Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
File: 3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa (raw, json)
Hash identifier: bKC264aHbdBGzr6iJOTF162PQhmXcXliJMai5lHEf2o=
Subject key identifier: 8E:7A:8D:11:7D:58:62:A1:27:AD:FC:40:38:54:48:E8:6B:C4:0F:78
Certificate issuer: /CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Certificate serial: 4130FBB0DD66050500DC65D5BD190FE3DB697B26
Authority key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
Signing time: Thu 04 Apr 2024 05:51:17 +0000
ROA not before: Thu 04 Apr 2024 05:46:17 +0000
ROA not after: Thu 03 Apr 2025 05:51:17 +0000
asID: 265130
IP address blocks: 143.208.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:30:fb:b0:dd:66:05:05:00:dc:65:d5:bd:19:0f:e3:db:69:7b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Validity
Not Before: Apr 4 05:46:17 2024 GMT
Not After : Apr 3 05:51:17 2025 GMT
Subject: CN=8E7A8D117D5862A127ADFC40385448E86BC40F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:f8:00:ed:62:48:cd:59:94:00:c7:8b:97:
42:82:7c:2d:17:da:e0:81:be:54:f1:d5:66:00:2d:
97:b5:dc:ee:ed:d3:ec:ee:ad:5e:43:93:36:7b:6d:
ce:ae:0e:cd:1c:84:8b:e7:ff:1e:6a:76:a7:bb:70:
bd:04:bc:47:08:f5:54:7c:d5:24:75:b7:fa:be:41:
4a:19:bf:44:03:ff:b5:d6:59:89:f0:ec:a9:dc:6a:
a5:96:43:44:ba:42:40:c1:24:ce:a3:21:91:7f:aa:
d8:90:29:3a:ff:4c:d8:12:2d:fa:63:b5:84:72:5a:
f1:59:d1:6a:ad:d2:68:25:22:79:c6:97:8a:34:44:
3f:99:2e:87:bd:da:ef:99:5f:b4:a0:41:97:2b:82:
74:a3:e3:5a:ec:e5:6e:c2:87:d7:55:e6:d4:86:65:
82:d4:9e:97:e0:c4:36:6a:c8:94:12:ec:28:74:35:
53:dc:85:b0:74:c1:96:91:98:c4:6a:0c:8f:a7:84:
74:ff:9f:a4:d4:94:97:18:9a:65:52:c9:c0:c1:b3:
6a:47:c4:d9:02:ef:5f:36:5a:a2:29:f5:50:0d:fd:
1e:8c:ad:5c:8e:8e:be:a1:c0:b8:ba:7f:a1:2c:b4:
25:33:a9:aa:37:27:20:92:6e:9e:7f:d4:b6:e9:58:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:8D:11:7D:58:62:A1:27:AD:FC:40:38:54:48:E8:6B:C4:0F:78
X509v3 Authority Key Identifier:
keyid:B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.152.0/22
Signature Algorithm: sha256WithRSAEncryption
51:7e:2e:69:ae:09:dc:2d:21:ce:a7:47:a7:4a:45:54:29:2a:
62:12:52:f9:41:fe:fe:2c:b4:26:6f:9b:2e:16:ec:5e:2f:74:
3a:9e:62:1a:19:0e:98:21:95:ce:b0:2a:8d:66:48:ab:71:bd:
02:7a:48:76:2c:5b:4f:1b:5d:c4:b9:27:22:c0:49:a5:07:fa:
70:e4:84:e4:a2:b9:02:d0:1d:5f:74:59:0e:02:5b:d3:0c:cd:
ff:2e:c5:cd:7e:c6:0b:a3:50:c3:51:70:da:cc:6d:f8:9f:11:
e2:ea:ec:db:0c:26:0a:fd:95:63:4e:4d:cd:3d:32:71:62:99:
86:d5:31:27:f3:0e:b5:d9:3b:c2:f5:49:9a:29:f5:90:f1:13:
50:a1:30:ca:3d:33:67:e9:ed:33:35:a6:e6:29:d3:5f:47:ad:
13:b1:3a:5b:3e:39:d4:76:30:9d:38:87:d0:83:21:d5:7f:51:
02:b9:d7:b1:ab:31:2a:17:c5:e0:ad:f8:2e:f6:44:7e:a2:6f:
6e:e4:2c:ca:cf:48:bf:6f:61:59:f5:5c:8b:21:3b:74:f2:8a:
1e:d1:4d:8f:d3:ba:ce:23:8f:90:15:b9:dd:6f:b9:63:e4:c5:
a3:0d:8b:a8:56:85:17:7d:34:b3:1b:fb:45:c1:c3:74:97:80:
fe:48:fc:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQTD7sN1mBQUA3GXVvRkP49tpeyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRGMDIyOTlBMkVERTVCREY1M0Y2REVDQUM1MjlDMjlG
NkU5Mjg4MTAeFw0yNDA0MDQwNTQ2MTdaFw0yNTA0MDMwNTUxMTdaMDMxMTAvBgNV
BAMTKDhFN0E4RDExN0Q1ODYyQTEyN0FERkM0MDM4NTQ0OEU4NkJDNDBGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJvgA7WJIzVmUAMeLl0KCfC0X
2uCBvlTx1WYALZe13O7t0+zurV5DkzZ7bc6uDs0chIvn/x5qdqe7cL0EvEcI9VR8
1SR1t/q+QUoZv0QD/7XWWYnw7KncaqWWQ0S6QkDBJM6jIZF/qtiQKTr/TNgSLfpj
tYRyWvFZ0Wqt0mglInnGl4o0RD+ZLoe92u+ZX7SgQZcrgnSj41rs5W7Ch9dV5tSG
ZYLUnpfgxDZqyJQS7Ch0NVPchbB0wZaRmMRqDI+nhHT/n6TUlJcYmmVSycDBs2pH
xNkC7182WqIp9VAN/R6MrVyOjr6hwLi6f6EstCUzqao3JyCSbp5/1LbpWNznAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjnqNEX1YYqEnrfxAOFRI6GvED3gwHwYDVR0j
BBgwFoAUtPAimaLt5b31P23srFKcKfbpKIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERkMnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1
eHcvMS9CNEYwMjI5OUEyRURFNUJERjUzRjZERUNBQzUyOUMyOUY2RTkyODgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0RjAyMjk5QTJFREU1QkRG
NTNGNkRFQ0FDNTI5QzI5RjZFOTI4ODEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZDJ5YWZRRURSeUxTbkVoWHdoNkNtU1l3QnVKRTVxMzV6S0RWQm1ZNXh3LzEv
MzEzNDMzMmUzMjMwMzgyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QmDANBgkqhkiG9w0BAQsFAAOCAQEAUX4u
aa4J3C0hzqdHp0pFVCkqYhJS+UH+/iy0Jm+bLhbsXi90Op5iGhkOmCGVzrAqjWZI
q3G9AnpIdixbTxtdxLknIsBJpQf6cOSE5KK5AtAdX3RZDgJb0wzN/y7FzX7GC6NQ
w1Fw2sxt+J8R4urs2wwmCv2VY05NzT0ycWKZhtUxJ/MOtdk7wvVJmin1kPETUKEw
yj0zZ+ntMzWm5inTX0etE7E6Wz451HYwnTiH0IMh1X9RArnXsasxKhfF4K34LvZE
fqJvbuQsys9Iv29hWfVciyE7dPKKHtFNj9O6ziOPkBW53W+5Y+TFow2LqFaFF300
sxv7RcHDdJeA/kj8Ew==
-----END CERTIFICATE-----
Generated at Mon May 12 11:07:29 2025 by rpki-client