Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3232203d3e20323634353631.roa
File: 3133382e302e3235322e302f32322d3232203d3e20323634353631.roa (raw, json)
Hash identifier: TMRL8vdqTFFPBj4Rr+ubU6RMUJ3YlCRPYaLmzHLreC0=
Subject key identifier: 66:8C:44:88:46:F1:77:47:48:83:E5:7B:17:4D:DC:24:4F:08:04:68
Certificate issuer: /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial: 513F02C1D15E4B8CE02A79788A0C6A2689DA4C63
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3232203d3e20323634353631.roa
Signing time: Mon 09 Jun 2025 11:40:51 +0000
ROA not before: Mon 09 Jun 2025 11:35:51 +0000
ROA not after: Mon 08 Jun 2026 11:40:51 +0000
asID: 264561
IP address blocks: 138.0.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3f:02:c1:d1:5e:4b:8c:e0:2a:79:78:8a:0c:6a:26:89:da:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Validity
Not Before: Jun 9 11:35:51 2025 GMT
Not After : Jun 8 11:40:51 2026 GMT
Subject: CN=668C448846F177474883E57B174DDC244F080468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:bb:c3:07:ae:83:57:83:c2:55:3e:11:f8:
b9:c9:86:e8:af:92:e8:c3:dc:43:93:be:da:64:8b:
d8:4a:1b:0e:07:14:fc:f1:eb:db:22:2c:0d:09:64:
13:c9:ac:f6:34:6b:89:9d:75:be:7a:a1:21:1a:10:
0b:ea:0f:26:f1:89:4b:3a:9f:72:34:ed:cc:2f:11:
cb:7b:33:8c:d2:2e:98:76:9b:3f:e2:63:a2:69:59:
82:fb:b1:39:68:87:fd:db:02:a7:39:4b:3a:5f:09:
69:87:e7:43:f4:db:e0:9e:d5:2b:31:0b:bc:7a:11:
be:44:c6:b0:c1:d1:3a:2f:09:f0:6d:d2:e7:d0:7b:
e5:ba:08:cd:20:8f:aa:12:22:54:99:b1:22:f7:c7:
b4:f4:e1:9d:f9:56:a8:44:7b:e6:6f:6b:51:11:10:
9a:2b:48:e0:d6:35:2f:1c:e9:0b:de:a6:3c:30:88:
7b:da:6a:8a:9c:9c:cc:f4:b3:7d:6d:59:53:c0:14:
3c:af:0c:3c:8e:6a:3b:86:4e:cd:bc:00:86:30:dd:
fc:d8:03:de:48:75:14:ad:43:e5:d4:7d:72:49:42:
ab:d1:73:92:2a:1f:a7:76:26:5c:68:25:bc:d7:0c:
4e:5c:c7:a1:e0:b3:91:d7:f2:ca:fb:f6:03:3e:9b:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:44:88:46:F1:77:47:48:83:E5:7B:17:4D:DC:24:4F:08:04:68
X509v3 Authority Key Identifier:
keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3232203d3e20323634353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:65:cd:60:66:de:f9:a3:ab:94:1f:d6:65:c6:0e:ce:fc:df:
56:11:d0:06:8e:3c:6c:b1:85:97:39:81:a3:8d:ad:2e:93:52:
a8:bc:df:43:72:94:7b:0e:04:68:94:1e:4f:d1:49:22:51:81:
0d:b3:a8:6b:50:00:ab:40:ad:d5:42:b2:62:42:7e:1a:a7:50:
67:a4:45:fb:12:d1:43:7b:12:f9:a4:91:f0:20:87:b4:ac:3e:
