Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
File: 3137302e3135302e342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier: VPe8Dk8qHnIsoVLfITLZRMAiGTYVGNL/rUIysEKezaI=
Subject key identifier: D1:F9:78:CA:6F:D8:AC:48:11:65:1F:8E:78:48:2C:73:23:E5:27:5A
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 0DB6EBC377339E49FDBA0865EAC876A5ED35053D
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
Signing time: Mon 25 Nov 2024 17:04:04 +0000
ROA not before: Mon 25 Nov 2024 16:59:04 +0000
ROA not after: Mon 24 Nov 2025 17:04:04 +0000
asID: 53080
IP address blocks: 170.150.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b6:eb:c3:77:33:9e:49:fd:ba:08:65:ea:c8:76:a5:ed:35:05:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:04 2024 GMT
Not After : Nov 24 17:04:04 2025 GMT
Subject: CN=D1F978CA6FD8AC4811651F8E78482C7323E5275A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:db:9a:a9:92:82:55:20:2e:39:8b:8f:f3:
cc:9a:ca:29:83:9b:15:d2:7c:d3:7b:05:ff:d9:58:
d9:6f:34:f2:39:67:f6:dc:6d:a1:0b:c5:0d:fb:31:
21:10:fd:2e:6e:e4:d4:e2:5b:7c:ae:5e:cf:31:16:
05:92:00:59:97:0b:43:d4:5d:85:60:0f:7d:a6:0d:
af:32:55:95:3c:03:02:d0:61:ff:fe:89:e0:66:04:
45:20:69:01:8d:87:87:d5:18:36:3e:1f:0b:71:f3:
ee:22:55:90:00:4e:aa:bf:27:af:d5:0a:7d:34:d3:
13:12:72:28:e5:de:56:eb:03:0e:7d:92:17:41:7c:
c1:22:4e:7b:6d:0a:aa:3b:5f:51:32:9d:5f:fd:43:
ab:3a:8d:9a:09:24:4b:09:e8:f9:cf:f9:08:2b:c9:
80:0f:79:16:b8:c9:b8:60:01:24:49:15:2e:7b:bc:
3e:37:97:96:51:29:20:cc:d6:35:96:11:59:7a:be:
10:fe:64:f8:c6:39:c3:74:f3:1a:de:04:d8:26:35:
f6:d3:7b:ad:b7:12:96:8a:be:d6:28:a2:d8:62:a6:
ab:80:46:1d:3e:45:c1:e6:d0:ab:36:cf:8b:8f:85:
6e:a7:bd:c6:84:58:99:c4:d6:af:25:a5:8d:48:07:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:78:CA:6F:D8:AC:48:11:65:1F:8E:78:48:2C:73:23:E5:27:5A
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.4.0/22
Signature Algorithm: sha256WithRSAEncryption
54:0e:39:f7:43:6b:47:2e:73:c7:7c:c1:bf:9e:60:cc:61:b0:
71:63:ec:50:d3:e2:27:ab:10:73:8b:27:86:b6:dd:bd:b9:3a:
29:10:a3:e8:16:84:46:35:91:e1:93:0d:b1:57:8c:bb:ad:1c:
14:8d:9f:d2:03:91:7e:4e:73:45:4f:a5:5f:0d:d5:c0:99:b0:
d9:98:2e:56:6b:2d:c9:19:cd:49:97:5b:c7:88:61:ea:3b:83:
9f:7e:e5:c7:f7:34:42:b8:03:ec:4c:bf:cc:2a:a7:30:24:3d:
69:c6:8a:a9:ed:76:2f:dd:9e:ad:a1:a3:03:f0:21:2a:b1:11:
f8:59:ba:61:41:2e:fa:c1:66:40:4e:f1:af:8d:4e:42:78:56:
0c:da:a6:41:81:8a:9d:72:58:f3:fd:aa:1a:13:fe:bd:8a:18:
21:8f:eb:90:c3:0f:06:af:71:bf:6a:3e:77:e1:0d:49:97:6b:
e0:f3:c0:08:46:71:07:8e:19:da:e1:61:f2:c5:50:3c:35:b1:
aa:b2:4b:36:5d:c1:b5:28:9c:a2:c3:a6:0d:d4:20:47:b4:c9:
4d:4a:83:1d:fc:71:2f:b2:56:45:34:50:a4:8b:99:44:ab:40:
5b:4c:29:f3:a5:6f:d7:c1:22:aa:eb:4b:1f:6b:ad:5f:1f:ea:
54:ed:e5:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDbbrw3cznkn9ughl6sh2pe01BT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MDRaFw0yNTExMjQxNzA0MDRaMDMxMTAvBgNV
BAMTKEQxRjk3OENBNkZEOEFDNDgxMTY1MUY4RTc4NDgyQzczMjNFNTI3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ENuaqZKCVSAuOYuP88yayimD
mxXSfNN7Bf/ZWNlvNPI5Z/bcbaELxQ37MSEQ/S5u5NTiW3yuXs8xFgWSAFmXC0PU
XYVgD32mDa8yVZU8AwLQYf/+ieBmBEUgaQGNh4fVGDY+Hwtx8+4iVZAATqq/J6/V
Cn000xMScijl3lbrAw59khdBfMEiTnttCqo7X1EynV/9Q6s6jZoJJEsJ6PnP+Qgr
yYAPeRa4ybhgASRJFS57vD43l5ZRKSDM1jWWEVl6vhD+ZPjGOcN08xreBNgmNfbT
e623EpaKvtYoothipquARh0+RcHm0Ks2z4uPhW6nvcaEWJnE1q8lpY1IB9j5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0fl4ym/YrEgRZR+OeEgscyPlJ1owHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzNzMwMmUzMTM1MzAyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqqWBDANBgkqhkiG9w0BAQsFAAOCAQEAVA4590NrRy5z
x3zBv55gzGGwcWPsUNPiJ6sQc4snhrbdvbk6KRCj6BaERjWR4ZMNsVeMu60cFI2f
0gORfk5zRU+lXw3VwJmw2ZguVmstyRnNSZdbx4hh6juDn37lx/c0QrgD7Ey/zCqn
MCQ9acaKqe12L92eraGjA/AhKrER+Fm6YUEu+sFmQE7xr41OQnhWDNqmQYGKnXJY
8/2qGhP+vYoYIY/rkMMPBq9xv2o+d+ENSZdr4PPACEZxB44Z2uFh8sVQPDWxqrJL
Nl3BtSicosOmDdQgR7TJTUqDHfxxL7JWRTRQpIuZRKtAW0wp86Vv18EiqutLH2ut
Xx/qVO3lUA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:20:14 2025 by rpki-client