Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
File: 3137372e32312e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: IZ723JueCPgIQGYr4+kS5dAwggKin2GMJlqluk738+8=
Subject key identifier: C7:C0:FD:17:D3:06:FD:BD:96:7A:6E:F6:D6:0A:4C:44:9C:AF:29:BF
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 3173DDC4C69023E1E0E8BA941B352D4031D845AA
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
Signing time: Mon 25 Nov 2024 17:03:57 +0000
ROA not before: Mon 25 Nov 2024 16:58:57 +0000
ROA not after: Mon 24 Nov 2025 17:03:57 +0000
asID: 28667
IP address blocks: 177.21.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:73:dd:c4:c6:90:23:e1:e0:e8:ba:94:1b:35:2d:40:31:d8:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:58:57 2024 GMT
Not After : Nov 24 17:03:57 2025 GMT
Subject: CN=C7C0FD17D306FDBD967A6EF6D60A4C449CAF29BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:d7:55:20:63:b1:e4:9d:9d:7c:b0:5a:db:
e3:fc:52:b3:d1:32:98:94:2e:88:26:e7:e2:26:03:
4b:9c:88:83:1e:b2:42:94:5a:82:c1:29:d9:99:4b:
f5:0e:e2:80:b5:db:3e:7a:ce:01:c9:11:aa:72:d6:
45:54:74:8f:c0:3e:23:94:93:c6:12:5d:65:39:49:
27:c8:3b:4d:31:72:3a:6a:d7:9d:7c:21:15:eb:df:
e5:4b:0f:8a:4f:8d:99:4d:00:47:cf:ab:8f:17:a1:
92:f0:aa:b1:04:ab:2c:57:21:4e:d0:39:6f:4d:65:
cf:1a:b5:9d:b6:0d:fc:82:81:77:44:dd:dd:04:e8:
68:76:d3:9d:99:d6:29:87:56:35:13:b5:41:67:5c:
fb:cc:c9:67:0a:00:50:b3:3a:83:3b:a6:f7:b6:cd:
f6:41:09:83:a2:88:f9:07:fb:b4:79:10:cc:d6:8c:
c9:ac:82:b9:e0:47:ae:fd:af:9e:6d:4f:80:e1:2e:
c4:e6:c8:e4:8f:ed:e4:5c:00:a1:ca:b5:cd:95:3f:
ca:91:76:4b:2d:5d:53:52:24:46:8d:e6:2c:be:b6:
71:56:87:5a:53:e6:23:95:23:a1:b2:58:0c:1a:b1:
fc:ba:76:8d:5c:3a:aa:5d:61:87:0d:5d:0a:0b:cf:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:FD:17:D3:06:FD:BD:96:7A:6E:F6:D6:0A:4C:44:9C:AF:29:BF
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.192.0/20
Signature Algorithm: sha256WithRSAEncryption
52:72:15:d0:74:51:c1:2a:8a:e8:84:b5:8a:84:82:40:c8:e3:
9d:0e:4e:33:c5:16:e2:32:03:49:1a:4f:49:5f:9a:b5:73:2f:
7a:dc:8b:31:b1:1a:fc:85:e7:aa:57:93:e4:5f:ac:a1:a0:f0:
58:e5:1e:a8:d3:07:68:ef:e1:7b:f4:92:f4:4d:99:37:bf:44:
96:59:ad:ec:58:2c:38:7f:bc:65:04:75:c2:57:a0:ef:b9:ab:
ad:4d:40:f8:d7:3f:25:5f:b5:c3:34:1b:49:1f:f5:6b:20:c6:
4b:9d:d1:8e:7c:4d:14:2b:42:53:53:46:6e:6d:f5:6d:c7:63:
0d:ea:31:7c:8f:f8:19:55:27:30:bf:ed:18:72:2f:3f:17:e7:
a8:93:ed:31:af:3c:97:e9:ac:83:ff:44:17:78:7b:06:11:fa:
f2:00:11:56:0e:cc:7a:01:7c:33:c0:77:90:42:2c:68:da:96:
a3:81:90:95:b4:27:4b:f1:55:13:52:5e:1a:a4:7a:55:9d:f0:
c4:cc:b4:71:5d:6c:11:af:3f:16:1c:8a:8a:74:93:c4:d5:8e:
af:55:6b:fe:07:45:04:cf:a1:c2:8d:34:bb:7e:4b:9f:42:7c:
b5:1d:2d:6a:85:d4:96:d6:a3:68:f7:80:24:90:57:56:c3:e9:
e5:30:0b:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMXPdxMaQI+Hg6LqUGzUtQDHYRaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU4NTdaFw0yNTExMjQxNzAzNTdaMDMxMTAvBgNV
BAMTKEM3QzBGRDE3RDMwNkZEQkQ5NjdBNkVGNkQ2MEE0QzQ0OUNBRjI5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSGtdVIGOx5J2dfLBa2+P8UrPR
MpiULogm5+ImA0uciIMeskKUWoLBKdmZS/UO4oC12z56zgHJEapy1kVUdI/APiOU
k8YSXWU5SSfIO00xcjpq1518IRXr3+VLD4pPjZlNAEfPq48XoZLwqrEEqyxXIU7Q
OW9NZc8atZ22DfyCgXdE3d0E6Gh2052Z1imHVjUTtUFnXPvMyWcKAFCzOoM7pve2
zfZBCYOiiPkH+7R5EMzWjMmsgrngR679r55tT4DhLsTmyOSP7eRcAKHKtc2VP8qR
dkstXVNSJEaN5iy+tnFWh1pT5iOVI6GyWAwasfy6do1cOqpdYYcNXQoLz1GBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx8D9F9MG/b2Wem721gpMRJyvKb8wHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzNzM3MmUzMjMxMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsRXAMA0GCSqGSIb3DQEBCwUAA4IBAQBSchXQdFHB
KorohLWKhIJAyOOdDk4zxRbiMgNJGk9JX5q1cy963IsxsRr8heeqV5PkX6yhoPBY
5R6o0wdo7+F79JL0TZk3v0SWWa3sWCw4f7xlBHXCV6DvuautTUD41z8lX7XDNBtJ
H/VrIMZLndGOfE0UK0JTU0ZubfVtx2MN6jF8j/gZVScwv+0Yci8/F+eok+0xrzyX
6ayD/0QXeHsGEfryABFWDsx6AXwzwHeQQixo2pajgZCVtCdL8VUTUl4apHpVnfDE
zLRxXWwRrz8WHIqKdJPE1Y6vVWv+B0UEz6HCjTS7fkufQny1HS1qhdSW1qNo94Ak
kFdWw+nlMAtv
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:47:18 2025 by rpki-client