0c:34:a6:de:ae:5f:a5:fe:57:19:b7:b6:c7:71:1f:0d:38:a8:
5b:85:07:e9:66:27:d4:93:11:47:0e:48:37:ef:98:f3:f6:ac:
51:92:be:c4:80:87:ec:1f:c2:f7:15:2a:6b:8f:a6:86:41:ce:
3c:2f:3e:a6:89:d6:50:61:11:8f:97:7d:9c:42:ba:ba:b5:76:
08:61:d9:b0:9d:e0:7a:36:b9:7d:4e:a3:35:c8:25:16:f6:6d:
a1:7f:a1:0e:03:8a:97:bd:cc:fb:b7:52:8d:8d:35:c4:21:2e:
cd:be:a3:f6:65:51:85:9f:6b:8d:93:a1:cf:fd:4e:4c:a5:54:
36:b7:6e:b5:1d:91:cb:ff:13:a3:98:b4:4a:fe:85:c7:65:de:
0c:b0:62:76:d1:71:5a:44:83:c4:e0:e2:78:be:d0:f3:1f:2c:
bd:fe:82:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUT8CwdFeS4zgKnl4igxqJonaTGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I2OTFGNEQxNDg3QUFCNURCODEzMDRCQjk5MTA3OUNC
MDNEOTg5RDAeFw0yNTA2MDkxMTM1NTFaFw0yNjA2MDgxMTQwNTFaMDMxMTAvBgNV
BAMTKDY2OEM0NDg4NDZGMTc3NDc0ODgzRTU3QjE3NEREQzI0NEYwODA0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6LvDB66DV4PCVT4R+LnJhuiv
kujD3EOTvtpki9hKGw4HFPzx69siLA0JZBPJrPY0a4mddb56oSEaEAvqDybxiUs6
n3I07cwvEct7M4zSLph2mz/iY6JpWYL7sTloh/3bAqc5SzpfCWmH50P02+Ce1Ssx
C7x6Eb5ExrDB0TovCfBt0ufQe+W6CM0gj6oSIlSZsSL3x7T04Z35VqhEe+Zva1ER
EJorSODWNS8c6QvepjwwiHvaaoqcnMz0s31tWVPAFDyvDDyOajuGTs28AIYw3fzY
A95IdRStQ+XUfXJJQqvRc5IqH6d2JlxoJbzXDE5cx6Hgs5HX8sr79gM+my/dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZoxEiEbxd0dIg+V7F03cJE8IBGgwHwYDVR0j
BBgwFoAUy2kfTRSHqrXbgTBLuZEHnLA9mJ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RMSGdyTmpSRmVlRHE5b3lSRGZoZ3JHSFdUNHRkNUJoaVI3TWtncFJo
SkYvMC9DQjY5MUY0RDE0ODdBQUI1REI4MTMwNEJCOTkxMDc5Q0IwM0Q5ODlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNjkxRjREMTQ4N0FBQjVE
QjgxMzA0QkI5OTEwNzlDQjAzRDk4OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dETEhnck5qUkZlZURxOW95UkRmaGdyR0hXVDR0ZDVCaGlSN01rZ3BSaEpGLzAv
MzEzMzM4MmUzMDJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzUzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigD8MA0GCSqGSIb3DQEBCwUAA4IBAQA7Zc1gZt75
o6uUH9Zlxg7O/N9WEdAGjjxssYWXOYGjja0uk1KovN9DcpR7DgRolB5P0UkiUYEN
s6hrUACrQK3VQrJiQn4ap1BnpEX7EtFDexL5pJHwIIe0rD4MNKberl+l/lcZt7bH
cR8NOKhbhQfpZifUkxFHDkg375jz9qxRkr7EgIfsH8L3FSprj6aGQc48Lz6midZQ
YRGPl32cQrq6tXYIYdmwneB6Nrl9TqM1yCUW9m2hf6EOA4qXvcz7t1KNjTXEIS7N
vqP2ZVGFn2uNk6HP/U5MpVQ2t261HZHL/xOjmLRK/oXHZd4MsGJ20XFaRIPE4OJ4
vtDzHyy9/oKW
-----END CERTIFICATE-----
Generated at Sun Jun 22 23:18:26 2025 by rpki-client