Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
File: 3137372e38372e382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier: 5cYVEnXiKiFL8ORIBq6Qsksv8NE3zghKwm+kZEoTSrs=
Subject key identifier: F2:79:FF:85:A8:B4:1A:EB:58:7B:33:7C:3D:D5:46:66:25:8C:DA:2D
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 4C6AA584DA6968E04B83A53A2A5621D8BEF5B1A8
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
Signing time: Wed 03 Apr 2024 19:48:30 +0000
ROA not before: Wed 03 Apr 2024 19:43:30 +0000
ROA not after: Wed 02 Apr 2025 19:48:30 +0000
asID: 262617
IP address blocks: 177.87.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6a:a5:84:da:69:68:e0:4b:83:a5:3a:2a:56:21:d8:be:f5:b1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Apr 3 19:43:30 2024 GMT
Not After : Apr 2 19:48:30 2025 GMT
Subject: CN=F279FF85A8B41AEB587B337C3DD54666258CDA2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:37:22:98:5c:55:2d:b8:a4:07:7b:f3:bd:
57:aa:1e:aa:69:1d:c6:93:9b:0e:e7:79:46:26:c5:
e2:0e:1e:03:d6:07:fa:d1:78:ac:f3:82:ba:a4:9e:
bb:25:8a:b2:80:46:5d:96:4a:d6:ff:44:1e:f5:71:
3f:f5:6e:59:35:b5:5d:d9:da:1d:35:62:6f:20:bb:
c8:97:15:e6:b9:22:ff:1e:69:54:82:fa:59:d9:74:
78:39:70:00:db:b4:de:05:85:20:21:b6:90:cb:fa:
8f:eb:92:fb:6c:ac:5a:0e:48:c6:f8:1a:bf:c1:14:
82:b6:b1:e9:ab:9d:35:e7:30:f7:a1:00:f9:f1:98:
b4:6f:1d:cf:36:fb:29:9a:84:43:e1:95:2e:ab:63:
f3:7f:5d:70:13:6c:5f:df:90:35:06:63:59:12:29:
16:17:94:46:ca:96:7d:64:c4:ea:a3:6a:47:d1:94:
7b:3d:be:ed:aa:75:46:b7:de:05:e2:e0:44:bc:bf:
9c:68:d5:ec:df:ec:9b:0b:1e:3a:7e:28:ad:5e:51:
f4:67:6a:01:1a:d7:6e:75:58:28:03:e2:3c:c3:5b:
26:e1:95:e4:63:73:0c:f3:82:8e:60:51:19:a9:09:
eb:40:d9:9a:83:b3:ff:64:dc:f5:46:0f:e0:cc:9f:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:FF:85:A8:B4:1A:EB:58:7B:33:7C:3D:D5:46:66:25:8C:DA:2D
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.8.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9d:9b:dd:c0:5d:c2:47:73:af:88:78:b3:3a:3a:0b:b0:a5:
c3:8c:cd:71:87:ff:d1:f4:09:50:a0:6f:11:57:47:16:bf:42:
fc:4b:5c:6a:cb:b1:b0:bf:99:11:1b:06:c9:d6:45:3d:0e:6d:
e0:cf:f4:63:94:a3:be:ae:d6:92:40:a5:30:63:46:ce:de:34:
aa:e9:3c:a5:ea:e6:1c:82:cf:f8:13:a0:90:76:69:80:74:7e:
ea:27:b0:3a:45:14:47:71:ee:97:2c:d8:e6:76:69:03:43:25:
26:86:64:ff:2a:95:e4:02:3e:23:14:a7:99:8e:c7:5d:e3:ad:
68:9e:5b:3a:e1:62:5c:dc:40:18:b6:d7:b4:6b:fd:f8:49:ce:
8e:73:e4:ec:34:9f:6a:bc:7b:0a:49:20:64:12:48:c2:78:e9:
30:1a:c4:00:ae:60:fe:fe:3a:71:93:c5:e5:f5:af:4c:20:58:
7e:2e:46:73:36:af:a8:0d:99:20:e0:d1:1d:55:f5:1b:a3:c3:
35:05:26:a5:d3:a4:db:87:df:ef:46:a1:0b:95:cd:e1:9e:44:
16:bf:d7:16:3a:04:2a:4d:a8:de:8f:a1:01:55:4a:0f:56:d1:
9a:86:52:3c:82:2c:df:43:24:73:f5:f5:b4:2b:d3:df:33:6f:
ee:f9:53:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTGqlhNppaOBLg6U6KlYh2L71sagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwNzhEMkI1Nzg5ODI2NjNFRkU5MUZDNEI1Mzk3QzQ4
NDAzRTJFNDAeFw0yNDA0MDMxOTQzMzBaFw0yNTA0MDIxOTQ4MzBaMDMxMTAvBgNV
BAMTKEYyNzlGRjg1QThCNDFBRUI1ODdCMzM3QzNERDU0NjY2MjU4Q0RBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5DcimFxVLbikB3vzvVeqHqpp
HcaTmw7neUYmxeIOHgPWB/rReKzzgrqknrslirKARl2WStb/RB71cT/1blk1tV3Z
2h01Ym8gu8iXFea5Iv8eaVSC+lnZdHg5cADbtN4FhSAhtpDL+o/rkvtsrFoOSMb4
Gr/BFIK2semrnTXnMPehAPnxmLRvHc82+ymahEPhlS6rY/N/XXATbF/fkDUGY1kS
KRYXlEbKln1kxOqjakfRlHs9vu2qdUa33gXi4ES8v5xo1ezf7JsLHjp+KK1eUfRn
agEa1251WCgD4jzDWybhleRjcwzzgo5gURmpCetA2ZqDs/9k3PVGD+DMnwAtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8nn/hai0GutYezN8PdVGZiWM2i0wHwYDVR0j
BBgwFoAUAAeNK1eJgmY+/pH8S1OXxIQD4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMS8wMDA3OEQyQjU3ODk4MjY2M0VGRTkxRkM0QjUzOTdDNDg0MDNFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDc4RDJCNTc4OTgyNjYz
RUZFOTFGQzRCNTM5N0M0ODQwM0UyRTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzEv
MzEzNzM3MmUzODM3MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM2
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFXCDANBgkqhkiG9w0BAQsFAAOCAQEAgZ2b3cBdwkdz
r4h4szo6C7Clw4zNcYf/0fQJUKBvEVdHFr9C/EtcasuxsL+ZERsGydZFPQ5t4M/0
Y5Sjvq7WkkClMGNGzt40quk8permHILP+BOgkHZpgHR+6iewOkUUR3HulyzY5nZp
A0MlJoZk/yqV5AI+IxSnmY7HXeOtaJ5bOuFiXNxAGLbXtGv9+EnOjnPk7DSfarx7
CkkgZBJIwnjpMBrEAK5g/v46cZPF5fWvTCBYfi5GczavqA2ZIODRHVX1G6PDNQUm
pdOk24ff70ahC5XN4Z5EFr/XFjoEKk2o3o+hAVVKD1bRmoZSPIIs30Mkc/X1tCvT
3zNv7vlTaA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:22 2025 by rpki-client