Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137302e38332e302e302f32322d3234203d3e20323636343534.roa
File: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (raw, json)
Hash identifier: yQMxKAXhknB4SwnJgyNJeRMg62927dKXy6ysbI+DRCg=
Subject key identifier: 10:CC:A4:62:46:80:30:5D:67:F2:BD:7D:AD:1B:33:58:C5:0D:1D:69
Certificate issuer: /CN=78A4A875BA6BBD81EBF95316342157431299CE88
Certificate serial: 4E12F8C8108C172F5E06DD12368832C84431EBB3
Authority key identifier: 78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137302e38332e302e302f32322d3234203d3e20323636343534.roa
Signing time: Sat 25 Jan 2025 16:03:26 +0000
ROA not before: Sat 25 Jan 2025 15:58:26 +0000
ROA not after: Sat 24 Jan 2026 16:03:26 +0000
asID: 266454
IP address blocks: 170.83.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:12:f8:c8:10:8c:17:2f:5e:06:dd:12:36:88:32:c8:44:31:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A4A875BA6BBD81EBF95316342157431299CE88
Validity
Not Before: Jan 25 15:58:26 2025 GMT
Not After : Jan 24 16:03:26 2026 GMT
Subject: CN=10CCA4624680305D67F2BD7DAD1B3358C50D1D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:40:5b:c6:83:7a:91:a0:70:93:6f:12:fd:
0e:53:4b:06:ec:9a:33:81:38:2b:89:fe:ca:36:23:
71:33:9e:63:aa:92:62:cf:47:fc:df:ea:f0:72:1a:
a4:64:75:36:3b:51:bc:02:22:68:5d:2c:0d:09:18:
33:3c:f9:06:2b:90:11:70:05:8f:d3:cd:6a:f9:09:
1b:ad:c7:8e:b5:90:74:58:53:fe:7e:be:e2:f8:ca:
48:96:9c:3d:2b:6c:7e:94:6e:5d:0c:4e:41:a3:bc:
28:fe:49:f2:9c:e4:f8:ad:dc:68:fc:cf:d6:b5:6f:
c2:2a:a7:ab:bd:a3:40:fb:c4:04:bf:d3:b4:e9:a9:
bf:8c:42:7c:95:f2:63:be:a8:29:0c:a6:51:ec:63:
65:af:49:51:19:66:b5:ad:70:33:d5:5d:ea:92:5d:
eb:58:7d:46:72:5a:46:16:e9:bb:dc:b7:66:b4:53:
d3:45:15:9e:3a:a6:1b:d0:32:77:84:66:7c:84:67:
8e:7d:aa:ee:83:f0:6f:cb:fd:c6:29:74:3d:b7:8c:
ec:ee:b0:14:51:68:c3:00:48:01:f3:ce:fe:97:47:
33:03:c4:a2:12:05:90:a9:be:38:cf:8a:5c:47:c2:
a7:64:87:4d:a7:74:de:1f:27:be:80:61:a4:a9:0d:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:A4:62:46:80:30:5D:67:F2:BD:7D:AD:1B:33:58:C5:0D:1D:69
X509v3 Authority Key Identifier:
keyid:78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137302e38332e302e302f32322d3234203d3e20323636343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:4c:ed:5b:76:14:1a:54:81:57:2f:8a:83:01:ad:75:a8:ec:
62:87:0e:e0:f4:83:4e:20:da:b2:28:e6:22:0d:0d:47:e5:c1:
9c:7f:50:ea:a5:c0:d3:28:bb:f1:36:1a:ea:a9:76:cc:55:d1:
