Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
File: 3136382e3139352e302e302f32322d3232203d3e20323635343130.roa (raw, json)
Hash identifier: ysIiHmNm4sTU+Wq3IPQH9xxUnGS/44r8PfWAPSgMdA0=
Subject key identifier: CD:C1:11:63:31:AA:59:9F:CC:2D:B6:BC:98:CF:53:5E:F1:BC:7C:83
Certificate issuer: /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial: 422C88E19221366394A6537EE2A9A9668190FF26
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
Signing time: Thu 04 Apr 2024 16:32:58 +0000
ROA not before: Thu 04 Apr 2024 16:27:58 +0000
ROA not after: Thu 03 Apr 2025 16:32:58 +0000
asID: 265410
IP address blocks: 168.195.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:88:e1:92:21:36:63:94:a6:53:7e:e2:a9:a9:66:81:90:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Validity
Not Before: Apr 4 16:27:58 2024 GMT
Not After : Apr 3 16:32:58 2025 GMT
Subject: CN=CDC1116331AA599FCC2DB6BC98CF535EF1BC7C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:ae:5d:bf:64:ac:ec:6b:42:60:36:9f:2c:
dc:43:18:e6:ee:53:bb:0e:ca:68:9b:56:2f:ee:10:
e8:33:67:cb:ef:b4:77:ac:c1:b9:24:f6:bb:e0:98:
0c:85:17:d8:b8:60:94:fa:3f:d5:f1:98:1f:9d:a7:
9c:b2:90:e5:96:ce:3c:82:d4:b0:21:f0:db:67:3b:
1a:df:80:56:4b:17:a7:a7:a1:c6:b5:6e:23:fc:b7:
de:8a:2e:d0:2c:50:53:e5:36:53:4c:ea:ed:81:9c:
ca:9f:f5:c9:c8:80:ac:d5:d6:c1:20:ab:ff:a7:d1:
dc:fe:92:5d:57:57:6c:6e:b3:e0:3b:40:3a:af:92:
99:71:db:10:45:3e:4e:f9:3d:dd:d8:43:dc:d3:e4:
4e:df:99:b2:ab:4d:fb:8c:1d:2e:7a:5c:aa:09:97:
90:70:ae:ec:3c:1d:8e:c9:e2:8b:4b:99:8e:a1:53:
52:3c:78:45:f0:f0:88:63:0c:23:04:eb:cc:ed:f2:
a8:75:99:69:9f:15:f5:c9:62:61:89:8f:b7:e1:18:
9d:51:7e:35:43:9f:d5:4d:12:8b:16:8b:20:ca:ea:
9e:fa:53:fc:ec:33:37:5a:5e:a8:97:e8:8a:65:69:
93:75:61:95:fa:c1:4e:c5:8e:93:75:87:4d:a1:db:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:11:63:31:AA:59:9F:CC:2D:B6:BC:98:CF:53:5E:F1:BC:7C:83
X509v3 Authority Key Identifier:
keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:86:39:b2:cc:9d:da:3e:b3:76:c8:32:df:23:89:cd:46:09:
34:00:ba:b4:42:4b:16:d0:52:9f:66:ca:f3:f0:54:79:3d:af:
b3:14:c8:21:cb:ed:50:2f:a3:e2:9e:82:b7:53:9b:fd:17:07:
f2:0e:36:4a:9d:01:0c:ba:b0:f9:7e:93:fc:00:5b:f3:c9:87:
a8:34:95:0a:33:9d:0c:e7:c0:96:31:6c:f1:8b:97:87:91:00:
b3:2a:e1:e4:cc:15:5f:5e:c9:a2:69:9b:ca:7f:e5:3d:15:ac:
