Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa
File: 3134332e302e34382e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier: LzkVSzTqvnVphNoB0B2QtupdBPIOLHSdEFccZfmX5Ks=
Subject key identifier: 8D:C6:0B:E9:3F:18:3D:82:E9:E8:41:B2:C3:C8:71:95:79:C2:4E:71
Certificate issuer: /CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Certificate serial: 54E41EF2F9B5ABA4D0610FC1E32A60288854001F
Authority key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa
Signing time: Sat 14 Dec 2024 12:12:36 +0000
ROA not before: Sat 14 Dec 2024 12:07:36 +0000
ROA not after: Sat 13 Dec 2025 12:12:36 +0000
asID: 263544
IP address blocks: 143.0.48.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e4:1e:f2:f9:b5:ab:a4:d0:61:0f:c1:e3:2a:60:28:88:54:00:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Validity
Not Before: Dec 14 12:07:36 2024 GMT
Not After : Dec 13 12:12:36 2025 GMT
Subject: CN=8DC60BE93F183D82E9E841B2C3C8719579C24E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:30:0d:9d:1a:c5:8e:70:cc:97:19:f9:32:
20:6e:30:6e:8e:e7:9d:63:3c:f4:cd:3f:bc:48:f4:
ee:08:00:cf:7d:b7:58:94:ee:2b:c2:4a:d1:36:eb:
48:1e:87:6c:2b:94:3b:5f:10:c8:01:89:10:d2:8f:
0f:bc:6a:02:40:54:e4:c8:b9:48:95:24:e5:dc:14:
36:43:92:74:cc:92:dc:fd:4f:72:3e:34:42:e1:e9:
6d:a8:4c:0f:f5:71:54:ae:a7:9f:a3:5e:ec:07:83:
31:e5:66:b2:f0:b6:dd:94:58:9a:86:82:20:4a:5e:
0e:95:38:4e:cf:8c:f3:9b:d5:13:28:cc:cd:65:75:
7f:f3:71:16:2a:b7:eb:da:89:be:43:38:6e:42:3c:
ba:3a:e1:22:13:71:37:25:8b:e6:73:af:ba:cc:a4:
1e:2e:21:53:63:24:ec:b6:77:2d:5d:60:a4:4b:e2:
d2:0f:33:48:c1:41:4f:db:03:d1:2a:bb:d8:42:a5:
64:db:4f:23:ab:c0:d9:bf:b1:ea:6d:6e:eb:67:bc:
3c:02:ee:bf:ba:6d:fd:0c:55:d8:af:03:e5:40:2b:
d5:05:44:39:07:f0:97:d7:3e:2c:a1:e1:82:d1:78:
b3:75:76:1e:84:47:f3:58:d7:11:db:cc:cc:88:f4:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:0B:E9:3F:18:3D:82:E9:E8:41:B2:C3:C8:71:95:79:C2:4E:71
X509v3 Authority Key Identifier:
keyid:8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:d4:41:83:9a:36:f6:a7:57:b2:6e:9b:d8:4e:c2:b1:d0:40:
d8:af:5e:a4:82:ae:1c:31:c5:62:d4:55:d4:2c:59:16:43:a9:
e9:a6:4e:fa:47:e6:05:09:57:48:d7:47:64:00:ff:ba:19:ce:
c4:08:d8:16:d6:e1:1b:1b:2b:28:97:60:63:86:ec:c4:28:a1:
a7:70:5e:3d:fb:41:17:db:80:17:78:f7:05:7f:5d:fb:93:59:
73:ee:67:2c:75:8e:02:bb:3b:c7:32:58:8f:eb:77:7d:f7:45:
9f:72:c5:83:7d:ec:5f:63:1f:97:d5:6f:61:4d:07:0d:78:f2:
16:5e:67:9b:01:8d:b9:c9:50:24:e4:59:93:71:f3:b1:a5:b9:
4e:38:98:72:43:43:30:63:d9:9e:e9:51:03:56:60:51:21:14:
8b:62:ac:6b:91:79:7d:ab:40:82:f2:eb:38:3b:49:74:a1:ce:
4a:f8:44:52:7b:ad:75:cb:45:5f:9f:78:5c:2d:fe:94:68:63:
c3:ce:d1:92:4b:87:ad:9b:ee:c4:00:2c:7f:ae:3a:06:38:21:
a4:95:34:2d:85:29:ea:40:89:8b:1b:e5:a3:08:2b:b6:b8:ce:
1e:1c:b6:f1:c8:81:27:a5:7a:55:52:84:01:e2:89:b1:05:ad:
ca:f7:5c:3e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVOQe8vm1q6TQYQ/B4ypgKIhUAB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJENkE3MEZBNzhDMDlCQjI3OTI3NjZFMzEwRjcwMDJG
MDIwM0E2NTAeFw0yNDEyMTQxMjA3MzZaFw0yNTEyMTMxMjEyMzZaMDMxMTAvBgNV
BAMTKDhEQzYwQkU5M0YxODNEODJFOUU4NDFCMkMzQzg3MTk1NzlDMjRFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxjANnRrFjnDMlxn5MiBuMG6O
551jPPTNP7xI9O4IAM99t1iU7ivCStE260geh2wrlDtfEMgBiRDSjw+8agJAVOTI
uUiVJOXcFDZDknTMktz9T3I+NELh6W2oTA/1cVSup5+jXuwHgzHlZrLwtt2UWJqG
giBKXg6VOE7PjPOb1RMozM1ldX/zcRYqt+vaib5DOG5CPLo64SITcTcli+Zzr7rM
pB4uIVNjJOy2dy1dYKRL4tIPM0jBQU/bA9Equ9hCpWTbTyOrwNm/septbutnvDwC
7r+6bf0MVdivA+VAK9UFRDkH8JfXPiyh4YLReLN1dh6ER/NY1xHbzMyI9A+ZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUjcYL6T8YPYLp6EGyw8hxlXnCTnEwHwYDVR0j
BBgwFoAUi9anD6eMCbsnknZuMQ9wAvAgOmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFGcWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJH
V3gvMC84QkQ2QTcwRkE3OEMwOUJCMjc5Mjc2NkUzMTBGNzAwMkYwMjAzQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRDZBNzBGQTc4QzA5QkIy
NzkyNzY2RTMxMEY3MDAyRjAyMDNBNjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBRnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAv
MzEzNDMzMmUzMDJlMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAo8AMDANBgkqhkiG9w0BAQsFAAOCAQEAuNRBg5o29qdX
sm6b2E7CsdBA2K9epIKuHDHFYtRV1CxZFkOp6aZO+kfmBQlXSNdHZAD/uhnOxAjY
FtbhGxsrKJdgY4bsxCihp3BePftBF9uAF3j3BX9d+5NZc+5nLHWOArs7xzJYj+t3
ffdFn3LFg33sX2Mfl9VvYU0HDXjyFl5nmwGNuclQJORZk3HzsaW5TjiYckNDMGPZ
nulRA1ZgUSEUi2Ksa5F5fatAgvLrODtJdKHOSvhEUnutdctFX594XC3+lGhjw87R
kkuHrZvuxAAsf646BjghpJU0LYUp6kCJixvlowgrtrjOHhy28ciBJ6V6VVKEAeKJ
sQWtyvdcPg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:16 2025 by rpki-client