Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
File: 3137372e37332e37322e302f32322d3232203d3e20323632353636.roa (raw, json)
Hash identifier: rybfZVI6xhFszPKJW6jI+X7R38BuvCtVpAz+52EYgIk=
Subject key identifier: B1:BF:DF:C1:DD:FD:37:D0:48:4F:04:1D:BF:6D:DC:7D:B1:23:20:92
Certificate issuer: /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial: 284395A8C9F50334823D9E8F6D7C8C135105F452
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
Signing time: Thu 25 Apr 2024 17:30:02 +0000
ROA not before: Thu 25 Apr 2024 17:25:02 +0000
ROA not after: Thu 24 Apr 2025 17:30:02 +0000
asID: 262566
IP address blocks: 177.73.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:43:95:a8:c9:f5:03:34:82:3d:9e:8f:6d:7c:8c:13:51:05:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
Validity
Not Before: Apr 25 17:25:02 2024 GMT
Not After : Apr 24 17:30:02 2025 GMT
Subject: CN=B1BFDFC1DDFD37D0484F041DBF6DDC7DB1232092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:71:c7:25:c6:9a:25:37:0f:66:a6:ea:10:
f9:82:59:48:28:b9:dc:0d:aa:c3:c5:a9:55:49:c9:
c6:07:3e:54:bf:ff:7f:bb:32:bf:49:e9:73:44:44:
3a:75:32:b5:b3:8f:9c:31:01:fa:e9:cd:c7:cc:dd:
38:cf:80:c0:ff:2f:b9:0d:02:c1:5f:65:ef:fb:26:
6c:29:aa:b9:6d:10:d9:a9:d9:9d:9a:0d:de:cd:07:
f8:d0:63:4e:ee:d8:f8:19:a5:d2:78:9f:82:c9:57:
db:4e:18:c7:d3:de:8a:30:65:cb:81:51:b5:0c:5f:
53:0a:3f:0c:87:a9:a9:20:2c:19:08:7f:ea:e3:4e:
65:a7:e7:04:cd:61:f1:23:40:ac:9e:a5:8a:24:cc:
79:67:a8:0e:60:84:3f:d5:ad:d5:5f:41:c0:39:8c:
b0:4a:f0:74:34:14:77:f2:72:d7:d8:ab:c5:da:ca:
11:7e:f3:a3:95:fe:8b:4b:40:f0:2f:0a:5a:8b:43:
41:6e:61:1e:50:85:14:1f:3c:04:f2:58:14:6d:47:
2e:09:b6:b3:9b:b7:5c:ae:2c:ad:6c:d8:51:2b:eb:
74:fe:49:8f:94:5f:e3:ac:c1:a3:89:c7:cf:12:d7:
0d:cf:c8:a5:40:b9:0f:7b:1c:28:78:d0:82:54:fe:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:DF:C1:DD:FD:37:D0:48:4F:04:1D:BF:6D:DC:7D:B1:23:20:92
X509v3 Authority Key Identifier:
keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.73.72.0/22
Signature Algorithm: sha256WithRSAEncryption
83:dc:63:10:f2:26:c5:ae:bd:a5:db:0f:bf:99:c2:3e:05:d6:
18:07:3a:8d:66:1c:f8:cf:da:ee:50:f0:31:80:17:48:f5:9f:
03:f0:5a:04:09:ef:bb:39:3e:52:07:62:17:28:40:84:6c:6a:
c5:63:60:4e:a1:c9:d7:96:a2:98:e8:13:24:bf:ae:21:bf:61:
17:f3:48:43:52:18:88:5e:d5:e2:e7:49:30:97:c5:68:b0:9c:
c9:a7:3e:3a:49:e7:5d:82:dc:4c:be:7a:5c:58:39:06:fa:90:
59:15:f2:d9:4e:a2:f8:e5:bf:e5:a2:d7:92:f2:d8:44:71:d8:
25:25:5a:95:b1:7a:e6:17:bb:61:f3:b4:c6:ce:eb:83:5b:3f:
e8:09:4e:57:0e:e9:a5:6e:94:fc:ac:12:4b:e5:43:ba:43:ce:
f4:91:65:a3:57:31:c6:88:75:a1:30:49:b0:bf:a7:6e:09:bf:
19:38:d1:d4:76:c2:b7:c1:bd:7e:06:32:ea:a4:1a:f8:6e:1b:
be:6c:b3:7c:fa:ad:f0:13:74:01:b2:0d:15:cc:20:9d:7e:43:
ce:09:04:0b:5c:65:2d:61:58:65:5d:9e:93:e4:c6:fd:4f:05:
1a:cf:44:b1:5c:58:1a:ab:b7:20:34:e1:f2:18:d0:b3:a7:78:
e8:69:6f:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKEOVqMn1AzSCPZ6PbXyME1EF9FIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyMzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMw
QkMyNjMwOTAeFw0yNDA0MjUxNzI1MDJaFw0yNTA0MjQxNzMwMDJaMDMxMTAvBgNV
BAMTKEIxQkZERkMxRERGRDM3RDA0ODRGMDQxREJGNkREQzdEQjEyMzIwOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIHHHJcaaJTcPZqbqEPmCWUgo
udwNqsPFqVVJycYHPlS//3+7Mr9J6XNERDp1MrWzj5wxAfrpzcfM3TjPgMD/L7kN
AsFfZe/7JmwpqrltENmp2Z2aDd7NB/jQY07u2PgZpdJ4n4LJV9tOGMfT3oowZcuB
UbUMX1MKPwyHqakgLBkIf+rjTmWn5wTNYfEjQKyepYokzHlnqA5ghD/VrdVfQcA5
jLBK8HQ0FHfyctfYq8XayhF+86OV/otLQPAvClqLQ0FuYR5QhRQfPATyWBRtRy4J
trObt1yuLK1s2FEr63T+SY+UX+OswaOJx88S1w3PyKVAuQ97HCh40IJU/lA7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsb/fwd39N9BITwQdv23cfbEjIJIwHwYDVR0j
BBgwFoAUyCMuetohScQAhoFE9dqDkwvCYwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVtaFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29G
VHcvMS9DODIzMkU3QURBMjE0OUM0MDA4NjgxNDRGNURBODM5MzBCQzI2MzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MjMyRTdBREEyMTQ5QzQw
MDg2ODE0NEY1REE4MzkzMEJDMjYzMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEv
MzEzNzM3MmUzNzMzMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUlIMA0GCSqGSIb3DQEBCwUAA4IBAQCD3GMQ8ibF
rr2l2w+/mcI+BdYYBzqNZhz4z9ruUPAxgBdI9Z8D8FoECe+7OT5SB2IXKECEbGrF
Y2BOocnXlqKY6BMkv64hv2EX80hDUhiIXtXi50kwl8VosJzJpz46SeddgtxMvnpc
WDkG+pBZFfLZTqL45b/loteS8thEcdglJVqVsXrmF7th87TGzuuDWz/oCU5XDuml
bpT8rBJL5UO6Q870kWWjVzHGiHWhMEmwv6duCb8ZONHUdsK3wb1+BjLqpBr4bhu+
bLN8+q3wE3QBsg0VzCCdfkPOCQQLXGUtYVhlXZ6T5Mb9TwUaz0SxXFgaq7cgNOHy
GNCzp3joaW9y
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:30 2025 by rpki-client