Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
File: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=
Subject key identifier: 43:70:D4:01:E4:79:A1:36:20:35:74:72:59:59:3F:38:46:F4:0F:EE
Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Certificate serial: 7D0086AC78568D287068F783E9907176D932010E
Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
Signing time: Sat 04 Jan 2025 12:28:08 +0000
ROA not before: Sat 04 Jan 2025 12:23:08 +0000
ROA not after: Sat 03 Jan 2026 12:28:08 +0000
asID: 270860
IP address blocks: 190.124.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:00:86:ac:78:56:8d:28:70:68:f7:83:e9:90:71:76:d9:32:01:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Validity
Not Before: Jan 4 12:23:08 2025 GMT
Not After : Jan 3 12:28:08 2026 GMT
Subject: CN=4370D401E479A1362035747259593F3846F40FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:31:f6:4b:31:86:26:fe:37:cd:02:35:58:
59:b7:68:35:cc:74:52:df:7e:4b:c9:03:84:c5:46:
30:58:c9:a7:12:32:0b:e0:3d:88:a6:e7:e4:74:2f:
b4:2e:9e:c0:05:bd:05:5b:c1:3b:60:9d:4f:6a:72:
b2:77:38:3b:16:4e:51:b5:b2:1a:d7:b4:fe:4e:06:
4c:5a:a3:92:83:ca:af:c6:df:c9:a8:4f:71:b8:11:
3a:c7:33:73:58:23:b2:c5:59:00:41:49:a1:2a:70:
f9:73:8e:ad:2c:41:0a:f4:53:4d:e5:45:3c:43:25:
ed:ed:28:bb:8b:ed:a9:56:5b:1f:e4:15:28:bc:3c:
ea:1c:44:af:13:d5:25:fe:f3:9a:9b:7d:52:35:21:
90:99:15:c6:b4:0f:69:92:54:8b:3c:3a:47:63:a1:
57:c2:15:55:08:8c:68:7e:cc:95:cb:d3:fc:06:b9:
71:e4:0b:b1:ac:48:9e:34:32:76:a2:2c:c1:dd:06:
19:1c:d1:7b:6f:b0:db:0f:a8:04:23:14:69:92:ab:
d4:8a:88:a8:89:22:6f:79:7f:98:80:58:b2:50:74:
8c:77:00:32:3e:02:06:d9:40:5a:b7:c8:1f:65:72:
1b:84:7a:a0:f7:74:0b:1a:40:d5:71:3c:88:2b:6c:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:D4:01:E4:79:A1:36:20:35:74:72:59:59:3F:38:46:F4:0F:EE
X509v3 Authority Key Identifier:
keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:49:65:c6:84:3e:6c:ec:1d:3a:9d:1a:e2:1a:4b:7b:cb:0f:
48:37:50:0e:dc:12:b9:57:44:a4:63:8b:14:33:31:30:0a:31:
19:c7:3b:28:65:de:57:b6:6d:a7:93:ad:e1:a1:e9:95:9f:24:
06:7a:b0:8d:32:8b:b2:ca:4a:11:e1:5b:38:cc:dd:60:6d:11:
b4:98:c4:2c:01:25:9e:33:b0:e7:92:b8:aa:0d:cf:0b:d9:5f:
b2:ab:1c:fb:97:01:8d:a1:69:e0:59:09:fc:63:23:72:e0:0f:
21:c1:17:2c:a2:24:db:de:e7:69:42:a2:ec:47:63:29:13:83:
49:d0:7d:e6:84:8d:5d:c8:35:a3:c2:da:05:28:19:52:a8:b7:
eb:47:c6:84:48:06:c5:15:5a:3e:e9:a9:ad:3e:9d:4d:91:4d:
d9:17:6b:7e:72:98:cb:9c:d9:65:e7:3d:b6:df:e7:45:12:0e:
ed:a2:ee:71:bd:9a:8d:41:36:8a:53:37:67:cc:13:2c:c1:1b:
e3:f8:ea:7d:b5:fc:69:68:ba:a9:c1:2a:b2:ad:4f:ad:0f:04:
5c:2e:3c:53:a0:a3:74:01:90:4f:52:5b:aa:e5:5f:26:5d:88:
64:de:f8:72:a4:97:4f:1e:dd:b1:97:4b:36:4d:17:a0:59:f6:
71:b3:f5:5b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfQCGrHhWjShwaPeD6ZBxdtkyAQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2
MEVDQzVDMDAeFw0yNTAxMDQxMjIzMDhaFw0yNjAxMDMxMjI4MDhaMDMxMTAvBgNV
BAMTKDQzNzBENDAxRTQ3OUExMzYyMDM1NzQ3MjU5NTkzRjM4NDZGNDBGRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNDH2SzGGJv43zQI1WFm3aDXM
dFLffkvJA4TFRjBYyacSMgvgPYim5+R0L7QunsAFvQVbwTtgnU9qcrJ3ODsWTlG1
shrXtP5OBkxao5KDyq/G38moT3G4ETrHM3NYI7LFWQBBSaEqcPlzjq0sQQr0U03l
RTxDJe3tKLuL7alWWx/kFSi8POocRK8T1SX+85qbfVI1IZCZFca0D2mSVIs8Okdj
oVfCFVUIjGh+zJXL0/wGuXHkC7GsSJ40MnaiLMHdBhkc0XtvsNsPqAQjFGmSq9SK
iKiJIm95f5iAWLJQdIx3ADI+AgbZQFq3yB9lchuEeqD3dAsaQNVxPIgrbEE9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQ3DUAeR5oTYgNXRyWVk/OEb0D+4wHwYDVR0j
BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO
QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG
M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv
MzEzOTMwMmUzMTMyMzQyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL589TANBgkqhkiG9w0BAQsFAAOCAQEAW0ll
xoQ+bOwdOp0a4hpLe8sPSDdQDtwSuVdEpGOLFDMxMAoxGcc7KGXeV7Ztp5Ot4aHp
lZ8kBnqwjTKLsspKEeFbOMzdYG0RtJjELAElnjOw55K4qg3PC9lfsqsc+5cBjaFp
4FkJ/GMjcuAPIcEXLKIk297naUKi7EdjKRODSdB95oSNXcg1o8LaBSgZUqi360fG
hEgGxRVaPumprT6dTZFN2RdrfnKYy5zZZec9tt/nRRIO7aLucb2ajUE2ilM3Z8wT
LMEb4/jqfbX8aWi6qcEqsq1PrQ8EXC48U6CjdAGQT1JbquVfJl2IZN74cqSXTx7d
sZdLNk0XoFn2cbP1Ww==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:42 2025 by rpki-client