Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235352e302f32342d3234203d3e20323634353631.roa
File: 3133382e302e3235352e302f32342d3234203d3e20323634353631.roa (raw, json)
Hash identifier: HoUvlzLlWYMe5EyLMBSzh/hNzYRZ00kM0FQjL0qQpcY=
Subject key identifier: B9:0D:F8:B0:C3:3C:30:26:93:D7:92:6C:35:E5:71:9F:92:39:89:39
Certificate issuer: /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial: 476D437307CC762020D6C976BF4EE68FA3233DA8
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235352e302f32342d3234203d3e20323634353631.roa
Signing time: Mon 09 Jun 2025 11:40:50 +0000
ROA not before: Mon 09 Jun 2025 11:35:50 +0000
ROA not after: Mon 08 Jun 2026 11:40:50 +0000
asID: 264561
IP address blocks: 138.0.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6d:43:73:07:cc:76:20:20:d6:c9:76:bf:4e:e6:8f:a3:23:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Validity
Not Before: Jun 9 11:35:50 2025 GMT
Not After : Jun 8 11:40:50 2026 GMT
Subject: CN=B90DF8B0C33C302693D7926C35E5719F92398939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:66:e9:90:66:a3:99:79:cd:e3:31:a6:47:
72:3c:86:f0:e0:b4:ba:9c:79:1c:fe:0b:df:e6:23:
8a:b9:92:9f:04:1e:e6:3c:9d:27:bd:be:a9:2b:d7:
4a:df:6c:ad:bc:15:5f:74:41:57:1a:c0:d2:d2:dc:
89:f4:97:07:67:8b:99:1e:9e:eb:64:84:1e:08:e7:
39:b8:03:2e:03:b0:05:71:c0:47:a2:d8:4f:e1:b4:
47:b2:b2:cf:51:12:7b:43:90:47:01:8f:8d:15:c4:
11:0e:b2:e9:49:5c:b5:bd:ed:f7:23:6d:02:65:f4:
5c:29:69:ff:ef:77:dd:61:fe:bd:90:ac:b4:16:4b:
68:95:a2:12:ac:c1:9c:bf:bd:9e:ed:96:74:3c:e7:
8f:ec:b9:c8:43:00:9c:e8:35:f1:a3:91:4c:e5:e6:
b8:97:ac:39:3f:4c:b1:94:19:14:5b:8e:2a:b8:24:
e0:0d:9a:1e:c7:3a:17:72:25:5b:d4:8e:58:9a:09:
04:48:3c:fc:f1:16:ef:9e:9d:bd:bd:3a:89:e1:2d:
f9:6c:4c:ff:c0:7a:21:16:75:41:29:eb:c9:61:8c:
0f:37:e5:23:88:2b:0d:b9:65:e7:b5:d1:a1:21:be:
f6:ba:6d:ea:6c:65:ba:71:81:c7:5d:5c:64:f0:35:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:F8:B0:C3:3C:30:26:93:D7:92:6C:35:E5:71:9F:92:39:89:39
X509v3 Authority Key Identifier:
keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235352e302f32342d3234203d3e20323634353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.255.0/24
Signature Algorithm: sha256WithRSAEncryption
66:04:b6:a9:33:95:fe:cf:a4:ac:ad:9f:49:ff:7b:e0:8e:04:
4f:6f:30:f5:92:53:6b:48:b8:ff:d8:89:84:6a:8e:fc:4c:37:
84:f7:9e:45:99:b2:34:99:23:17:63:49:07:db:90:46:99:46:
