Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa
File: 3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier: C1ZtIlQuPzNoWMWLN+5MOrSrWzh3syOVKn9+1rE9TnU=
Subject key identifier: CF:82:B5:3D:D0:48:74:15:A1:37:D7:62:8C:9F:4D:71:2B:94:B3:CC
Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial: 12FBAA1DB580960143F8F737848FDEF6B05BF641
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa
Signing time: Fri 27 Dec 2024 13:16:45 +0000
ROA not before: Fri 27 Dec 2024 13:11:45 +0000
ROA not after: Fri 26 Dec 2025 13:16:45 +0000
asID: 52573
IP address blocks: 177.125.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fb:aa:1d:b5:80:96:01:43:f8:f7:37:84:8f:de:f6:b0:5b:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Validity
Not Before: Dec 27 13:11:45 2024 GMT
Not After : Dec 26 13:16:45 2025 GMT
Subject: CN=CF82B53DD0487415A137D7628C9F4D712B94B3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:07:97:19:3d:28:b2:c9:f5:27:df:66:95:
33:0b:26:a1:5d:22:6b:79:05:bc:ea:5a:99:c1:19:
e4:86:fc:90:cc:b5:ea:5c:96:9d:a3:9b:3d:a4:a7:
93:57:a8:61:48:d6:12:11:40:60:c6:62:f9:bd:d1:
c4:af:16:e3:fc:51:b6:be:e1:36:51:05:d4:54:a0:
0d:47:92:00:90:87:5d:28:3c:d9:d8:bc:b7:28:d8:
c5:c2:61:d2:32:33:4f:b4:3d:4d:de:18:82:7a:bf:
d9:43:1b:0f:ea:5e:6e:32:47:aa:27:32:94:61:01:
6d:55:05:99:97:78:7d:4f:07:71:ee:42:0b:ad:62:
d5:f0:20:87:87:fe:8a:fd:70:90:8b:f0:cb:2f:c8:
78:d3:ce:4b:ff:a7:2f:b8:d1:3d:c9:9f:05:2b:f9:
cf:52:10:ed:64:2d:e2:4e:f7:6b:61:da:a3:46:68:
d8:0a:9d:3c:2c:c4:b5:a9:8f:af:48:86:d6:97:b6:
d3:bc:52:c7:73:e3:42:16:1c:38:dc:3b:23:f2:9c:
68:d9:87:b7:d5:8e:60:1f:75:25:72:38:19:25:ee:
50:2f:67:38:d8:4b:9a:7f:c0:9e:18:9b:a1:cc:3b:
c6:82:fa:68:d0:35:6a:7c:b5:f7:f9:85:00:b5:5a:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:B5:3D:D0:48:74:15:A1:37:D7:62:8C:9F:4D:71:2B:94:B3:CC
X509v3 Authority Key Identifier:
keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.108.0/22
Signature Algorithm: sha256WithRSAEncryption
21:c5:37:3d:93:ee:0f:b0:42:fe:19:39:4e:51:f4:d9:07:72:
5a:f8:e9:f8:50:82:d1:0a:a1:ee:29:90:95:3e:1b:39:05:35:
d1:77:63:30:5f:af:98:2a:6a:6d:ba:ef:7b:cc:81:2b:8f:65:
12:76:e0:e5:5c:ef:02:db:79:b2:6e:a9:1e:88:eb:3e:54:c7:
df:ae:65:67:50:08:02:05:66:9c:e0:82:35:1b:fa:f6:ba:19:
67:87:7c:45:ab:63:8b:44:32:eb:18:0d:4e:79:a7:ac:e9:74:
d0:30:3f:be:10:0e:c1:2b:5e:80:d8:52:e4:90:91:89:1b:53:
97:a8:30:e5:3f:e1:2f:f9:2a:e4:74:eb:70:fc:3a:a7:5c:2e:
b2:97:22:e8:77:91:d7:ea:c4:c4:69:9e:1e:c1:df:3e:d3:3e:
83:c1:1c:2f:d2:21:bc:1b:6b:e4:d6:3a:be:ee:55:23:06:e0:
c4:e3:f2:12:b8:1b:fa:a7:9b:36:1c:35:25:0b:14:17:80:ab:
58:99:5b:6a:97:3c:f9:42:39:5e:6d:64:be:cd:0e:01:bf:74:
d2:d3:cb:fe:9a:65:6b:22:f2:62:b9:b3:4a:eb:7b:cd:84:31:
61:8a:9a:f4:27:21:45:90:e2:66:6b:7c:25:0f:e1:8e:0a:d2:
f5:91:8d:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEvuqHbWAlgFD+Pc3hI/e9rBb9kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4
NjdFMjVDNzAeFw0yNDEyMjcxMzExNDVaFw0yNTEyMjYxMzE2NDVaMDMxMTAvBgNV
BAMTKENGODJCNTNERDA0ODc0MTVBMTM3RDc2MjhDOUY0RDcxMkI5NEIzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoAeXGT0ossn1J99mlTMLJqFd
Imt5BbzqWpnBGeSG/JDMtepclp2jmz2kp5NXqGFI1hIRQGDGYvm90cSvFuP8Uba+
4TZRBdRUoA1HkgCQh10oPNnYvLco2MXCYdIyM0+0PU3eGIJ6v9lDGw/qXm4yR6on
MpRhAW1VBZmXeH1PB3HuQgutYtXwIIeH/or9cJCL8MsvyHjTzkv/py+40T3JnwUr
+c9SEO1kLeJO92th2qNGaNgKnTwsxLWpj69IhtaXttO8Usdz40IWHDjcOyPynGjZ
h7fVjmAfdSVyOBkl7lAvZzjYS5p/wJ4Ym6HMO8aC+mjQNWp8tff5hQC1WkbFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz4K1PdBIdBWhN9dijJ9NcSuUs8wwHwYDVR0j
BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF
ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4
MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv
MzEzNzM3MmUzMTMyMzUyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfWwwDQYJKoZIhvcNAQELBQADggEBACHFNz2T
7g+wQv4ZOU5R9NkHclr46fhQgtEKoe4pkJU+GzkFNdF3YzBfr5gqam2673vMgSuP
ZRJ24OVc7wLbebJuqR6I6z5Ux9+uZWdQCAIFZpzggjUb+va6GWeHfEWrY4tEMusY
DU55p6zpdNAwP74QDsErXoDYUuSQkYkbU5eoMOU/4S/5KuR063D8OqdcLrKXIuh3
kdfqxMRpnh7B3z7TPoPBHC/SIbwba+TWOr7uVSMG4MTj8hK4G/qnmzYcNSULFBeA
q1iZW2qXPPlCOV5tZL7NDgG/dNLTy/6aZWsi8mK5s0rre82EMWGKmvQnIUWQ4mZr
fCUP4Y4K0vWRjbg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:29 2025 by rpki-client