Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
File: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: sgPVXn3CJ4qDmo0ILpgu0Y0u1OnQN+QQNXAnHa/XZPM=
Subject key identifier: 90:E4:FD:87:09:CF:89:F5:8B:FD:3B:01:FD:AA:8D:9D:F8:FC:45:FE
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 0939D5953A5EC2D09BE1CD4B480CB0D4ADE59215
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:18 +0000
ROA not before: Mon 13 Jan 2025 13:27:18 +0000
ROA not after: Mon 12 Jan 2026 13:32:18 +0000
asID: 28202
IP address blocks: 187.44.0.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:39:d5:95:3a:5e:c2:d0:9b:e1:cd:4b:48:0c:b0:d4:ad:e5:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:18 2025 GMT
Not After : Jan 12 13:32:18 2026 GMT
Subject: CN=90E4FD8709CF89F58BFD3B01FDAA8D9DF8FC45FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:52:34:ca:c9:57:de:bc:8a:07:b2:b1:03:
89:8f:2b:18:eb:c7:db:0f:22:88:ef:c6:31:10:7b:
50:c3:ca:c7:21:5b:85:36:57:7a:1a:2c:80:46:eb:
4a:ba:58:04:ca:9a:65:63:83:ac:0e:bb:a6:35:f5:
62:14:8c:ad:55:7c:51:3f:7a:98:d7:85:09:de:49:
69:2b:d8:e6:f1:09:4d:0f:ac:c7:77:02:d1:b2:a4:
c1:9d:10:64:33:f0:a5:59:3d:3f:d9:9f:5f:e0:e1:
66:93:52:87:2a:9a:d6:69:8d:5c:11:73:16:43:6d:
1b:71:70:fc:20:02:6c:80:4e:9a:32:45:8c:2b:d3:
b6:be:11:8e:fb:1a:f0:19:5e:a1:22:33:23:45:21:
fa:cb:2b:99:34:89:44:d8:25:63:98:72:95:a0:7b:
d9:8e:3f:a1:37:52:d2:c5:3d:92:8f:22:1b:ea:02:
c8:c9:e0:4c:1c:ad:a2:46:e1:7e:a7:7c:9d:aa:a6:
ca:20:fd:50:3d:63:0a:ac:f5:ec:b2:9f:ad:08:a5:
b9:03:2f:40:84:56:24:b6:52:ec:0d:4d:08:02:32:
cf:71:74:5e:ae:02:23:0c:00:aa:16:90:c7:0c:f0:
4c:a1:b6:84:77:c0:f1:f2:b1:6a:e7:dc:81:ff:de:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:FD:87:09:CF:89:F5:8B:FD:3B:01:FD:AA:8D:9D:F8:FC:45:FE
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.44.0.0/18
Signature Algorithm: sha256WithRSAEncryption
54:09:41:ad:aa:3f:2b:89:4e:14:55:09:e0:3a:b8:64:59:40:
d6:42:ee:41:e3:c7:e3:bd:e1:9e:6c:28:85:f6:31:e4:52:f9:
37:f4:14:49:d3:c5:6e:8c:eb:37:0a:72:d0:d8:75:f0:c3:4f:
ba:93:63:03:0a:ab:4e:b4:b3:d4:fb:fe:4e:c2:b1:19:0f:b6:
1b:97:5d:5b:7e:7c:ea:24:ca:7d:78:0e:21:c6:0e:d0:e8:c9:
a4:be:84:d3:c8:97:da:46:8b:cd:d6:e3:f1:3c:7a:02:e2:ca:
51:f8:48:d9:ce:de:29:9c:29:76:0e:31:4b:95:57:8a:f5:1f:
2c:14:b8:ac:08:0f:85:6e:de:49:87:52:65:a7:13:50:0f:cb:
4e:7d:23:71:b1:2e:ef:79:6b:14:2c:58:11:a8:f2:49:aa:b8:
53:bc:4c:a9:f2:c3:28:c0:89:e1:8e:38:78:86:0b:f8:dd:1c:
83:e7:12:2b:f5:9a:ca:3d:08:44:00:76:a7:1e:2c:43:b3:98:
8f:aa:3b:88:31:4f:db:fa:93:b5:3c:bd:14:2a:3c:a7:99:18:
f7:13:76:d9:b1:7c:be:17:35:3a:b1:41:5c:2f:ed:38:b7:b1:
7e:01:d8:97:37:6b:08:73:79:cb:ea:57:0f:fd:41:27:cf:e0:
7a:42:6b:6c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUCTnVlTpewtCb4c1LSAyw1K3lkhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4
NEZFQzA4MzAeFw0yNTAxMTMxMzI3MThaFw0yNjAxMTIxMzMyMThaMDMxMTAvBgNV
BAMTKDkwRTRGRDg3MDlDRjg5RjU4QkZEM0IwMUZEQUE4RDlERjhGQzQ1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3FI0yslX3ryKB7KxA4mPKxjr
x9sPIojvxjEQe1DDyschW4U2V3oaLIBG60q6WATKmmVjg6wOu6Y19WIUjK1VfFE/
epjXhQneSWkr2ObxCU0PrMd3AtGypMGdEGQz8KVZPT/Zn1/g4WaTUocqmtZpjVwR
cxZDbRtxcPwgAmyATpoyRYwr07a+EY77GvAZXqEiMyNFIfrLK5k0iUTYJWOYcpWg
e9mOP6E3UtLFPZKPIhvqAsjJ4EwcraJG4X6nfJ2qpsog/VA9Ywqs9eyyn60IpbkD
L0CEViS2UuwNTQgCMs9xdF6uAiMMAKoWkMcM8EyhtoR3wPHysWrn3IH/3os3AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUkOT9hwnPifWL/TsB/aqNnfj8Rf4wHwYDVR0j
BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0
REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv
MzEzODM3MmUzNDM0MmUzMDJlMzAyZjMxMzgyZDMyMzUyMDNkM2UyMDMyMzgzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAa7LAAwDQYJKoZIhvcNAQELBQADggEBAFQJQa2qPyuJThRV
CeA6uGRZQNZC7kHjx+O94Z5sKIX2MeRS+Tf0FEnTxW6M6zcKctDYdfDDT7qTYwMK
q060s9T7/k7CsRkPthuXXVt+fOokyn14DiHGDtDoyaS+hNPIl9pGi83W4/E8egLi
ylH4SNnO3imcKXYOMUuVV4r1HywUuKwID4Vu3kmHUmWnE1APy059I3GxLu95axQs
WBGo8kmquFO8TKnywyjAieGOOHiGC/jdHIPnEiv1mso9CEQAdqceLEOzmI+qO4gx
T9v6k7U8vRQqPKeZGPcTdtmxfL4XNTqxQVwv7Ti3sX4B2Jc3awhzecvqVw/9QSfP
4HpCa2w=
-----END CERTIFICATE-----
Generated at Mon May 12 23:42:57 2025 by rpki-client