ea:1b:62:0e:76:48:0a:10:d8:b5:a9:ad:12:e7:0c:6a:3b:27:
67:e2:59:5b:94:ac:a8:e5:50:bf:90:d3:89:b0:dd:ba:b1:a5:
d6:d2:ff:60:47:8c:fe:d8:a2:c0:be:74:a2:2f:b4:45:62:4f:
68:11:48:95:a9:b6:89:e6:54:86:0e:51:e6:f7:23:a4:80:3f:
17:28:65:d8:4b:70:08:42:e5:25:3d:e3:7e:45:88:2c:0a:91:
69:14:f6:66:86:fe:64:0a:72:b1:65:1f:12:56:5d:18:f8:2d:
b4:40:52:94:8d:8f:1e:e5:5a:bf:91:f4:2c:f1:42:63:11:23:
48:57:d3:e5:56:0d:be:d4:54:7f:1f:94:46:e6:9b:79:36:61:
f3:33:ba:d0:1d:db:f3:33:f8:cc:eb:d8:12:96:54:4a:1e:61:
90:5e:e0:73:9d:c1:51:46:c9:65:84:cf:2e:1a:4a:4f:38:7e:
8f:1c:60:a1:97:ae:fc:3c:fc:4d:fa:42:f6:15:fc:96:54:3f:
11:0f:a0:96
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUThL4yBCMFy9eBt0SNogyyEQx67MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBNEE4NzVCQTZCQkQ4MUVCRjk1MzE2MzQyMTU3NDMx
Mjk5Q0U4ODAeFw0yNTAxMjUxNTU4MjZaFw0yNjAxMjQxNjAzMjZaMDMxMTAvBgNV
BAMTKDEwQ0NBNDYyNDY4MDMwNUQ2N0YyQkQ3REFEMUIzMzU4QzUwRDFENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZkBbxoN6kaBwk28S/Q5TSwbs
mjOBOCuJ/so2I3EznmOqkmLPR/zf6vByGqRkdTY7UbwCImhdLA0JGDM8+QYrkBFw
BY/TzWr5CRutx461kHRYU/5+vuL4ykiWnD0rbH6Ubl0MTkGjvCj+SfKc5Pit3Gj8
z9a1b8Iqp6u9o0D7xAS/07Tpqb+MQnyV8mO+qCkMplHsY2WvSVEZZrWtcDPVXeqS
XetYfUZyWkYW6bvct2a0U9NFFZ46phvQMneEZnyEZ459qu6D8G/L/cYpdD23jOzu
sBRRaMMASAHzzv6XRzMDxKISBZCpvjjPilxHwqdkh02ndN4fJ76AYaSpDeMXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEMykYkaAMF1n8r19rRszWMUNHWkwHwYDVR0j
BBgwFoAUeKSodbprvYHr+VMWNCFXQxKZzogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dk
M1MvMC83OEE0QTg3NUJBNkJCRDgxRUJGOTUzMTYzNDIxNTc0MzEyOTlDRTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4QTRBODc1QkE2QkJEODFF
QkY5NTMxNjM0MjE1NzQzMTI5OUNFODguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYcDVld2lEYkNuRmQzeG5DMlY1cHBtVmFrdVlVWXhEd2R2ZllEbXdnZDNTLzAv
MzEzNzMwMmUzODMzMmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM0
MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpTADANBgkqhkiG9w0BAQsFAAOCAQEAb0ztW3YUGlSB
Vy+KgwGtdajsYocO4PSDTiDasijmIg0NR+XBnH9Q6qXA0yi78TYa6ql2zFXR6hti
DnZIChDYtamtEucMajsnZ+JZW5SsqOVQv5DTibDdurGl1tL/YEeM/tiiwL50oi+0
RWJPaBFIlam2ieZUhg5R5vcjpIA/Fyhl2EtwCELlJT3jfkWILAqRaRT2Zob+ZApy
sWUfElZdGPgttEBSlI2PHuVav5H0LPFCYxEjSFfT5VYNvtRUfx+URuabeTZh8zO6
0B3b8zP4zOvYEpZUSh5hkF7gc53BUUbJZYTPLhpKTzh+jxxgoZeu/Dz8TfpC9hX8
llQ/EQ+glg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:28:26 2025 by rpki-client