Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
File: 3137372e38372e302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier: 9RNyPYQNRaaH3W6sHKFOqribFZpCCF43wyslch62fPU=
Subject key identifier: 05:E2:35:0B:81:C2:D4:0E:A8:EB:70:CA:76:E8:34:03:7D:B1:9E:F8
Certificate issuer: /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial: B48B29691EB7066B3D705C4EA010FF834931C3
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access: rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
Signing time: Thu 04 Apr 2024 03:24:14 +0000
ROA not before: Thu 04 Apr 2024 03:19:14 +0000
ROA not after: Thu 03 Apr 2025 03:24:14 +0000
asID: 262642
IP address blocks: 177.87.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b4:8b:29:69:1e:b7:06:6b:3d:70:5c:4e:a0:10:ff:83:49:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Validity
Not Before: Apr 4 03:19:14 2024 GMT
Not After : Apr 3 03:24:14 2025 GMT
Subject: CN=05E2350B81C2D40EA8EB70CA76E834037DB19EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:b9:f1:62:d5:d1:80:57:87:8f:65:9e:0b:
a4:ce:76:0d:2e:af:bf:34:bc:a6:5f:46:cf:90:b1:
de:05:12:a4:59:57:44:a1:f4:de:88:e5:4c:93:74:
33:74:29:59:a0:c8:22:08:17:3f:44:2a:14:20:6e:
64:6d:fc:3f:44:0e:76:4a:00:f3:e1:b5:57:8a:ed:
bf:e9:7f:01:9c:ef:15:2d:cb:42:91:c2:19:cb:bb:
2d:54:44:55:1a:ab:80:f8:07:2e:68:a4:8d:ed:f2:
7a:5c:12:4f:1c:29:77:07:dd:28:62:ac:1d:c3:da:
c0:b0:07:c4:77:29:3e:f0:96:31:25:94:e5:3f:bf:
f9:77:42:20:af:f4:c2:cc:4d:c1:a8:52:71:06:cf:
47:8f:22:fd:d8:bd:c4:5e:cb:44:8d:50:27:5c:f9:
8c:7f:d7:ad:4f:dd:9c:35:f6:ce:7e:61:94:42:22:
99:a9:84:d9:3b:a1:0f:89:22:5b:c5:da:3b:8b:76:
6b:b7:6c:03:5a:c6:86:36:fc:75:b3:f2:43:2b:16:
fb:7e:5b:fd:d8:15:6c:56:62:7b:78:1c:62:41:81:
33:2f:c7:6f:3a:a1:d4:a5:d5:c4:75:22:ac:10:70:
7a:b0:a2:f7:c9:ad:0e:b2:7e:e5:f7:53:d3:58:29:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:35:0B:81:C2:D4:0E:A8:EB:70:CA:76:E8:34:03:7D:B1:9E:F8
X509v3 Authority Key Identifier:
keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.0.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:bb:79:f9:8e:f0:0d:74:48:35:e0:92:ff:17:dc:b1:21:ea:
ae:ea:e4:2c:b2:b9:2b:60:4a:98:2f:eb:da:b1:57:29:3e:6d:
83:5d:59:69:22:a2:54:dc:bb:0a:50:aa:ab:94:61:5a:aa:91:
b1:36:6a:a3:02:67:73:e8:1a:a9:cd:6f:9a:04:61:17:f2:37:
0f:cd:f5:f1:42:da:47:a8:c6:62:ef:6b:86:d0:e7:bc:a8:ee:
5e:f4:18:e0:fd:d3:cc:84:e2:23:8b:39:6b:38:6d:21:d2:29:
38:09:31:9c:64:12:1c:f9:98:78:70:7f:73:a7:9f:9f:72:d2:
d8:da:02:93:0f:aa:6e:e4:3f:c5:e8:d8:ff:55:84:f1:f7:ce:
d5:2d:54:30:b2:5d:77:bf:82:01:a2:db:35:f0:bc:98:6e:d0:
9e:81:b0:c1:92:5b:34:5d:44:64:65:90:57:3a:88:cc:72:83:
ce:30:14:d3:d6:cb:18:4b:c9:27:3e:fd:de:4e:4a:71:45:8c:
ba:e8:84:a9:94:0c:00:70:76:e7:4e:7b:d3:eb:e8:35:32:ce:
83:c2:c8:d0:4a:94:d9:a6:2b:4e:ac:e9:f4:15:0f:d0:c0:22:
96:0d:b9:99:5e:a1:fc:fa:31:0b:a5:9c:fd:14:13:98:9e:b0:
4b:72:6f:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUALSLKWketwZrPXBcTqAQ/4NJMcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNDA0MDQwMzE5MTRaFw0yNTA0MDMwMzI0MTRaMDMxMTAvBgNV
BAMTKDA1RTIzNTBCODFDMkQ0MEVBOEVCNzBDQTc2RTgzNDAzN0RCMTlFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqbnxYtXRgFeHj2WeC6TOdg0u
r780vKZfRs+Qsd4FEqRZV0Sh9N6I5UyTdDN0KVmgyCIIFz9EKhQgbmRt/D9EDnZK
APPhtVeK7b/pfwGc7xUty0KRwhnLuy1URFUaq4D4By5opI3t8npcEk8cKXcH3Shi
rB3D2sCwB8R3KT7wljEllOU/v/l3QiCv9MLMTcGoUnEGz0ePIv3YvcRey0SNUCdc
+Yx/161P3Zw19s5+YZRCIpmphNk7oQ+JIlvF2juLdmu3bANaxoY2/HWz8kMrFvt+
W/3YFWxWYnt4HGJBgTMvx286odSl1cR1IqwQcHqwovfJrQ6yfuX3U9NYKeKLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBeI1C4HC1A6o63DKdug0A32xnvgwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzM3MmUzODM3MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFXADANBgkqhkiG9w0BAQsFAAOCAQEAGrt5+Y7wDXRI
NeCS/xfcsSHqrurkLLK5K2BKmC/r2rFXKT5tg11ZaSKiVNy7ClCqq5RhWqqRsTZq
owJnc+gaqc1vmgRhF/I3D8318ULaR6jGYu9rhtDnvKjuXvQY4P3TzITiI4s5azht
IdIpOAkxnGQSHPmYeHB/c6efn3LS2NoCkw+qbuQ/xejY/1WE8ffO1S1UMLJdd7+C
AaLbNfC8mG7QnoGwwZJbNF1EZGWQVzqIzHKDzjAU09bLGEvJJz793k5KcUWMuuiE
qZQMAHB250570+voNTLOg8LI0EqU2aYrTqzp9BUP0MAilg25mV6h/PoxC6Wc/RQT
mJ6wS3JvEA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:26:19 2025 by rpki-client