Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
File: 3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier: +T2rBEexdgfcouv0tjBANtd1S1LU/PVKAT2oRghJYKE=
Subject key identifier: 84:DD:7C:0A:83:BC:47:04:E1:A8:DC:72:D9:AF:CF:E5:84:B6:FD:02
Certificate issuer: /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial: 2DBFE6FBD111922A78196E6367C360E20657E519
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
Signing time: Tue 06 May 2025 12:30:40 +0000
ROA not before: Tue 06 May 2025 12:25:40 +0000
ROA not after: Tue 05 May 2026 12:30:40 +0000
asID: 53225
IP address blocks: 186.251.133.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bf:e6:fb:d1:11:92:2a:78:19:6e:63:67:c3:60:e2:06:57:e5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Validity
Not Before: May 6 12:25:40 2025 GMT
Not After : May 5 12:30:40 2026 GMT
Subject: CN=84DD7C0A83BC4704E1A8DC72D9AFCFE584B6FD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:59:8a:a8:f3:02:e0:a8:71:41:d4:c9:e8:
5d:c2:18:90:9f:6f:70:de:81:d2:db:eb:b2:c1:14:
50:9b:cb:37:fd:72:fa:74:d7:2c:8b:2f:72:a1:f4:
84:54:a3:1d:51:3b:5f:b3:47:1f:d4:a7:4d:b5:04:
06:75:fe:92:8d:fd:b7:ca:c9:d0:cf:d1:3a:dc:c7:
32:1f:69:56:4f:fd:8d:fe:dd:9a:e4:71:ce:0a:07:
0e:20:67:87:f1:4c:0e:a3:a1:6b:e3:a1:31:28:e3:
4e:fd:d6:fb:78:a5:4a:bf:3c:d8:8f:c3:f5:47:ac:
a4:76:1f:32:b2:90:05:aa:57:c4:5a:e5:b8:66:df:
d6:a4:ac:b4:d8:9f:40:44:30:b3:30:03:1c:79:43:
78:ea:6e:71:ed:fb:d3:b6:9a:e2:53:3a:68:4d:d0:
c5:1b:63:d9:69:85:2d:cd:a1:89:43:9e:f5:74:57:
26:af:56:df:f3:fb:0c:5b:90:15:b9:a0:25:eb:12:
5c:da:b3:9e:69:a4:bd:a5:7d:2f:5e:ba:d3:9a:af:
cf:c4:1b:99:ad:b3:1e:a1:09:e5:14:b3:44:9a:79:
25:4b:64:23:d1:1e:0f:cf:4c:c3:f3:e7:0a:ce:65:
08:af:df:f7:23:67:d2:7e:c0:05:df:f7:51:ae:4e:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:7C:0A:83:BC:47:04:E1:A8:DC:72:D9:AF:CF:E5:84:B6:FD:02
X509v3 Authority Key Identifier:
keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133332e302f32342d3332203d3e203533323235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.251.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d7:b2:e3:43:b3:d2:87:9e:1d:48:22:72:d2:ea:47:76:f4:
86:be:57:82:11:c1:d8:04:6a:25:0c:01:c5:a2:8e:f3:8f:9d:
69:32:15:d4:ba:05:0a:3d:d0:98:5d:a7:56:57:dd:14:00:07:
f1:69:a7:29:74:06:b3:39:87:9a:e4:b2:32:e3:ad:ed:29:7c:
4c:61:a6:05:c9:29:e7:b1:ef:fc:bc:03:a1:1f:f1:25:79:ab:
02:60:e9:4b:3e:cc:b9:7d:b1:a1:e1:8d:aa:cb:0b:da:e0:70:
77:f0:0f:15:27:4b:8c:da:5c:1b:d1:4f:e2:f7:b2:af:54:8e:
1f:2b:52:fc:7b:e9:51:6f:b6:50:45:63:81:f2:6d:84:52:f9:
af:f2:5c:84:a7:c1:38:ac:a5:fe:83:6e:52:80:66:90:2b:dd:
b1:4c:c4:ed:82:85:97:56:87:c0:a4:f4:26:98:1e:87:f1:33:
0f:cf:a9:ed:43:27:78:87:00:ff:40:68:0a:91:eb:7b:4a:7e:
48:e3:66:60:b5:30:d5:ae:20:31:3b:14:4d:32:e9:59:02:74:
c7:9b:3c:1c:9f:90:5c:41:18:d0:c2:00:78:7e:8d:05:fa:b6:
be:22:4f:2c:d1:df:fa:44:4a:bd:48:e8:0c:77:a3:74:59:17:
5b:c8:98:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULb/m+9ERkip4GW5jZ8Ng4gZX5RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMjE1NjVDMEE1MDhGQzJCREVBNzc2OEQwRjRBRUZE
NkNEMTlGMTAeFw0yNTA1MDYxMjI1NDBaFw0yNjA1MDUxMjMwNDBaMDMxMTAvBgNV
BAMTKDg0REQ3QzBBODNCQzQ3MDRFMUE4REM3MkQ5QUZDRkU1ODRCNkZEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPFmKqPMC4KhxQdTJ6F3CGJCf
b3DegdLb67LBFFCbyzf9cvp01yyLL3Kh9IRUox1RO1+zRx/Up021BAZ1/pKN/bfK
ydDP0TrcxzIfaVZP/Y3+3Zrkcc4KBw4gZ4fxTA6joWvjoTEo40791vt4pUq/PNiP
w/VHrKR2HzKykAWqV8Ra5bhm39akrLTYn0BEMLMwAxx5Q3jqbnHt+9O2muJTOmhN
0MUbY9lphS3NoYlDnvV0VyavVt/z+wxbkBW5oCXrElzas55ppL2lfS9eutOar8/E
G5mtsx6hCeUUs0SaeSVLZCPRHg/PTMPz5wrOZQiv3/cjZ9J+wAXf91GuTh97AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhN18CoO8RwThqNxy2a/P5YS2/QIwHwYDVR0j
BBgwFoAUctIVZcClCPwr3qd2jQ9K79bNGfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMC83MkQyMTU2NUMwQTUwOEZDMkJERUE3NzY4RDBGNEFFRkQ2Q0QxOUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDIxNTY1QzBBNTA4RkMy
QkRFQTc3NjhEMEY0QUVGRDZDRDE5RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzMzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzMzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+4UwDQYJKoZIhvcNAQELBQADggEBAErXsuND
s9KHnh1IInLS6kd29Ia+V4IRwdgEaiUMAcWijvOPnWkyFdS6BQo90Jhdp1ZX3RQA
B/Fppyl0BrM5h5rksjLjre0pfExhpgXJKeex7/y8A6Ef8SV5qwJg6Us+zLl9saHh
jarLC9rgcHfwDxUnS4zaXBvRT+L3sq9Ujh8rUvx76VFvtlBFY4HybYRS+a/yXISn
wTispf6DblKAZpAr3bFMxO2ChZdWh8Ck9CaYHofxMw/Pqe1DJ3iHAP9AaAqR63tK
fkjjZmC1MNWuIDE7FE0y6VkCdMebPByfkFxBGNDCAHh+jQX6tr4iTyzR3/pESr1I
6Ax3o3RZF1vImA8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:08:02 2025 by rpki-client