Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: E1kUxBW5jTic5b1wH5qR2LcJB3cE4917lkNsdOBPA18=
Subject key identifier: 10:F2:3D:28:37:94:C0:C3:46:FB:64:06:2B:44:D4:7A:E8:0F:83:5A
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 50BC7994EB54039B63D5035F043595F2FD76D9BF
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 262509
IP address blocks: 177.67.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bc:79:94:eb:54:03:9b:63:d5:03:5f:04:35:95:f2:fd:76:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=10F23D283794C0C346FB64062B44D47AE80F835A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:f5:93:23:b6:a3:ec:37:20:c2:46:e2:83:
8b:74:37:0e:d7:71:24:fd:c0:02:34:da:f3:91:2b:
80:a0:f9:65:6e:f2:93:74:f0:94:6e:89:b6:7b:69:
b2:d4:20:23:9c:d3:62:e0:9f:56:ce:0a:12:a8:4e:
c4:ef:19:7a:0c:24:1a:5e:e0:b7:13:b0:5f:1b:1c:
fc:72:74:90:eb:a7:4b:d6:0c:fb:0a:39:58:c0:3a:
e4:29:e9:df:3b:b3:12:29:48:13:9b:e1:9b:5c:f0:
8b:a6:f9:e7:13:9c:74:d1:10:8a:3a:e6:2e:b9:f1:
1d:f3:79:40:cb:28:d2:2e:18:e6:64:1b:10:73:a1:
52:9e:26:87:23:fc:51:ce:90:38:69:23:50:c1:ea:
2a:fe:c7:5a:0c:16:a1:03:46:fc:31:8b:9b:5e:93:
8e:93:a1:8e:43:62:60:e2:97:f6:2d:c0:16:4d:36:
ff:ff:95:fd:88:cf:59:8f:cd:ea:03:34:96:0f:91:
8a:be:01:8e:91:f9:97:cf:a2:92:44:3c:68:ec:b1:
80:53:c3:b1:f0:8f:49:44:f8:f5:c6:a0:68:b6:b5:
54:ce:26:94:b8:e0:3e:af:30:27:f4:a7:2f:0c:32:
42:72:6a:53:ac:ed:08:cb:98:93:64:dc:7b:a9:b2:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:3D:28:37:94:C0:C3:46:FB:64:06:2B:44:D4:7A:E8:0F:83:5A
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.2.0/24
Signature Algorithm: sha256WithRSAEncryption
47:32:cc:3b:a4:c2:cd:9d:e4:57:38:80:02:3e:51:5c:70:a2:
00:4f:e5:25:88:13:d8:26:91:04:1a:6f:6c:cb:f0:16:e2:1f:
1f:58:52:74:02:4e:ad:be:6d:4f:60:dc:af:a9:4c:fd:da:5c:
fc:33:ba:8f:98:8d:80:f7:b3:44:83:21:e0:17:dc:7a:8c:cb:
8d:27:dc:df:c4:14:5d:ac:6a:2d:bf:e1:11:81:44:20:a5:0e:
9b:00:82:99:97:b1:0f:c8:d1:61:25:41:cf:70:fa:ca:18:15:
89:7c:f7:85:27:f6:b7:6c:d3:ac:26:06:ae:5a:82:b4:3e:7c:
a4:b5:6f:a5:b5:cf:7e:3b:f1:75:53:c2:67:91:31:ed:b3:1d:
ab:20:84:b1:ca:cb:36:82:65:d8:ba:a5:ad:78:93:59:a0:75:
63:4c:ca:e5:20:be:ad:dd:6f:20:89:b6:78:d5:5c:a9:d6:e1:
73:4a:e2:66:52:fc:c4:7a:64:a0:93:5a:9b:a3:25:73:64:dd:
82:cf:1d:ec:97:c0:26:e1:fa:38:c2:7d:1f:63:91:d2:41:c5:
14:d7:e1:b0:e4:ff:84:93:ba:05:72:f3:bd:d6:6b:9e:65:6d:
81:71:7a:ff:e9:db:4c:6a:82:68:e6:0d:6e:4c:f6:c2:78:b1:
2a:d7:7f:24
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUULx5lOtUA5tj1QNfBDWV8v122b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTNaFw0yNTExMDYyMDQwMTNaMDMxMTAvBgNV
BAMTKDEwRjIzRDI4Mzc5NEMwQzM0NkZCNjQwNjJCNDRENDdBRTgwRjgzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtvWTI7aj7Dcgwkbig4t0Nw7X
cST9wAI02vORK4Cg+WVu8pN08JRuibZ7abLUICOc02Lgn1bOChKoTsTvGXoMJBpe
4LcTsF8bHPxydJDrp0vWDPsKOVjAOuQp6d87sxIpSBOb4Ztc8Ium+ecTnHTREIo6
5i658R3zeUDLKNIuGOZkGxBzoVKeJocj/FHOkDhpI1DB6ir+x1oMFqEDRvwxi5te
k46ToY5DYmDil/YtwBZNNv//lf2Iz1mPzeoDNJYPkYq+AY6R+ZfPopJEPGjssYBT
w7Hwj0lE+PXGoGi2tVTOJpS44D6vMCf0py8MMkJyalOs7QjLmJNk3Hupskq1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEPI9KDeUwMNG+2QGK0TUeugPg1owHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDAjANBgkqhkiG9w0BAQsFAAOCAQEARzLMO6TCzZ3k
VziAAj5RXHCiAE/lJYgT2CaRBBpvbMvwFuIfH1hSdAJOrb5tT2Dcr6lM/dpc/DO6
j5iNgPezRIMh4BfceozLjSfc38QUXaxqLb/hEYFEIKUOmwCCmZexD8jRYSVBz3D6
yhgViXz3hSf2t2zTrCYGrlqCtD58pLVvpbXPfjvxdVPCZ5Ex7bMdqyCEscrLNoJl
2LqlrXiTWaB1Y0zK5SC+rd1vIIm2eNVcqdbhc0riZlL8xHpkoJNam6Mlc2Tdgs8d
7JfAJuH6OMJ9H2OR0kHFFNfhsOT/hJO6BXLzvdZrnmVtgXF6/+nbTGqCaOYNbkz2
wnixKtd/JA==
-----END CERTIFICATE-----
Generated at Tue May 13 21:35:07 2025 by rpki-client