Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
File: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier: sLpeB/pAazb6FbtbzxeaVI/gva81Qs31JyawY3u0UVU=
Subject key identifier: 15:6F:19:D2:B5:04:ED:E2:46:62:C1:56:7C:A6:7B:BE:EC:B1:E5:29
Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial: 5625FC1AF33B5EA5F5C621F5F56CAC7781830084
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
Signing time: Thu 04 Apr 2024 07:32:49 +0000
ROA not before: Thu 04 Apr 2024 07:27:49 +0000
ROA not after: Thu 03 Apr 2025 07:32:49 +0000
asID: 28130
IP address blocks: 143.208.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:25:fc:1a:f3:3b:5e:a5:f5:c6:21:f5:f5:6c:ac:77:81:83:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Validity
Not Before: Apr 4 07:27:49 2024 GMT
Not After : Apr 3 07:32:49 2025 GMT
Subject: CN=156F19D2B504EDE24662C1567CA67BBEECB1E529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:22:7b:21:11:0a:a0:dd:09:10:05:09:33:
0d:0c:2f:03:b4:a0:eb:46:5d:de:df:8c:3a:a1:f1:
ff:85:1b:56:a5:f2:5e:73:cd:9c:52:7b:2d:d0:9d:
a5:3f:b9:d7:b1:79:37:f9:cc:62:d9:54:04:fc:bd:
82:af:b9:a9:38:1e:6d:18:50:9e:01:d9:f2:2e:83:
c3:be:02:a6:b7:e0:a5:2b:80:08:f3:5a:5f:48:83:
8f:f9:a1:af:41:44:7f:2a:e2:00:45:f4:53:e1:1b:
41:9e:96:94:6e:3b:8a:9b:7e:39:c5:a9:fb:39:14:
30:4f:ba:60:f2:ce:aa:0d:e3:ea:9b:73:18:1b:eb:
b3:38:65:9a:a1:b2:de:6d:51:a8:6a:f9:38:2a:c2:
de:ae:45:10:a4:d5:ee:7d:51:bb:ad:37:aa:c8:22:
60:b1:b1:3f:b1:36:1d:78:77:e6:a2:91:f7:9f:70:
53:18:71:76:47:07:7f:31:f8:d2:6b:99:e9:c6:60:
a6:63:39:3b:8a:bd:d3:a0:45:9b:72:30:9d:08:74:
d1:50:19:d6:ad:f6:81:a8:bf:cd:3a:38:9c:b4:f0:
e8:c4:0a:b0:e7:80:ee:f3:04:61:f6:da:93:67:97:
44:f5:57:5b:bd:61:74:26:c9:6c:4b:f0:4b:e9:6a:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6F:19:D2:B5:04:ED:E2:46:62:C1:56:7C:A6:7B:BE:EC:B1:E5:29
X509v3 Authority Key Identifier:
keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:9e:2d:09:c4:6f:99:ec:ee:a9:1a:7f:97:8a:b1:ce:79:9b:
3a:f2:4b:e7:99:ff:e8:f8:83:f6:fa:f1:9f:3c:c4:7e:f1:f0:
2a:5f:48:e7:d2:63:0e:fe:1d:92:64:fb:63:1e:99:75:bf:80:
b7:e3:fa:be:08:2b:74:a0:b1:46:84:2e:73:84:0c:7e:dc:85:
ec:c2:cf:3b:f5:d6:05:ff:d6:c6:a4:7a:e9:48:16:2d:bc:05:
b3:7b:4e:7e:31:49:76:0d:87:f8:ba:21:37:d8:f9:b3:b5:ac:
79:53:b8:6a:4a:53:eb:94:df:c5:c4:d9:c1:63:89:ee:a6:ac:
3c:d8:03:db:e6:e5:0d:5d:f1:43:a0:f3:fd:51:a2:15:f3:99:
aa:92:a4:17:e5:5b:1f:bb:c0:d9:49:63:c9:ff:36:d5:c7:1d:
8f:ed:16:39:8a:75:56:0d:34:47:53:3a:14:c2:51:4e:7e:e6:
82:96:44:c8:60:45:06:5c:7e:cd:11:6c:c1:a4:b1:01:60:1f:
ef:ab:50:5b:ef:b6:51:86:e8:1a:76:7c:d8:6d:7d:f9:23:1e:
4e:30:94:c8:c7:b5:3c:6f:09:aa:d2:aa:d1:7b:9b:e9:77:24:
91:4e:4b:44:a6:df:13:0f:50:bc:be:da:36:c8:b1:fd:5a:0e:
f6:3e:c3:cb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUViX8GvM7XqX1xiH19Wysd4GDAIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNDA0MDQwNzI3NDlaFw0yNTA0MDMwNzMyNDlaMDMxMTAvBgNV
BAMTKDE1NkYxOUQyQjUwNEVERTI0NjYyQzE1NjdDQTY3QkJFRUNCMUU1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gyJ7IREKoN0JEAUJMw0MLwO0
oOtGXd7fjDqh8f+FG1al8l5zzZxSey3QnaU/udexeTf5zGLZVAT8vYKvuak4Hm0Y
UJ4B2fIug8O+Aqa34KUrgAjzWl9Ig4/5oa9BRH8q4gBF9FPhG0GelpRuO4qbfjnF
qfs5FDBPumDyzqoN4+qbcxgb67M4ZZqhst5tUahq+Tgqwt6uRRCk1e59UbutN6rI
ImCxsT+xNh14d+aikfefcFMYcXZHB38x+NJrmenGYKZjOTuKvdOgRZtyMJ0IdNFQ
Gdat9oGov806OJy08OjECrDngO7zBGH22pNnl0T1V1u9YXQmyWxL8EvpavdVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUFW8Z0rUE7eJGYsFWfKZ7vuyx5SkwHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
NDMzMmUzMjMwMzgyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEz
MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCj9AoMA0GCSqGSIb3DQEBCwUAA4IBAQCMni0JxG+Z7O6p
Gn+XirHOeZs68kvnmf/o+IP2+vGfPMR+8fAqX0jn0mMO/h2SZPtjHpl1v4C34/q+
CCt0oLFGhC5zhAx+3IXsws879dYF/9bGpHrpSBYtvAWze05+MUl2DYf4uiE32Pmz
tax5U7hqSlPrlN/FxNnBY4nupqw82APb5uUNXfFDoPP9UaIV85mqkqQX5Vsfu8DZ
SWPJ/zbVxx2P7RY5inVWDTRHUzoUwlFOfuaClkTIYEUGXH7NEWzBpLEBYB/vq1Bb
77ZRhugadnzYbX35Ix5OMJTIx7U8bwmq0qrRe5vpdySRTktEpt8TD1C8vto2yLH9
Wg72PsPL
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:03 2025 by rpki-client