Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
File: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (raw, json)
Hash identifier: 0vNFsYvMvFJJcCAKJ8FiERbDz24QTy45zq2tH42NpcI=
Subject key identifier: 2B:A9:BC:EF:59:53:27:95:60:DB:8C:DC:DB:0B:B8:F1:44:69:FE:7F
Certificate issuer: /CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Certificate serial: 1C4A294AEC79F256E0E2F09301DEC1A9B42E8DCB
Authority key identifier: 8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
Signing time: Wed 29 Jan 2025 12:30:33 +0000
ROA not before: Wed 29 Jan 2025 12:25:33 +0000
ROA not after: Wed 28 Jan 2026 12:30:33 +0000
asID: 266304
IP address blocks: 170.79.200.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4a:29:4a:ec:79:f2:56:e0:e2:f0:93:01:de:c1:a9:b4:2e:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Validity
Not Before: Jan 29 12:25:33 2025 GMT
Not After : Jan 28 12:30:33 2026 GMT
Subject: CN=2BA9BCEF5953279560DB8CDCDB0BB8F14469FE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:d4:ce:76:e4:26:73:1e:7a:88:dd:c9:5c:
15:31:ea:cc:15:8e:60:d8:91:69:c4:fe:6a:d5:64:
eb:28:7d:e1:f4:49:2f:12:ee:cc:f0:79:e0:8e:59:
6d:71:5a:1c:b2:59:f6:77:02:b3:26:91:49:8b:fb:
53:a3:a3:9c:55:c3:2b:e0:dc:35:48:51:6a:e2:b6:
14:71:96:1e:2f:5e:ef:0a:8f:51:31:c7:fb:22:dc:
aa:0a:25:40:52:08:77:92:2c:4a:36:62:2e:7c:fd:
00:84:b8:b9:1f:c1:6e:25:bf:3d:aa:68:e4:49:9f:
1c:7c:68:5c:5a:5c:a5:14:c7:0c:d3:2f:50:5c:de:
20:12:23:80:6d:f8:0d:98:ec:f3:0d:39:25:5b:ab:
b7:19:69:a5:c7:51:5e:de:16:4e:94:08:c1:11:28:
c0:49:9c:0c:ca:c4:45:20:8d:a7:c3:06:c9:e1:35:
8a:5a:fb:d7:b0:d0:f9:c7:b3:c2:3a:b6:07:c9:1a:
2c:69:f9:ca:2c:42:29:54:96:6e:48:32:d9:56:34:
10:d6:2b:28:ca:9b:18:0c:d8:1d:d5:aa:fa:b6:ac:
48:2a:35:33:46:f6:13:3f:45:e6:18:35:d3:f0:ef:
64:cb:05:bb:a3:11:8e:26:d5:7e:46:c6:19:92:25:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:BC:EF:59:53:27:95:60:DB:8C:DC:DB:0B:B8:F1:44:69:FE:7F
X509v3 Authority Key Identifier:
keyid:8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d5:ad:91:7a:e6:5a:23:fa:c2:2e:41:4e:0f:e0:76:54:0e:
3e:3f:28:09:4b:94:62:21:52:9e:62:82:18:04:71:fb:53:7b:
84:37:ac:20:0b:7f:84:06:23:55:d9:31:c5:8a:ee:8c:fe:2e:
6c:e7:49:50:6a:1b:5b:0d:dc:09:35:67:75:b4:31:7e:d4:3f:
b7:b3:8f:63:11:65:d7:e5:47:10:aa:06:1f:f6:7b:33:d8:94:
7b:a5:12:e3:1e:3e:82:48:51:70:54:54:4f:ea:75:ef:28:38:
af:8c:1f:7c:e7:a0:ce:86:68:1f:7a:08:23:a0:a5:5d:51:18:
1f:af:b0:3c:8b:d3:1b:d2:7b:1e:53:08:c2:25:45:20:c9:72:
de:08:1a:69:e3:6a:d9:4a:9e:c2:e2:35:ef:18:e9:26:da:6f:
a9:9a:46:f3:ff:9d:0b:6e:44:59:33:c9:f8:4a:a2:67:55:46:
87:97:97:ee:88:2e:19:79:b7:79:54:ad:e4:5a:1d:63:c5:e0:
1a:79:46:27:55:ef:24:01:87:82:f9:a1:d5:49:cf:68:a1:83:
71:d7:2f:dc:ad:06:09:6c:5f:81:cc:2f:3b:22:f6:7d:60:73:
dc:e5:7e:fa:24:94:7c:cb:82:7a:8e:3d:3e:20:0a:1f:15:3c:
a0:2f:49:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHEopSux58lbg4vCTAd7BqbQujcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFMEQxMzFFNDI5RTJDNDE2NDhCQzg3NUQ5MDBEN0Ey
MUExRjFDMzAeFw0yNTAxMjkxMjI1MzNaFw0yNjAxMjgxMjMwMzNaMDMxMTAvBgNV
BAMTKDJCQTlCQ0VGNTk1MzI3OTU2MERCOENEQ0RCMEJCOEYxNDQ2OUZFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrdTOduQmcx56iN3JXBUx6swV
jmDYkWnE/mrVZOsofeH0SS8S7szweeCOWW1xWhyyWfZ3ArMmkUmL+1Ojo5xVwyvg
3DVIUWrithRxlh4vXu8Kj1Exx/si3KoKJUBSCHeSLEo2Yi58/QCEuLkfwW4lvz2q
aORJnxx8aFxaXKUUxwzTL1Bc3iASI4Bt+A2Y7PMNOSVbq7cZaaXHUV7eFk6UCMER
KMBJnAzKxEUgjafDBsnhNYpa+9ew0PnHs8I6tgfJGixp+cosQilUlm5IMtlWNBDW
KyjKmxgM2B3Vqvq2rEgqNTNG9hM/ReYYNdPw72TLBbujEY4m1X5GxhmSJYnrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK6m871lTJ5Vg24zc2wu48URp/n8wHwYDVR0j
BBgwFoAUjODRMeQp4sQWSLyHXZANeiGh8cMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC84Q0UwRDEzMUU0MjlFMkM0MTY0OEJDODc1RDkwMEQ3QTIxQTFGMUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRTBEMTMxRTQyOUUyQzQx
NjQ4QkM4NzVEOTAwRDdBMjFBMUYxQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAv
MzEzNzMwMmUzNzM5MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT8gwDQYJKoZIhvcNAQELBQADggEBAG3VrZF6
5loj+sIuQU4P4HZUDj4/KAlLlGIhUp5ighgEcftTe4Q3rCALf4QGI1XZMcWK7oz+
LmznSVBqG1sN3Ak1Z3W0MX7UP7ezj2MRZdflRxCqBh/2ezPYlHulEuMePoJIUXBU
VE/qde8oOK+MH3znoM6GaB96CCOgpV1RGB+vsDyL0xvSex5TCMIlRSDJct4IGmnj
atlKnsLiNe8Y6Sbab6maRvP/nQtuRFkzyfhKomdVRoeXl+6ILhl5t3lUreRaHWPF
4Bp5RidV7yQBh4L5odVJz2ihg3HXL9ytBglsX4HMLzsi9n1gc9zlfvoklHzLgnqO
PT4gCh8VPKAvSaI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:17:53 2025 by rpki-client