Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
File: 3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier: KfMZQxKukIGReRriUgtZ/DuI6k6UQ+qAlp230HiXhuA=
Subject key identifier: D6:03:AF:60:35:F5:11:8C:65:5D:E3:07:C1:59:58:47:26:4F:64:EE
Certificate issuer: /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial: 7AFC2272D0EF54F076B794DF6F073393BF6D1813
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
Signing time: Sat 03 Aug 2024 20:13:11 +0000
ROA not before: Sat 03 Aug 2024 20:08:11 +0000
ROA not after: Sat 02 Aug 2025 20:13:11 +0000
asID: 22177
IP address blocks: 200.162.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fc:22:72:d0:ef:54:f0:76:b7:94:df:6f:07:33:93:bf:6d:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Validity
Not Before: Aug 3 20:08:11 2024 GMT
Not After : Aug 2 20:13:11 2025 GMT
Subject: CN=D603AF6035F5118C655DE307C1595847264F64EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:b0:ec:c6:ea:a9:7a:2f:42:3e:e3:cb:b4:
4d:06:54:a0:23:52:b0:3e:d3:11:93:73:fa:c2:3c:
c3:13:74:d6:a8:5d:17:ae:dd:9e:fd:da:9f:ba:27:
62:14:88:44:02:a2:68:8c:25:76:b3:9f:d9:e7:01:
99:a5:c9:bd:02:5e:7b:6c:6e:81:71:95:6e:4d:fb:
b5:14:9c:da:91:cb:b0:ef:2a:a3:c5:a5:a3:c2:a4:
86:df:59:6b:63:48:d8:a6:67:0c:f5:e3:01:00:ef:
02:0a:7b:9e:22:1a:71:50:cb:81:38:88:3f:71:6e:
74:ba:74:bc:ce:0d:73:0b:69:ec:8a:69:21:a2:de:
2e:3c:42:08:ad:9b:d5:e2:35:ba:29:7e:7b:cf:1c:
41:94:05:0e:2a:89:87:48:7a:34:c3:85:44:8c:cc:
b6:8d:fe:73:a1:ef:bf:ee:8c:29:64:8f:b4:fd:0b:
b1:b2:8f:1e:bb:ee:bf:6a:a5:5f:43:62:f6:f8:63:
75:f3:fd:6c:d8:ab:91:e4:25:2f:2e:79:5f:4e:0c:
f7:0d:3f:8f:5f:85:a2:8c:4c:28:32:d9:a0:d4:4f:
2b:15:29:27:86:ec:03:e9:f6:37:ec:b9:e4:c7:89:
e1:9a:85:75:36:f1:0f:0a:13:48:6b:02:7a:45:23:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:AF:60:35:F5:11:8C:65:5D:E3:07:C1:59:58:47:26:4F:64:EE
X509v3 Authority Key Identifier:
keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.162.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:0c:1c:62:d3:b8:65:9d:4a:d8:a4:b5:bc:db:a3:75:31:9b:
b5:0d:ed:a2:f6:88:59:ae:fe:50:42:a7:fd:91:ba:dd:6d:14:
67:90:a5:e3:5f:8b:9a:a1:33:eb:2b:dd:5c:af:56:c7:40:2a:
84:3d:a2:50:8d:04:c5:6e:d4:bb:6d:c5:b6:a6:55:9f:17:20:
5c:35:41:03:4d:39:a3:5f:6a:d7:5a:71:7e:18:b7:99:21:64:
2c:4e:b3:4d:a8:87:d8:c6:19:65:e7:af:be:ff:09:f0:6f:8d:
43:45:db:f1:5a:80:11:ad:77:ef:b3:fd:07:cd:19:5b:80:ac:
8c:9c:f6:e8:f0:ac:86:57:42:96:de:e5:f2:c0:0c:0a:df:3c:
af:85:6c:ac:a1:00:84:61:27:b6:87:80:d4:af:da:0c:99:a2:
42:8d:64:75:ee:d9:12:1f:72:05:90:a5:ad:6d:d0:5f:6b:7f:
f3:60:63:cd:1d:b7:e5:40:54:ce:d6:5a:8b:e2:59:89:3c:fd:
03:6a:a5:8a:99:84:88:20:6d:f5:ea:6d:5e:8b:9f:ab:c2:4f:
28:cb:99:c1:3a:48:8e:d4:96:45:20:30:7b:39:75:a5:18:97:
4f:be:55:ef:d1:34:0b:37:37:13:50:30:cf:5f:a2:55:e7:10:
18:6d:58:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUevwictDvVPB2t5Tfbwczk79tGBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNDA4MDMyMDA4MTFaFw0yNTA4MDIyMDEzMTFaMDMxMTAvBgNV
BAMTKEQ2MDNBRjYwMzVGNTExOEM2NTVERTMwN0MxNTk1ODQ3MjY0RjY0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH7Dsxuqpei9CPuPLtE0GVKAj
UrA+0xGTc/rCPMMTdNaoXReu3Z792p+6J2IUiEQComiMJXazn9nnAZmlyb0CXnts
boFxlW5N+7UUnNqRy7DvKqPFpaPCpIbfWWtjSNimZwz14wEA7wIKe54iGnFQy4E4
iD9xbnS6dLzODXMLaeyKaSGi3i48Qgitm9XiNbopfnvPHEGUBQ4qiYdIejTDhUSM
zLaN/nOh77/ujClkj7T9C7Gyjx677r9qpV9DYvb4Y3Xz/WzYq5HkJS8ueV9ODPcN
P49fhaKMTCgy2aDUTysVKSeG7APp9jfsueTHieGahXU28Q8KE0hrAnpFI+jfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1gOvYDX1EYxlXeMHwVlYRyZPZO4wHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIooAwDQYJKoZIhvcNAQELBQADggEBADIMHGLT
uGWdStiktbzbo3Uxm7UN7aL2iFmu/lBCp/2Rut1tFGeQpeNfi5qhM+sr3VyvVsdA
KoQ9olCNBMVu1LttxbamVZ8XIFw1QQNNOaNfatdacX4Yt5khZCxOs02oh9jGGWXn
r77/CfBvjUNF2/FagBGtd++z/QfNGVuArIyc9ujwrIZXQpbe5fLADArfPK+FbKyh
AIRhJ7aHgNSv2gyZokKNZHXu2RIfcgWQpa1t0F9rf/NgY80dt+VAVM7WWoviWYk8
/QNqpYqZhIggbfXqbV6Ln6vCTyjLmcE6SI7UlkUgMHs5daUYl0++Ve/RNAs3NxNQ
MM9folXnEBhtWG4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:11:04 2025 by rpki-client