Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
File: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier: /TOThvmWLgbDpvu2EvQT2xysBPVeauw0/SdhuyLbXfQ=
Subject key identifier: 85:A6:AB:F9:4E:7E:37:AB:E6:67:F5:66:E1:FF:F8:79:B5:FB:0B:8A
Certificate issuer: /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial: 1D9D81D14BBF0B4B9A1AEC41DC411D70A3818911
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
Signing time: Thu 04 Apr 2024 22:49:24 +0000
ROA not before: Thu 04 Apr 2024 22:44:24 +0000
ROA not after: Thu 03 Apr 2025 22:49:24 +0000
asID: 262578
IP address blocks: 177.84.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9d:81:d1:4b:bf:0b:4b:9a:1a:ec:41:dc:41:1d:70:a3:81:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Validity
Not Before: Apr 4 22:44:24 2024 GMT
Not After : Apr 3 22:49:24 2025 GMT
Subject: CN=85A6ABF94E7E37ABE667F566E1FFF879B5FB0B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:ff:f4:fb:08:8b:76:6e:df:4a:2d:47:36:
a1:1a:08:aa:ed:a8:9e:1c:15:6a:da:d2:d3:f3:ee:
34:ff:bb:a6:1d:73:90:26:28:dd:bb:b5:07:8d:1b:
12:3f:01:a6:ec:a1:26:e6:b8:e6:2c:13:0f:db:72:
93:d9:c7:96:c2:77:e7:14:47:8c:35:c0:e6:2e:ed:
9f:ea:49:1c:08:c8:1a:82:b6:a6:00:db:93:78:d0:
79:06:80:fd:68:78:20:15:3f:ed:c8:e4:69:ec:56:
f0:ea:ad:5d:38:bf:1e:76:da:c6:d0:9b:2d:d8:cd:
db:01:cf:8f:a9:0f:90:77:ad:85:74:bd:78:da:4c:
78:09:cc:3a:c0:29:46:07:05:e9:8a:ab:4a:6f:a5:
41:b3:51:4c:0d:dc:d1:0f:be:11:53:46:39:14:17:
d3:4f:50:26:eb:fc:d1:12:cb:e5:46:6b:7f:a3:51:
b0:ce:cb:d8:25:a5:39:b0:d3:e5:88:5e:3d:e4:86:
91:1c:d5:18:da:96:34:a2:a3:46:1e:4f:98:da:ca:
64:9b:41:29:6b:42:c9:7b:c9:e1:c7:5f:bb:b8:5d:
3b:91:bb:f3:5d:98:56:49:3e:d9:1f:02:d0:65:82:
07:bd:55:a7:fc:d3:a9:0d:c1:5f:e6:a2:07:86:92:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:AB:F9:4E:7E:37:AB:E6:67:F5:66:E1:FF:F8:79:B5:FB:0B:8A
X509v3 Authority Key Identifier:
keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:56:54:ed:99:2e:1f:d1:e1:ae:91:96:0e:b2:80:90:bd:20:
33:3f:a5:9c:e1:26:0c:1c:b0:71:1e:12:f6:e8:3a:4a:fc:b1:
35:8f:36:97:39:8d:fb:c2:aa:79:38:c6:fe:67:9f:f9:87:a2:
aa:23:45:28:37:01:5a:4a:b6:70:2e:b8:64:ec:31:33:8a:16:
bd:4a:fe:54:44:e5:a9:3c:f5:74:cf:55:b8:c9:9c:81:1f:cd:
5e:d3:59:e5:11:c6:33:08:f0:22:ca:a8:7e:54:18:f9:e1:5c:
18:25:32:78:98:bb:bf:84:a7:5e:be:b2:2c:fb:8b:f7:3c:5d:
52:d0:f7:6d:7c:74:f9:b6:a5:43:40:e8:82:be:22:8b:16:d0:
96:c2:35:d5:61:57:77:bc:96:75:69:b4:e2:a4:3c:5a:70:1f:
d6:91:81:6a:2e:d8:68:a0:c5:18:fe:92:73:ff:79:e3:ff:17:
4e:33:02:81:93:42:e9:2d:76:ce:09:07:17:0a:51:fe:87:35:
b1:05:2f:1c:62:cf:95:4d:6f:31:48:ae:00:96:4e:5b:ce:e1:
e7:79:0c:b6:f7:91:ba:ef:26:d4:4b:36:88:44:b2:31:c8:7e:
c3:85:ae:d8:55:cb:a0:06:ab:c7:a3:13:2e:e9:d9:ff:32:33:
2e:69:b8:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHZ2B0Uu/C0uaGuxB3EEdcKOBiREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGM0NEMEMzRDAyNTY2OTU1MjgxM0U4RTQ0MUVBQTcx
MERFNDNCMjAeFw0yNDA0MDQyMjQ0MjRaFw0yNTA0MDMyMjQ5MjRaMDMxMTAvBgNV
BAMTKDg1QTZBQkY5NEU3RTM3QUJFNjY3RjU2NkUxRkZGODc5QjVGQjBCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobv/0+wiLdm7fSi1HNqEaCKrt
qJ4cFWra0tPz7jT/u6Ydc5AmKN27tQeNGxI/AabsoSbmuOYsEw/bcpPZx5bCd+cU
R4w1wOYu7Z/qSRwIyBqCtqYA25N40HkGgP1oeCAVP+3I5GnsVvDqrV04vx522sbQ
my3YzdsBz4+pD5B3rYV0vXjaTHgJzDrAKUYHBemKq0pvpUGzUUwN3NEPvhFTRjkU
F9NPUCbr/NESy+VGa3+jUbDOy9glpTmw0+WIXj3khpEc1RjaljSio0YeT5jaymSb
QSlrQsl7yeHHX7u4XTuRu/NdmFZJPtkfAtBlgge9Vaf806kNwV/mogeGkkWRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhaar+U5+N6vmZ/Vm4f/4ebX7C4owHwYDVR0j
BBgwFoAU//PNDD0CVmlVKBPo5EHqpxDeQ7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMS9GRkYzQ0QwQzNEMDI1NjY5NTUyODEzRThFNDQxRUFBNzEwREU0M0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjNDRDBDM0QwMjU2Njk1
NTI4MTNFOEU0NDFFQUE3MTBERTQzQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzEv
MzEzNzM3MmUzODM0MmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVQhMA0GCSqGSIb3DQEBCwUAA4IBAQBMVlTtmS4f
0eGukZYOsoCQvSAzP6Wc4SYMHLBxHhL26DpK/LE1jzaXOY37wqp5OMb+Z5/5h6Kq
I0UoNwFaSrZwLrhk7DEziha9Sv5UROWpPPV0z1W4yZyBH81e01nlEcYzCPAiyqh+
VBj54VwYJTJ4mLu/hKdevrIs+4v3PF1S0PdtfHT5tqVDQOiCviKLFtCWwjXVYVd3
vJZ1abTipDxacB/WkYFqLthooMUY/pJz/3nj/xdOMwKBk0LpLXbOCQcXClH+hzWx
BS8cYs+VTW8xSK4Alk5bzuHneQy295G67ybUSzaIRLIxyH7Dha7YVcugBqvHoxMu
6dn/MjMuabjk
-----END CERTIFICATE-----
Generated at Thu May 15 11:34:33 2025 by rpki-client