fb:ec:02:70:28:52:ac:13:c5:4c:1e:54:76:e1:be:9d:8b:5d:
2e:e3:84:b4:16:2c:fb:e2:6e:7e:48:e5:25:6b:81:67:66:22:
44:21:eb:26:13:f2:2f:87:14:7a:95:86:22:9f:26:96:43:2c:
42:29:0a:63:53:a0:a1:a2:c7:ee:11:e8:52:8e:c4:63:57:fe:
10:23:cc:21:d4:5b:60:43:9f:4e:64:a3:c6:c4:8a:c4:a0:dc:
14:d0:96:fe:c9:55:72:68:90:33:52:3c:fd:ff:00:83:3a:28:
eb:ef:3d:83:db:00:cb:13:d0:46:5e:30:11:9c:18:6f:5b:b3:
e7:a2:2f:b3:ad:12:a1:26:1d:24:29:9c:38:fd:62:4e:ba:0d:
e6:9c:10:d7:c5:30:cd:66:45:94:dd:df:79:27:93:77:f4:a5:
bd:a0:97:9a:9b:59:d1:df:f1:3b:8a:92:d8:f2:4b:02:4c:0e:
b1:82:95:1e:1f:e6:39:f6:22:74:e0:35:a3:00:88:8f:01:49:
4c:5b:12:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR21DcwfMdiAg1sl2v07mj6MjPagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I2OTFGNEQxNDg3QUFCNURCODEzMDRCQjk5MTA3OUNC
MDNEOTg5RDAeFw0yNTA2MDkxMTM1NTBaFw0yNjA2MDgxMTQwNTBaMDMxMTAvBgNV
BAMTKEI5MERGOEIwQzMzQzMwMjY5M0Q3OTI2QzM1RTU3MTlGOTIzOTg5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lmbpkGajmXnN4zGmR3I8hvDg
tLqceRz+C9/mI4q5kp8EHuY8nSe9vqkr10rfbK28FV90QVcawNLS3In0lwdni5ke
nutkhB4I5zm4Ay4DsAVxwEei2E/htEeyss9REntDkEcBj40VxBEOsulJXLW97fcj
bQJl9Fwpaf/vd91h/r2QrLQWS2iVohKswZy/vZ7tlnQ854/suchDAJzoNfGjkUzl
5riXrDk/TLGUGRRbjiq4JOANmh7HOhdyJVvUjliaCQRIPPzxFu+enb29OonhLfls
TP/AeiEWdUEp68lhjA835SOIKw25Zee10aEhvva6bepsZbpxgcddXGTwNZzpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuQ34sMM8MCaT15JsNeVxn5I5iTkwHwYDVR0j
BBgwFoAUy2kfTRSHqrXbgTBLuZEHnLA9mJ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RMSGdyTmpSRmVlRHE5b3lSRGZoZ3JHSFdUNHRkNUJoaVI3TWtncFJo
SkYvMC9DQjY5MUY0RDE0ODdBQUI1REI4MTMwNEJCOTkxMDc5Q0IwM0Q5ODlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNjkxRjREMTQ4N0FBQjVE
QjgxMzA0QkI5OTEwNzlDQjAzRDk4OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dETEhnck5qUkZlZURxOW95UkRmaGdyR0hXVDR0ZDVCaGlSN01rZ3BSaEpGLzAv
MzEzMzM4MmUzMDJlMzIzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigD/MA0GCSqGSIb3DQEBCwUAA4IBAQBmBLapM5X+
z6SsrZ9J/3vgjgRPbzD1klNrSLj/2ImEao78TDeE955FmbI0mSMXY0kH25BGmUb7
7AJwKFKsE8VMHlR24b6di10u44S0Fiz74m5+SOUla4FnZiJEIesmE/IvhxR6lYYi
nyaWQyxCKQpjU6ChosfuEehSjsRjV/4QI8wh1FtgQ59OZKPGxIrEoNwU0Jb+yVVy
aJAzUjz9/wCDOijr7z2D2wDLE9BGXjARnBhvW7Pnoi+zrRKhJh0kKZw4/WJOug3m
nBDXxTDNZkWU3d95J5N39KW9oJeam1nR3/E7ipLY8ksCTA6xgpUeH+Y59iJ04DWj
AIiPAUlMWxIH
-----END CERTIFICATE-----
Generated at Sun Jun 22 23:22:56 2025 by rpki-client