Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3234203d3e20323633393133.roa
File: 3133382e3230342e3234302e302f32322d3234203d3e20323633393133.roa (raw, json)
Hash identifier: Rf/3a9QkI5VjFtowQsuxTAqMflDMUEVWmScuKISL1gY=
Subject key identifier: 1D:6A:9B:9D:7E:CE:54:B4:A7:1E:9B:BB:18:01:1D:47:8E:AE:27:C7
Certificate issuer: /CN=A400B2AFB573A05BC2408F8AECC1E6140494925B
Certificate serial: 401AA4103D67F4070B428BB85944E9D7CB4F3002
Authority key identifier: A4:00:B2:AF:B5:73:A0:5B:C2:40:8F:8A:EC:C1:E6:14:04:94:92:5B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A400B2AFB573A05BC2408F8AECC1E6140494925B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3234203d3e20323633393133.roa
Signing time: Wed 11 Jun 2025 12:53:00 +0000
ROA not before: Wed 11 Jun 2025 12:48:00 +0000
ROA not after: Wed 10 Jun 2026 12:53:00 +0000
asID: 263913
IP address blocks: 138.204.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1a:a4:10:3d:67:f4:07:0b:42:8b:b8:59:44:e9:d7:cb:4f:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A400B2AFB573A05BC2408F8AECC1E6140494925B
Validity
Not Before: Jun 11 12:48:00 2025 GMT
Not After : Jun 10 12:53:00 2026 GMT
Subject: CN=1D6A9B9D7ECE54B4A71E9BBB18011D478EAE27C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:dc:3f:a0:18:2e:13:05:6d:66:a9:d5:e6:
45:a2:0e:f7:22:f8:4f:af:62:19:18:3d:c8:99:6e:
f9:ee:dc:ed:dc:f4:34:0e:31:1f:48:d5:67:c9:62:
01:ba:69:9f:a6:48:24:65:25:12:19:a2:81:90:84:
fe:37:13:41:a6:e6:84:69:3a:bf:8e:30:a7:2c:29:
ba:12:59:6f:d0:08:72:ca:d2:94:ce:19:ad:3a:b2:
aa:97:22:44:66:b5:f5:72:cb:50:68:be:02:3b:a1:
a0:39:34:56:8b:c9:23:97:9d:cc:3f:41:f5:16:cf:
56:5c:9b:a5:30:83:0c:4d:6d:68:99:09:52:12:98:
ca:e0:e6:2a:53:5d:a2:ef:f5:95:ac:d6:de:64:e5:
32:7c:9a:e5:62:43:81:01:f9:1f:00:fb:6f:a4:fe:
f4:f3:59:b7:c5:62:d7:35:24:2a:f2:79:1d:f3:e0:
1d:04:98:a9:43:f2:aa:e1:71:dc:a4:94:af:19:9e:
36:c5:68:7b:d7:7a:a5:71:8c:e7:87:14:12:4d:f3:
5d:b5:6f:9f:67:17:15:3d:e5:77:ab:0b:10:a7:06:
92:8b:2a:28:fe:1a:dd:12:20:be:0c:10:ca:53:6d:
0b:9a:f2:2e:b6:3d:0f:1d:f5:32:89:34:e0:f7:e7:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:9B:9D:7E:CE:54:B4:A7:1E:9B:BB:18:01:1D:47:8E:AE:27:C7
X509v3 Authority Key Identifier:
keyid:A4:00:B2:AF:B5:73:A0:5B:C2:40:8F:8A:EC:C1:E6:14:04:94:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A400B2AFB573A05BC2408F8AECC1E6140494925B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A400B2AFB573A05BC2408F8AECC1E6140494925B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3234203d3e20323633393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.240.0/22
