Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa
File: 3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa (raw, json)
Hash identifier: VT5aO5+8kBVIwMQMXVXDh2VMCuLxKpit3Bg+sA4eRV0=
Subject key identifier: A6:7B:0A:E6:A2:08:AF:77:CE:7C:34:FC:56:1A:B7:80:E7:7D:61:2A
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 2DB1755FD27FF30D91DB3B1F83B6A34F8FB26022
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 01:07:43 +0000
ROA not before: Sat 21 Dec 2024 01:02:43 +0000
ROA not after: Sat 20 Dec 2025 01:07:43 +0000
asID: 11097
IP address blocks: 192.207.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b1:75:5f:d2:7f:f3:0d:91:db:3b:1f:83:b6:a3:4f:8f:b2:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 01:02:43 2024 GMT
Not After : Dec 20 01:07:43 2025 GMT
Subject: CN=A67B0AE6A208AF77CE7C34FC561AB780E77D612A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:be:85:d3:14:fc:bf:1b:19:c1:c4:bf:ea:
65:be:da:0e:b9:42:23:90:0b:bd:44:e4:53:51:1c:
cc:69:66:7a:20:0d:a8:4b:db:8a:bc:ee:86:f6:85:
f4:98:f7:47:29:6c:4e:df:5c:ef:aa:9e:a9:01:0e:
39:b7:1f:4f:33:ef:09:6d:36:fd:ad:47:89:3f:ec:
83:75:13:be:46:95:66:1d:f0:88:08:4c:51:ac:01:
58:93:57:72:6f:97:52:b2:c9:23:6a:0c:7f:58:08:
c1:93:63:da:73:cf:a9:b8:d7:1b:32:af:42:02:95:
2d:d2:45:82:dd:66:89:96:91:cf:dd:79:87:78:95:
0f:87:b0:b0:0b:69:71:54:3e:44:58:a7:d3:9b:5d:
f6:c9:27:a7:fb:f2:bc:47:ff:b5:00:44:ee:2d:e7:
dc:b9:24:c3:a6:e3:38:36:99:60:7c:33:2c:e2:20:
53:24:8f:60:72:d5:58:47:34:3a:fa:af:58:1d:4e:
84:e0:e3:cf:12:ca:73:f8:6f:72:c1:74:c3:94:f5:
54:73:8e:ca:33:05:c6:ea:78:47:74:f5:c7:68:bc:
f0:62:82:31:bf:68:7d:c9:d5:47:02:ee:9d:fc:0a:
09:11:3c:f7:57:ab:54:a7:68:83:90:82:04:8d:f3:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:0A:E6:A2:08:AF:77:CE:7C:34:FC:56:1A:B7:80:E7:7D:61:2A
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.207.194.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9e:f8:5a:72:4c:c9:5b:c1:ba:66:10:32:83:14:4e:46:5f:
04:91:1f:9a:4f:49:77:6f:b9:e8:15:22:00:9d:d3:9b:c7:6c:
22:06:7c:5b:2c:7e:77:03:3b:6e:e6:b5:55:40:cb:22:f7:69:
f9:73:e3:2c:17:04:02:2d:2b:dc:0b:86:4c:50:78:48:f2:51:
ad:8d:6e:1f:e7:c9:c9:95:00:0d:59:42:35:d6:da:54:d8:6d:
66:16:36:af:7c:9a:99:e3:b9:9c:ce:ca:2b:45:88:31:c6:09:
18:36:20:00:48:68:e1:e3:db:bb:4e:72:d0:6f:1c:3f:4a:78:
49:12:1a:80:6c:c9:14:c9:61:60:53:90:9b:b6:10:8f:48:f0:
1a:18:03:67:82:20:ab:dc:7d:56:dd:8e:47:93:65:30:1d:35:
c8:4f:2a:a9:40:f5:60:73:8d:8c:54:f2:4b:6f:d5:54:30:d1:
af:75:3a:24:6e:98:1a:4a:3a:63:b5:a3:67:d2:e1:b6:c5:33:
4f:e0:0e:40:98:68:5d:91:51:01:f4:4a:f7:d8:8d:d2:29:33:
a5:e6:1b:0b:5d:54:64:40:6b:22:eb:a8:83:ac:96:e1:e8:24:
64:72:b8:a0:26:c9:d2:8a:a7:51:d7:33:5f:7f:97:f5:57:ae:
ef:1c:27:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULbF1X9J/8w2R2zsfg7ajT4+yYCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRkE3Q0E0RkI2OEE3RjA0NERCQzg4ODExNDg0QzA2
NTMzNEE3NDAeFw0yNDEyMjEwMTAyNDNaFw0yNTEyMjAwMTA3NDNaMDMxMTAvBgNV
BAMTKEE2N0IwQUU2QTIwOEFGNzdDRTdDMzRGQzU2MUFCNzgwRTc3RDYxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLr6F0xT8vxsZwcS/6mW+2g65
QiOQC71E5FNRHMxpZnogDahL24q87ob2hfSY90cpbE7fXO+qnqkBDjm3H08z7wlt
Nv2tR4k/7IN1E75GlWYd8IgITFGsAViTV3Jvl1KyySNqDH9YCMGTY9pzz6m41xsy
r0IClS3SRYLdZomWkc/deYd4lQ+HsLALaXFUPkRYp9ObXfbJJ6f78rxH/7UARO4t
59y5JMOm4zg2mWB8MyziIFMkj2By1VhHNDr6r1gdToTg488SynP4b3LBdMOU9VRz
jsozBcbqeEd09cdovPBigjG/aH3J1UcC7p38CgkRPPdXq1SnaIOQggSN80YdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpnsK5qIIr3fOfDT8Vhq3gOd9YSowHwYDVR0j
BBgwFoAUIC+nyk+2in8ETbyIgRSEwGUzSnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC8yMDJGQTdDQTRGQjY4QTdGMDQ0REJDODg4MTE0ODRDMDY1MzM0QTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMkZBN0NBNEZCNjhBN0Yw
NDREQkM4ODgxMTQ4NEMwNjUzMzRBNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzEzOTMyMmUzMjMwMzcyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzEzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAz8IwDQYJKoZIhvcNAQELBQADggEBAAGe+Fpy
TMlbwbpmEDKDFE5GXwSRH5pPSXdvuegVIgCd05vHbCIGfFssfncDO27mtVVAyyL3
aflz4ywXBAItK9wLhkxQeEjyUa2Nbh/nycmVAA1ZQjXW2lTYbWYWNq98mpnjuZzO
yitFiDHGCRg2IABIaOHj27tOctBvHD9KeEkSGoBsyRTJYWBTkJu2EI9I8BoYA2eC
IKvcfVbdjkeTZTAdNchPKqlA9WBzjYxU8ktv1VQw0a91OiRumBpKOmO1o2fS4bbF
M0/gDkCYaF2RUQH0SvfYjdIpM6XmGwtdVGRAayLrqIOsluHoJGRyuKAmydKKp1HX
M19/l/VXru8cJ5o=
-----END CERTIFICATE-----
Generated at Thu May 8 10:44:50 2025 by rpki-client