Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
File: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (raw, json)
Hash identifier: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=
Subject key identifier: 03:54:A9:41:EA:85:97:B7:43:6E:FB:6C:3B:0B:97:8D:C0:53:F4:F7
Certificate issuer: /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial: 65CAE16651BEAC031E4014E3F88963EF1A4BF43C
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
Signing time: Fri 22 Nov 2024 11:12:12 +0000
ROA not before: Fri 22 Nov 2024 11:07:12 +0000
ROA not after: Fri 21 Nov 2025 11:12:12 +0000
asID: 266440
IP address blocks: 170.82.20.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ca:e1:66:51:be:ac:03:1e:40:14:e3:f8:89:63:ef:1a:4b:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Validity
Not Before: Nov 22 11:07:12 2024 GMT
Not After : Nov 21 11:12:12 2025 GMT
Subject: CN=0354A941EA8597B7436EFB6C3B0B978DC053F4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:c7:c1:53:ed:bf:4f:0f:ab:22:d6:b8:fc:
b4:39:36:c2:0d:e5:96:a9:b1:d0:0b:7d:a5:df:bd:
7b:be:07:38:87:9a:56:41:ac:22:11:cf:61:66:37:
5f:6a:b4:51:1e:17:73:65:9b:03:26:08:d8:bf:33:
96:b1:ff:14:4b:3f:60:31:40:b3:3c:54:bb:d3:07:
13:09:b2:bc:8e:d5:e3:a2:c6:54:e0:53:4b:63:e2:
ad:94:6f:0f:5c:15:9a:09:6a:44:f2:7a:5c:f6:6b:
7b:ed:ea:06:00:7e:93:85:7b:7b:9c:82:fb:d0:cb:
51:70:c2:f3:fe:4d:24:e6:62:43:f8:ab:02:ca:4e:
ff:aa:90:6c:ab:eb:f8:7a:7f:70:dc:c2:3c:a2:a2:
a8:67:2a:36:60:6e:21:c8:ad:81:d7:a7:9c:47:9d:
66:d9:cf:ca:fa:12:97:c7:12:98:8d:0e:9d:d2:51:
fa:95:ac:32:fa:0a:40:fe:85:46:e7:2b:af:ed:8e:
73:c5:23:de:07:29:93:9e:2f:71:d9:ea:f0:47:19:
c9:22:dd:09:8b:02:96:d9:71:39:a4:31:75:06:e0:
57:0d:c6:b2:57:9d:f3:14:91:05:86:96:e3:89:4a:
4c:40:ca:77:32:41:79:07:6e:61:56:c0:24:17:ec:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:A9:41:EA:85:97:B7:43:6E:FB:6C:3B:0B:97:8D:C0:53:F4:F7
X509v3 Authority Key Identifier:
keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.20.0/23
Signature Algorithm: sha256WithRSAEncryption
74:cb:45:ba:32:90:11:a6:5b:d0:5f:f2:13:5e:e3:ac:69:73:
5c:37:e1:65:a6:c3:85:e3:83:e3:4b:bd:f2:6b:a8:ac:85:4e:
77:4b:9c:ef:5b:4f:ee:be:ab:4f:3b:cc:b7:f9:e0:26:42:4b:
b2:38:80:39:0b:23:3d:2d:e5:16:0d:6e:6a:68:76:fe:5d:61:
31:a1:2c:26:2a:ce:1b:84:3e:7f:3a:00:94:ec:be:3a:09:1e:
63:77:30:bc:e2:2f:3a:9c:7b:bd:87:db:04:24:46:d5:3d:39:
86:d3:c8:1b:6e:5b:99:0c:f4:15:50:2e:b4:4e:19:5c:7d:8f:
c1:d1:a9:ab:48:13:c6:b7:10:ac:e7:2b:d6:07:3b:dc:c9:61:
86:3a:51:24:57:5f:5f:91:9c:1d:41:9c:ae:d9:61:85:f5:e0:
ef:ac:1f:4f:b6:32:f9:e6:3e:4f:23:d4:a6:4f:2c:b8:2b:15:
38:dd:97:df:3d:3f:1f:02:67:d1:06:ab:17:d6:63:cb:36:e3:
a8:35:1c:4a:35:5f:d8:e4:ff:3f:67:91:3a:91:ef:b6:0a:ab:
b0:ea:10:ea:c0:9b:9b:7b:18:43:8c:d6:89:15:28:c7:23:27:
75:73:88:53:cf:e0:f2:76:52:af:43:8a:21:da:80:5f:a7:7e:
4c:e5:8c:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZcrhZlG+rAMeQBTj+Ilj7xpL9DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1
ODk3NUUxRDAeFw0yNDExMjIxMTA3MTJaFw0yNTExMjExMTEyMTJaMDMxMTAvBgNV
BAMTKDAzNTRBOTQxRUE4NTk3Qjc0MzZFRkI2QzNCMEI5NzhEQzA1M0Y0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMsfBU+2/Tw+rIta4/LQ5NsIN
5ZapsdALfaXfvXu+BziHmlZBrCIRz2FmN19qtFEeF3NlmwMmCNi/M5ax/xRLP2Ax
QLM8VLvTBxMJsryO1eOixlTgU0tj4q2Ubw9cFZoJakTyelz2a3vt6gYAfpOFe3uc
gvvQy1FwwvP+TSTmYkP4qwLKTv+qkGyr6/h6f3DcwjyioqhnKjZgbiHIrYHXp5xH
nWbZz8r6EpfHEpiNDp3SUfqVrDL6CkD+hUbnK6/tjnPFI94HKZOeL3HZ6vBHGcki
3QmLApbZcTmkMXUG4FcNxrJXnfMUkQWGluOJSkxAyncyQXkHbmFWwCQX7EpnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA1SpQeqFl7dDbvtsOwuXjcBT9PcwHwYDVR0j
BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz
QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzEzNzMwMmUzODMyMmUzMjMwMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlIUMA0GCSqGSIb3DQEBCwUAA4IBAQB0y0W6MpAR
plvQX/ITXuOsaXNcN+FlpsOF44PjS73ya6ishU53S5zvW0/uvqtPO8y3+eAmQkuy
OIA5CyM9LeUWDW5qaHb+XWExoSwmKs4bhD5/OgCU7L46CR5jdzC84i86nHu9h9sE
JEbVPTmG08gbbluZDPQVUC60ThlcfY/B0amrSBPGtxCs5yvWBzvcyWGGOlEkV19f
kZwdQZyu2WGF9eDvrB9PtjL55j5PI9SmTyy4KxU43ZffPT8fAmfRBqsX1mPLNuOo
NRxKNV/Y5P8/Z5E6ke+2Cquw6hDqwJubexhDjNaJFSjHIyd1c4hTz+DydlKvQ4oh
2oBfp35M5Yxa
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:58 2025 by rpki-client