Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35322e302f32332d3233203d3e20323634323136.roa
File: 3137372e38362e35322e302f32332d3233203d3e20323634323136.roa (raw, json)
Hash identifier: KsXsSLiM9Sacdz987kSCID3jids0YeeHrLrtQ5wgHKA=
Subject key identifier: F5:07:1E:20:A0:54:83:72:2C:CC:DE:66:A2:99:28:7D:71:2C:D0:E6
Certificate issuer: /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial: 5FCC00B9BDAF566BB6C3412D094C6B9E5C11D1C0
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35322e302f32332d3233203d3e20323634323136.roa
Signing time: Tue 20 Feb 2024 12:18:47 +0000
ROA not before: Tue 20 Feb 2024 12:13:47 +0000
ROA not after: Tue 18 Feb 2025 12:18:47 +0000
asID: 264216
IP address blocks: 177.86.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cc:00:b9:bd:af:56:6b:b6:c3:41:2d:09:4c:6b:9e:5c:11:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Validity
Not Before: Feb 20 12:13:47 2024 GMT
Not After : Feb 18 12:18:47 2025 GMT
Subject: CN=F5071E20A05483722CCCDE66A299287D712CD0E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:67:7a:be:b7:e5:b5:59:86:8f:9d:b9:fe:
9c:0b:e4:4c:b4:8b:ef:22:c7:ad:3e:cd:ad:42:59:
4f:30:86:24:1a:64:87:cf:8b:e9:c2:2d:fd:5d:2e:
e5:36:5a:cb:91:4a:08:a1:fe:a3:aa:11:59:d0:a1:
49:b9:a3:df:2a:17:c7:23:cb:d9:f9:f0:cf:5c:06:
3d:2b:64:e9:9b:c6:19:2c:95:7e:d8:81:43:14:b5:
1e:8b:d9:20:9c:34:b3:9a:a7:f4:a2:09:c0:55:a2:
1b:63:3a:b6:92:49:0d:8b:bb:d2:93:a0:6d:fd:ed:
50:df:ae:3c:5b:dc:b4:8e:ca:4e:47:96:89:cf:3a:
ed:56:10:1a:c9:49:89:68:4a:1b:bc:33:68:68:31:
22:18:b4:c6:7d:b1:c3:80:ae:30:f8:76:55:a2:e1:
29:c9:5a:32:89:50:dc:50:59:5b:9b:b7:7f:e3:24:
2b:23:c7:90:62:be:a0:bb:e6:58:d4:95:03:6e:9a:
b6:cd:4d:1c:c6:57:09:39:7c:86:23:4a:da:91:b0:
1c:99:6f:1b:18:17:d7:2c:1b:67:a4:7e:95:39:c9:
0d:27:e1:8f:39:ea:bc:8f:91:71:42:2b:24:a5:88:
67:d9:1a:e8:7f:f1:f6:25:a4:7a:83:a0:f1:eb:71:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:1E:20:A0:54:83:72:2C:CC:DE:66:A2:99:28:7D:71:2C:D0:E6
X509v3 Authority Key Identifier:
keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35322e302f32332d3233203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.52.0/23
Signature Algorithm: sha256WithRSAEncryption
68:0c:1f:22:91:4d:5b:8f:2b:49:51:80:df:c9:d1:f1:48:8a:
c2:2b:25:a7:70:7c:a6:1e:19:54:0b:3f:c4:27:f5:88:62:a4:
3f:88:3f:66:e1:e5:7f:80:2d:dc:bd:6c:b0:e6:3e:19:50:09:
c5:7a:58:de:8e:79:1a:32:c5:fb:65:10:48:15:f7:8b:5a:83:
be:1e:7a:96:c6:36:d2:93:1e:9a:e2:b5:40:d6:a0:56:63:86:
b2:26:4c:df:3c:a8:15:0d:0a:df:6e:c7:cd:e2:0b:4a:72:3b:
b4:7a:23:e8:70:0a:50:01:ec:db:07:bd:35:6e:e2:e1:bb:cd:
ea:6a:62:c3:30:b1:40:07:20:28:6d:be:8b:77:30:99:64:39:
f9:78:c6:7e:fb:37:c0:9b:f0:4d:cc:79:c4:f2:26:03:ec:53:
dc:78:59:6e:fd:62:d6:6e:64:41:be:86:c6:4f:b2:34:c3:d3:
c2:a6:a1:db:4a:da:e1:34:4d:0a:5f:0f:ad:17:df:78:8a:7e:
2e:18:a5:05:f7:25:c3:0c:80:e3:ee:a3:c7:4e:b5:4b:17:b7:
8d:ab:4f:53:b8:60:3b:b1:2d:56:18:73:94:01:d9:46:db:bb:
b5:32:de:98:6e:c1:ff:02:b9:f8:9f:17:0f:e9:79:79:93:88:
b1:7c:b8:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX8wAub2vVmu2w0EtCUxrnlwR0cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMUNFNEMzNjUyNzcwRDgwMUM1MDYzNzI0Q0M3MzQy
QjNGNTcyRjAeFw0yNDAyMjAxMjEzNDdaFw0yNTAyMTgxMjE4NDdaMDMxMTAvBgNV
BAMTKEY1MDcxRTIwQTA1NDgzNzIyQ0NDREU2NkEyOTkyODdENzEyQ0QwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNHWd6vrfltVmGj525/pwL5Ey0
i+8ix60+za1CWU8whiQaZIfPi+nCLf1dLuU2WsuRSgih/qOqEVnQoUm5o98qF8cj
y9n58M9cBj0rZOmbxhkslX7YgUMUtR6L2SCcNLOap/SiCcBVohtjOraSSQ2Lu9KT
oG397VDfrjxb3LSOyk5HlonPOu1WEBrJSYloShu8M2hoMSIYtMZ9scOArjD4dlWi
4SnJWjKJUNxQWVubt3/jJCsjx5BivqC75ljUlQNumrbNTRzGVwk5fIYjStqRsByZ
bxsYF9csG2ekfpU5yQ0n4Y856ryPkXFCKySliGfZGuh/8fYlpHqDoPHrcTFXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9QceIKBUg3IszN5mopkofXEs0OYwHwYDVR0j
BBgwFoAU0rHOTDZSdw2AHFBjckzHNCs/Vy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq
U1MvMC9EMkIxQ0U0QzM2NTI3NzBEODAxQzUwNjM3MjRDQzczNDJCM0Y1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQjFDRTRDMzY1Mjc3MEQ4
MDFDNTA2MzcyNENDNzM0MkIzRjU3MkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d3RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAv
MzEzNzM3MmUzODM2MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVY0MA0GCSqGSIb3DQEBCwUAA4IBAQBoDB8ikU1b
jytJUYDfydHxSIrCKyWncHymHhlUCz/EJ/WIYqQ/iD9m4eV/gC3cvWyw5j4ZUAnF
eljejnkaMsX7ZRBIFfeLWoO+HnqWxjbSkx6a4rVA1qBWY4ayJkzfPKgVDQrfbsfN
4gtKcju0eiPocApQAezbB701buLhu83qamLDMLFAByAobb6LdzCZZDn5eMZ++zfA
m/BNzHnE8iYD7FPceFlu/WLWbmRBvobGT7I0w9PCpqHbStrhNE0KXw+tF994in4u
GKUF9yXDDIDj7qPHTrVLF7eNq09TuGA7sS1WGHOUAdlG27u1Mt6YbsH/Arn4nxcP
6Xl5k4ixfLju
-----END CERTIFICATE-----
Generated at Wed May 14 01:23:31 2025 by rpki-client