5RkIxNDRDRjg1NUMzM0EyNEY4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wmdf8tXJHA2p1MYbmVABx/1J
Fyf49L/iSbp63edDCk19BtBwWBp+AAyNb+LBBxs2knKOqr8jR1PWCaQWVyBl892q
8c12IuT9LcneywA7lIG3Nt4H8RdTpwb8K9INkw6h/YDZ+M6sidtTMrW3WtUgY///
yS5MebSiM36GM3xYwuA/em/f189qhHqctXJhLf/Tprr/EtQmpIXJ/Onze3PTtOYa
d22r6fw5EcIicYoyMr8s3T9bwV22wOvwHRIfs/yOqG1TBIdfFcDn7LkxbkPbFHCK
rMwRlD7+gfZdoJ77taWRIUVP7AvHp/R+Y+X2GCD6Ln2SIkq5RYTCiUT+aCRFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsg2t5OKgjCnAmfsUTPhVwzok+H8wHwYDVR0j
BBgwFoAUoAiUpBWeJ0jtP5UGQezqip0BEo0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvQTAwODk0QTQxNTlFMjc0OEVEM0Y5NTA2NDFFQ0VBOEE5RDAxMTI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMDA4OTRBNDE1OUUyNzQ4RUQz
Rjk1MDY0MUVDRUE4QTlEMDExMjhELmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAYq5/DANBgkqhkiG9w0BAQsFAAOCAQEAk4GrnrGZ
XgC3RYkmmsz6uiY/wSR1uHU38119dPPY6T3LqYwzOSw1KaOxdF6EXz+sQRDq8FIa
fpv8YdO6tHnVV9+DG8XndRv9PpzUzLtRbz4pexeTBg3m8IaVODQuLhKo9NnbtDkI
pE69frm1JzT6Jq+RQxQw8mRoV+fEN+GHZ58movQfU36U8+UV3/Ikm6XDXJgTTCil
2u/2Ybs+9adsil4s89E3VV72mVs2KzzvavHQHArpIHcUQUwsTWbCv2UDFcuSLNX4
CzANpAMDnKMUfG1OdIsn2tQL8dCDP4wr3h/6xoS4jWhGds88Z4M1FRxGqWdthAE4
qFLX9R97tvpafw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:25:14 2025 by rpki-client