Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/3137302e37382e31362e302f32322d3234203d3e20323635343932.roa
File: 3137302e37382e31362e302f32322d3234203d3e20323635343932.roa (raw, json)
Hash identifier: TpPZb7q6n7/yvL+Vs7nafTkuYA3bK9XBV0mQz7pS5Js=
Subject key identifier: D2:0C:47:BF:25:8E:0B:4A:81:59:07:99:8D:9F:50:DE:43:0B:47:24
Certificate issuer: /CN=44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9
Certificate serial: 63975460B2430EF61A10102E57E47222DBB52E06
Authority key identifier: 44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/3137302e37382e31362e302f32322d3234203d3e20323635343932.roa
Signing time: Thu 01 May 2025 21:17:42 +0000
ROA not before: Thu 01 May 2025 21:12:42 +0000
ROA not after: Thu 30 Apr 2026 21:17:42 +0000
asID: 265492
IP address blocks: 170.78.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:97:54:60:b2:43:0e:f6:1a:10:10:2e:57:e4:72:22:db:b5:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9
Validity
Not Before: May 1 21:12:42 2025 GMT
Not After : Apr 30 21:17:42 2026 GMT
Subject: CN=D20C47BF258E0B4A815907998D9F50DE430B4724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:39:12:86:40:0a:b3:29:bb:db:d7:a8:61:
01:92:3a:3b:72:7f:cf:cc:64:d3:c6:cf:3b:90:ec:
64:4f:c8:a6:8c:f5:30:fc:77:03:54:58:e3:1b:d7:
09:47:be:0d:4d:7a:b6:4d:20:39:ee:36:a8:67:87:
3a:95:5f:cc:9a:7d:98:84:ec:8b:7b:6e:78:8e:31:
00:57:7c:9d:d4:53:4e:d5:59:ab:e3:06:5e:06:96:
fa:e4:26:ec:df:89:f1:92:20:e7:ea:4a:3a:94:2f:
9a:fa:70:36:47:21:8d:48:5d:dd:6e:a0:f7:e5:c5:
1a:ec:6a:92:5d:84:17:7f:e3:42:6b:95:7a:57:dd:
48:67:6a:06:9e:18:67:c9:c8:40:0e:01:1d:4a:da:
41:4d:2d:00:35:c5:20:8c:12:4f:6f:69:fa:eb:5c:
5a:1c:a5:88:bb:ad:82:a8:fd:88:a8:a5:65:e7:78:
c0:bd:6a:a6:31:4d:b9:5d:6b:f5:a6:ef:73:ca:48:
3d:9c:73:e9:8f:7f:35:53:da:a8:7b:86:4f:37:62:
d6:05:fd:23:97:67:df:e2:4e:35:67:a8:90:25:79:
f8:07:bd:5a:2c:39:ae:0e:4c:bd:59:b1:5a:f7:70:
ed:7c:e1:41:d2:e3:b5:6e:a7:8f:f6:21:ec:fe:0d:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:47:BF:25:8E:0B:4A:81:59:07:99:8D:9F:50:DE:43:0B:47:24
X509v3 Authority Key Identifier:
keyid:44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/3137302e37382e31362e302f32322d3234203d3e20323635343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b5:ff:7e:ec:8d:fd:31:9a:d6:b4:3f:8e:50:a4:0f:a8:37:
05:07:12:e5:76:72:39:12:65:dd:71:4f:f9:ad:16:80:c5:91:
03:fa:0b:07:03:a9:8e:dd:31:6d:0e:a6:9f:9d:2b:77:e2:dc:
71:05:1e:b0:61:7e:23:c8:b3:26:19:90:34:96:8c:b3:f3:47:
bb:14:17:91:d4:6a:87:80:17:e6:4f:9a:89:ae:b6:75:9a:db:
16:cd:b6:59:0b:44:3a:78:8f:91:78:4a:09:a7:ba:03:a2:49:
f6:1c:33:e7:7a:57:54:96:2d:ca:2a:7b:9a:a8:e4:41:a1:ec:
67:9d:6b:c4:93:66:17:9c:15:b9:2f:a9:fb:52:1d:75:c1:59:
68:85:b2:33:7f:ba:66:47:62:f2:8f:1d:99:b2:c8:c8:62:b9:
74:ad:41:a2:ca:2c:01:95:9d:4a:bb:05:f0:21:98:b1:97:f5:
6f:6c:07:c0:de:b0:34:1d:b4:bb:37:a2:95:de:3d:4e:3f:1a:
f2:1b:53:3b:df:f7:da:bc:37:d6:c8:b5:44:8a:1f:ec:56:93:
e8:8a:bd:5d:c6:29:03:03:fd:1a:5a:c4:06:40:fe:b3:02:6b:
51:c2:25:ec:c8:70:9b:7d:4a:d4:2f:4d:6b:52:cb:57:ca:39:
45:ff:34:5b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY5dUYLJDDvYaEBAuV+RyItu1LgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGOEY0OTkxMUIwQzA0MkI4RkY1QkNDMkUxMUU1NzMz
REE3NEZGOTAeFw0yNTA1MDEyMTEyNDJaFw0yNjA0MzAyMTE3NDJaMDMxMTAvBgNV
BAMTKEQyMEM0N0JGMjU4RTBCNEE4MTU5MDc5OThEOUY1MERFNDMwQjQ3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEjkShkAKsym729eoYQGSOjty
f8/MZNPGzzuQ7GRPyKaM9TD8dwNUWOMb1wlHvg1NerZNIDnuNqhnhzqVX8yafZiE
7It7bniOMQBXfJ3UU07VWavjBl4GlvrkJuzfifGSIOfqSjqUL5r6cDZHIY1IXd1u
oPflxRrsapJdhBd/40JrlXpX3UhnagaeGGfJyEAOAR1K2kFNLQA1xSCMEk9vafrr
XFocpYi7rYKo/YiopWXneMC9aqYxTblda/Wm73PKSD2cc+mPfzVT2qh7hk83YtYF
/SOXZ9/iTjVnqJAlefgHvVosOa4OTL1ZsVr3cO184UHS47Vup4/2Iez+DUEfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0gxHvyWOC0qBWQeZjZ9Q3kMLRyQwHwYDVR0j
BBgwFoAURPj0mRGwwEK4/1vMLhHlcz2nT/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW53amh3MUd6YmpLS1lUZENWaFluNEJLcEU3bnJqRHE2dzg5NzVEY3RH
NFYvMC80NEY4RjQ5OTExQjBDMDQyQjhGRjVCQ0MyRTExRTU3MzNEQTc0RkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RjhGNDk5MTFCMEMwNDJC
OEZGNUJDQzJFMTFFNTczM0RBNzRGRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVud2podzFHemJqS0tZVGRDVmhZbjRCS3BFN25yakRxNnc4OTc1RGN0RzRWLzAv
MzEzNzMwMmUzNzM4MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk4QMA0GCSqGSIb3DQEBCwUAA4IBAQBttf9+7I39
MZrWtD+OUKQPqDcFBxLldnI5EmXdcU/5rRaAxZED+gsHA6mO3TFtDqafnSt34txx
BR6wYX4jyLMmGZA0loyz80e7FBeR1GqHgBfmT5qJrrZ1mtsWzbZZC0Q6eI+ReEoJ
p7oDokn2HDPneldUli3KKnuaqORBoexnnWvEk2YXnBW5L6n7Uh11wVlohbIzf7pm
R2Lyjx2ZssjIYrl0rUGiyiwBlZ1KuwXwIZixl/VvbAfA3rA0HbS7N6KV3j1OPxry
G1M73/favDfWyLVEih/sVpPoir1dxikDA/0aWsQGQP6zAmtRwiXsyHCbfUrUL01r
UstXyjlF/zRb
-----END CERTIFICATE-----
Generated at Wed May 14 10:36:10 2025 by rpki-client