cd:d3:1a:5c:9e:34:46:54:3e:5b:6c:69:0e:7a:f9:95:15:bc:
9a:b2:28:1d:43:cf:05:05:7d:b6:ff:b4:1f:73:df:d8:de:8e:
9d:32:f7:a9:30:61:88:f5:16:7c:ed:42:0f:aa:e6:e0:c3:d9:
a4:03:1f:be:10:1a:c4:9a:a1:f7:87:41:36:ce:97:6a:34:3e:
8f:45:14:27:2c:23:2b:b8:67:aa:77:d5:19:34:67:b4:18:8c:
b5:57:41:27:60:f0:9a:61:d5:a4:d7:4e:26:f4:b5:57:3b:95:
f5:7a:a0:f2:35:26:a0:4a:38:b1:cc:15:3e:4d:55:d7:ae:e9:
d5:09:00:64:b9:e5:2f:d2:d6:3d:e5:fa:23:c9:4b:e3:ff:65:
b2:5c:51:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQiyI4ZIhNmOUplN+4qmpZoGQ/yYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5NDZEOTlBQkNEQkY5NjdGMDFEMkFBQTYxNDlBNjVE
NzdENkQ3RTAeFw0yNDA0MDQxNjI3NThaFw0yNTA0MDMxNjMyNThaMDMxMTAvBgNV
BAMTKENEQzExMTYzMzFBQTU5OUZDQzJEQjZCQzk4Q0Y1MzVFRjFCQzdDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfg65dv2Ss7GtCYDafLNxDGObu
U7sOymibVi/uEOgzZ8vvtHeswbkk9rvgmAyFF9i4YJT6P9XxmB+dp5yykOWWzjyC
1LAh8NtnOxrfgFZLF6enoca1biP8t96KLtAsUFPlNlNM6u2BnMqf9cnIgKzV1sEg
q/+n0dz+kl1XV2xus+A7QDqvkplx2xBFPk75Pd3YQ9zT5E7fmbKrTfuMHS56XKoJ
l5Bwruw8HY7J4otLmY6hU1I8eEXw8IhjDCME68zt8qh1mWmfFfXJYmGJj7fhGJ1R
fjVDn9VNEosWiyDK6p76U/zsMzdaXqiX6IplaZN1YZX6wU7FjpN1h02h23LbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzcERYzGqWZ/MLba8mM9TXvG8fIMwHwYDVR0j
BBgwFoAUVpRtmavNv5Z/AdKqphSaZdd9bX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FaalpMejh6M29ucWlWS240WWFXRUxyUFRSZVFVRnlHUHhxQnEyMjdM
NncvMS81Njk0NkQ5OUFCQ0RCRjk2N0YwMUQyQUFBNjE0OUE2NUQ3N0Q2RDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTQ2RDk5QUJDREJGOTY3
RjAxRDJBQUE2MTQ5QTY1RDc3RDZEN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxWmpaTHo4ejNvbnFpVktuNFlhV0VMclBUUmVRVUZ5R1B4cUJxMjI3TDZ3LzEv
MzEzNjM4MmUzMTM5MzUyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1
MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMMAMA0GCSqGSIb3DQEBCwUAA4IBAQDFhjmyzJ3a
PrN2yDLfI4nNRgk0ALq0QksW0FKfZsrz8FR5Pa+zFMghy+1QL6PinoK3U5v9Fwfy
DjZKnQEMurD5fpP8AFvzyYeoNJUKM50M58CWMWzxi5eHkQCzKuHkzBVfXsmiaZvK
f+U9FazN0xpcnjRGVD5bbGkOevmVFbyasigdQ88FBX22/7Qfc9/Y3o6dMvepMGGI
9RZ87UIPqubgw9mkAx++EBrEmqH3h0E2zpdqND6PRRQnLCMruGeqd9UZNGe0GIy1
V0EnYPCaYdWk104m9LVXO5X1eqDyNSagSjixzBU+TVXXrunVCQBkueUv0tY95foj
yUvj/2WyXFHE
-----END CERTIFICATE-----
Generated at Sat May 10 17:29:40 2025 by rpki-client