Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
File: 3137302e37382e36382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier: BkA28D3HMj0eNMNu+BLlQGzJX7ldyUSE1yLQlp6t/FA=
Subject key identifier: 35:7E:13:48:1C:D3:F5:07:60:E8:68:EC:C7:87:23:99:03:78:A2:46
Certificate issuer: /CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Certificate serial: 67A87CE340A14E52F8C196B84A23B260F44C0AE6
Authority key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
Signing time: Fri 20 Dec 2024 13:59:36 +0000
ROA not before: Fri 20 Dec 2024 13:54:36 +0000
ROA not after: Fri 19 Dec 2025 13:59:36 +0000
asID: 262669
IP address blocks: 170.78.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a8:7c:e3:40:a1:4e:52:f8:c1:96:b8:4a:23:b2:60:f4:4c:0a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Validity
Not Before: Dec 20 13:54:36 2024 GMT
Not After : Dec 19 13:59:36 2025 GMT
Subject: CN=357E13481CD3F50760E868ECC78723990378A246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:80:87:42:8e:5e:10:87:29:ba:0b:c5:26:
d8:97:da:d8:fd:68:dd:3d:55:7f:f3:29:1e:22:fb:
56:26:94:6d:92:c4:4c:f9:de:95:32:5a:a7:b4:6b:
23:a9:92:5c:77:c4:6d:3e:87:34:2c:35:b1:44:4a:
33:fb:14:d5:47:e4:03:25:2b:ff:7d:46:9c:cb:d0:
a2:ed:93:81:34:ef:26:a8:05:48:1f:ec:36:f5:dc:
ab:3a:ab:ba:95:a5:6a:b7:55:20:f4:7f:56:e6:25:
51:08:a1:58:33:03:ce:fd:e7:4e:71:2b:86:51:25:
63:01:df:2e:34:00:2b:f5:3c:b2:28:b1:1e:e5:1d:
d6:00:08:a6:a9:18:d4:af:39:1e:91:37:72:9f:17:
da:b6:db:fc:63:3b:fd:51:59:96:64:26:6f:1a:0b:
01:c3:b5:9d:37:7b:d5:3b:57:82:2b:df:e8:da:8d:
ee:3c:37:74:06:51:75:37:29:f2:cf:b0:31:64:0f:
cf:a9:17:5c:90:91:82:bd:fe:fa:36:54:41:18:a5:
3b:af:9d:82:49:7f:d4:4c:b0:15:d6:46:34:32:20:
98:bd:2b:d8:55:14:4a:fd:2a:40:29:46:35:ee:77:
4a:39:a3:b3:87:83:56:cd:4d:2b:64:ce:67:e9:4a:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:13:48:1C:D3:F5:07:60:E8:68:EC:C7:87:23:99:03:78:A2:46
X509v3 Authority Key Identifier:
keyid:24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.68.0/22
Signature Algorithm: sha256WithRSAEncryption
25:6a:98:c3:92:56:13:c7:e3:b9:80:2a:ca:5f:7f:dc:d1:16:
80:78:0c:57:01:fd:e7:a7:b8:46:08:13:bc:26:9a:4b:6a:e3:
f5:29:39:18:ce:a8:1f:f9:35:cc:2b:eb:00:54:e7:02:ed:09:
bf:55:36:d4:a5:88:79:7e:02:6e:5c:69:49:37:86:17:4b:14:
42:34:c9:1e:18:2e:4b:9c:96:10:50:0a:43:71:d1:f3:5d:e9:
0e:4c:84:0c:94:cd:ff:58:e1:90:dd:82:ea:d6:be:dd:10:a3:
43:9e:48:6d:06:17:d7:b5:06:e7:79:eb:33:27:ec:fc:b8:9b:
b9:2c:80:2b:81:9a:32:6e:c7:b8:30:25:d7:83:fe:18:b7:bb:
27:6f:60:cc:3e:3a:ac:a0:7e:55:19:3f:ff:30:7a:2b:fd:c0:
16:64:3f:1c:93:3f:ba:c7:2a:ca:e3:7f:9d:dd:f2:f4:10:3b:
5d:c0:f3:35:db:61:99:5f:f9:b0:0f:fe:03:43:93:7c:4c:04:
4f:2c:c5:ae:38:97:ad:6c:0a:06:61:30:2d:b6:1e:14:8b:5d:
4c:68:c1:68:79:36:89:eb:58:10:6f:c8:0c:99:8f:4c:b0:3e:
64:75:21:f9:fc:ad:98:e2:a1:b0:69:70:b2:4f:41:b2:0e:2a:
bd:f7:74:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ6h840ChTlL4wZa4SiOyYPRMCuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyNDA2M0Q5ODBEMTgyNERFNkVGRTZFODk5MjdGQzc1
NTBBNDU4RjAeFw0yNDEyMjAxMzU0MzZaFw0yNTEyMTkxMzU5MzZaMDMxMTAvBgNV
BAMTKDM1N0UxMzQ4MUNEM0Y1MDc2MEU4NjhFQ0M3ODcyMzk5MDM3OEEyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRa4CHQo5eEIcpugvFJtiX2tj9
aN09VX/zKR4i+1YmlG2SxEz53pUyWqe0ayOpklx3xG0+hzQsNbFESjP7FNVH5AMl
K/99RpzL0KLtk4E07yaoBUgf7Db13Ks6q7qVpWq3VSD0f1bmJVEIoVgzA879505x
K4ZRJWMB3y40ACv1PLIosR7lHdYACKapGNSvOR6RN3KfF9q22/xjO/1RWZZkJm8a
CwHDtZ03e9U7V4Ir3+jaje48N3QGUXU3KfLPsDFkD8+pF1yQkYK9/vo2VEEYpTuv
nYJJf9RMsBXWRjQyIJi9K9hVFEr9KkApRjXud0o5o7OHg1bNTStkzmfpSjQ5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNX4TSBzT9Qdg6Gjsx4cjmQN4okYwHwYDVR0j
BBgwFoAUJCQGPZgNGCTebv5uiZJ/x1UKRY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmc5ZVdVelVjVTVqbUZTakVmMUVBOUZIWk5ENWtLd0tyYmpmcUtrS2dp
ZlQvMC8yNDI0MDYzRDk4MEQxODI0REU2RUZFNkU4OTkyN0ZDNzU1MEE0NThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjQwNjNEOTgwRDE4MjRE
RTZFRkU2RTg5OTI3RkM3NTUwQTQ1OEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnOWVXVXpVY1U1am1GU2pFZjFFQTlGSFpORDVrS3dLcmJqZnFLa0tnaWZULzAv
MzEzNzMwMmUzNzM4MmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5EMA0GCSqGSIb3DQEBCwUAA4IBAQAlapjDklYT
x+O5gCrKX3/c0RaAeAxXAf3np7hGCBO8JppLauP1KTkYzqgf+TXMK+sAVOcC7Qm/
VTbUpYh5fgJuXGlJN4YXSxRCNMkeGC5LnJYQUApDcdHzXekOTIQMlM3/WOGQ3YLq
1r7dEKNDnkhtBhfXtQbneeszJ+z8uJu5LIArgZoybse4MCXXg/4Yt7snb2DMPjqs
oH5VGT//MHor/cAWZD8ckz+6xyrK43+d3fL0EDtdwPM122GZX/mwD/4DQ5N8TARP
LMWuOJetbAoGYTAtth4Ui11MaMFoeTaJ61gQb8gMmY9MsD5kdSH5/K2Y4qGwaXCy
T0GyDiq993SW
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:11 2025 by rpki-client