Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
File: 3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier: uvBBkECI1VbgaEFuxzJUet9n/o4VKpIM5/Vn2mo0uoo=
Subject key identifier: 12:1D:1B:43:CA:71:DE:14:95:F5:3E:66:04:E1:0B:B9:97:85:DD:C2
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 57ECE3EFE2AAFC9B43F11FBE203EC6B772D4B86F
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
Signing time: Wed 03 Apr 2024 23:12:21 +0000
ROA not before: Wed 03 Apr 2024 23:07:21 +0000
ROA not after: Wed 02 Apr 2025 23:12:21 +0000
asID: 52871
IP address blocks: 201.157.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ec:e3:ef:e2:aa:fc:9b:43:f1:1f:be:20:3e:c6:b7:72:d4:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Apr 3 23:07:21 2024 GMT
Not After : Apr 2 23:12:21 2025 GMT
Subject: CN=121D1B43CA71DE1495F53E6604E10BB99785DDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:e1:78:21:0a:f1:45:dc:f6:6e:0e:22:9b:
a5:ca:1a:e3:39:4a:3d:63:68:6e:62:a8:db:e3:ed:
96:e4:47:7c:68:f0:84:da:32:74:ed:56:d9:19:58:
36:6b:64:76:76:a0:33:9d:2d:17:b2:0e:5c:15:58:
3f:01:84:3d:c9:82:79:a9:52:24:3a:b5:a8:c3:81:
e1:d8:b2:49:f0:2d:dc:e2:ae:90:26:d1:73:fd:af:
e2:f8:93:54:f5:b3:ca:ee:67:b7:47:1c:37:bd:30:
b1:d8:93:e5:b8:b9:78:8f:7c:ea:27:11:f0:6e:8a:
71:b5:e8:5f:2a:0d:77:6f:79:38:f9:1e:4a:4b:84:
39:c0:12:94:82:f3:15:d4:40:54:2a:94:2d:2d:f4:
3e:34:b4:24:c1:d5:1a:7d:a8:d6:05:35:42:15:54:
25:a0:c9:53:51:41:1c:b9:8b:4e:70:d5:22:24:bd:
75:e5:f4:41:04:f2:2a:22:f2:b8:40:06:9c:38:8c:
89:30:c8:1c:60:a6:42:0d:23:b2:c0:91:08:16:f5:
5b:86:bf:a1:ac:76:b2:66:5e:d2:84:c9:7e:bc:63:
7f:f8:03:60:66:c7:88:90:e1:d6:90:e4:48:44:b6:
fb:5e:bf:8b:16:34:44:f6:87:d6:1a:bd:42:b6:73:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:1B:43:CA:71:DE:14:95:F5:3E:66:04:E1:0B:B9:97:85:DD:C2
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.200.0/21
Signature Algorithm: sha256WithRSAEncryption
49:5d:26:10:1d:21:04:9e:2a:6e:51:50:67:40:60:35:93:c6:
a2:41:50:7f:9e:cc:82:2a:f7:df:8a:d1:74:06:de:b1:6f:a4:
e7:81:d6:81:e9:61:87:ee:36:c3:df:e1:91:c6:e3:11:83:cf:
ef:fe:44:8d:34:b5:3d:6e:26:6b:a0:99:48:0c:02:6d:95:8e:
92:79:ae:bf:4b:f1:82:e5:af:2f:40:6d:4e:97:63:d1:c5:dc:
cd:6c:33:91:4b:49:cb:5d:a5:04:c8:c4:23:89:64:54:ed:dc:
d9:d9:ab:f9:49:cc:1e:80:9c:1c:e9:fc:e6:7c:a1:11:f4:5b:
5b:10:76:40:71:56:7a:d8:de:83:02:4d:8f:65:cc:6d:88:47:
3d:ec:79:cc:d6:a5:7a:c5:16:60:fa:e1:f0:b1:55:cc:60:0b:
c0:34:8f:97:2b:32:97:27:4d:15:8f:cd:d4:b3:30:b5:2a:b7:
a6:05:7f:e9:69:76:53:7f:fe:66:70:7a:99:06:7d:3c:ae:54:
d3:e9:60:b0:c2:53:e1:49:5f:9d:2b:97:38:62:f6:79:cf:1e:
3b:2a:5b:4a:1b:df:4e:07:24:1b:f8:09:cb:b0:5d:83:5c:16:
fa:e6:7b:db:ec:a8:0f:45:89:94:f1:ce:4f:d7:ea:23:49:19:
94:ef:71:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV+zj7+Kq/JtD8R++ID7Gt3LUuG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA0MDMyMzA3MjFaFw0yNTA0MDIyMzEyMjFaMDMxMTAvBgNV
BAMTKDEyMUQxQjQzQ0E3MURFMTQ5NUY1M0U2NjA0RTEwQkI5OTc4NUREQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVuF4IQrxRdz2bg4im6XKGuM5
Sj1jaG5iqNvj7ZbkR3xo8ITaMnTtVtkZWDZrZHZ2oDOdLReyDlwVWD8BhD3Jgnmp
UiQ6tajDgeHYsknwLdzirpAm0XP9r+L4k1T1s8ruZ7dHHDe9MLHYk+W4uXiPfOon
EfBuinG16F8qDXdveTj5HkpLhDnAEpSC8xXUQFQqlC0t9D40tCTB1Rp9qNYFNUIV
VCWgyVNRQRy5i05w1SIkvXXl9EEE8ioi8rhABpw4jIkwyBxgpkINI7LAkQgW9VuG
v6GsdrJmXtKEyX68Y3/4A2Bmx4iQ4daQ5EhEtvtev4sWNET2h9YavUK2cwShAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEh0bQ8px3hSV9T5mBOELuZeF3cIwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzAzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPJncgwDQYJKoZIhvcNAQELBQADggEBAEldJhAd
IQSeKm5RUGdAYDWTxqJBUH+ezIIq99+K0XQG3rFvpOeB1oHpYYfuNsPf4ZHG4xGD
z+/+RI00tT1uJmugmUgMAm2VjpJ5rr9L8YLlry9AbU6XY9HF3M1sM5FLSctdpQTI
xCOJZFTt3NnZq/lJzB6AnBzp/OZ8oRH0W1sQdkBxVnrY3oMCTY9lzG2IRz3seczW
pXrFFmD64fCxVcxgC8A0j5crMpcnTRWPzdSzMLUqt6YFf+lpdlN//mZwepkGfTyu
VNPpYLDCU+FJX50rlzhi9nnPHjsqW0ob304HJBv4CcuwXYNcFvrme9vsqA9FiZTx
zk/X6iNJGZTvcRw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:23:04 2025 by rpki-client