Signature Algorithm: sha256WithRSAEncryption
44:89:d1:67:65:f3:d6:ea:a6:b3:81:09:68:4e:5a:b2:71:e6:
7c:f0:dd:61:52:1e:f3:87:ee:a6:ca:df:4b:0e:0d:27:ea:bd:
70:77:00:3b:5a:10:cc:48:40:a4:ae:cc:42:94:2d:a0:5e:22:
c7:87:27:5a:13:3e:40:f1:2a:b5:4d:c7:a3:a6:43:34:b4:4a:
d2:75:9f:03:b3:97:fd:e9:13:5e:f8:a9:c1:60:df:4e:b5:ea:
2f:77:73:61:69:74:0e:3c:9b:2e:90:4d:e0:26:20:07:56:86:
ad:06:cc:8c:3a:76:63:ae:7b:04:33:e7:ab:79:de:cf:79:71:
a4:4a:7b:95:9c:8d:c4:c1:8d:aa:ca:64:d2:f5:61:e2:24:be:
c3:8a:93:51:7b:e7:1f:17:cb:b1:34:06:0e:77:41:69:cc:7a:
c6:70:3b:ff:7e:4a:77:ed:70:f3:01:1f:b6:af:b0:7e:75:ed:
1f:9d:d8:9e:f3:f0:e8:23:b9:82:00:dc:96:05:e7:6d:f3:4e:
d5:43:c9:c3:64:7f:4a:63:01:24:aa:71:85:3b:24:3e:94:5c:
16:7a:fc:3b:ad:0e:c2:78:92:d4:67:6d:6a:65:a6:da:d1:41:
07:15:4a:31:37:a8:3b:05:de:4a:9a:2c:89:5a:1f:12:d0:7f:
a5:75:b3:74
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQBqkED1n9AcLQou4WUTp18tPMAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQwMEIyQUZCNTczQTA1QkMyNDA4RjhBRUNDMUU2MTQw
NDk0OTI1QjAeFw0yNTA2MTExMjQ4MDBaFw0yNjA2MTAxMjUzMDBaMDMxMTAvBgNV
BAMTKDFENkE5QjlEN0VDRTU0QjRBNzFFOUJCQjE4MDExRDQ3OEVBRTI3QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn79w/oBguEwVtZqnV5kWiDvci
+E+vYhkYPciZbvnu3O3c9DQOMR9I1WfJYgG6aZ+mSCRlJRIZooGQhP43E0Gm5oRp
Or+OMKcsKboSWW/QCHLK0pTOGa06sqqXIkRmtfVyy1BovgI7oaA5NFaLySOXncw/
QfUWz1Zcm6UwgwxNbWiZCVISmMrg5ipTXaLv9ZWs1t5k5TJ8muViQ4EB+R8A+2+k
/vTzWbfFYtc1JCryeR3z4B0EmKlD8qrhcdyklK8ZnjbFaHvXeqVxjOeHFBJN8121
b59nFxU95XerCxCnBpKLKij+Gt0SIL4MEMpTbQua8i62PQ8d9TKJNOD354yzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHWqbnX7OVLSnHpu7GAEdR46uJ8cwHwYDVR0j
BBgwFoAUpACyr7VzoFvCQI+K7MHmFASUklswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9BNDAwQjJBRkI1NzNBMDVCQzI0MDhGOEFFQ0MxRTYxNDA0OTQ5MjVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0MDBCMkFGQjU3M0EwNUJD
MjQwOEY4QUVDQzFFNjE0MDQ5NDkyNUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXVDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM8DANBgkqhkiG9w0BAQsFAAOCAQEARInR
Z2Xz1uqms4EJaE5asnHmfPDdYVIe84fupsrfSw4NJ+q9cHcAO1oQzEhApK7MQpQt
oF4ix4cnWhM+QPEqtU3Ho6ZDNLRK0nWfA7OX/ekTXvipwWDfTrXqL3dzYWl0Djyb
LpBN4CYgB1aGrQbMjDp2Y657BDPnq3nez3lxpEp7lZyNxMGNqspk0vVh4iS+w4qT
UXvnHxfLsTQGDndBacx6xnA7/35Kd+1w8wEftq+wfnXtH53YnvPw6CO5ggDclgXn
bfNO1UPJw2R/SmMBJKpxhTskPpRcFnr8O60OwniS1GdtamWm2tFBBxVKMTeoOwXe
SposiVofEtB/pXWzdA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 06:03:20 2025 by rpki-client