Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3234203d3e203532393635.roa
File: 3137372e37322e3230382e302f32322d3234203d3e203532393635.roa (raw, json)
Hash identifier: Qik0HMyxQ7GyZIgA+WRPZ6+a2tEeN4zZIPFs8WV/OM8=
Subject key identifier: D3:09:4B:D1:8C:B0:0F:C9:F2:90:51:73:04:3E:D9:84:1C:9B:B4:74
Certificate issuer: /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial: 18FB15011EB0026B31570BB3F7A9D1EF7CC0C535
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3234203d3e203532393635.roa
Signing time: Thu 09 Mar 2023 17:39:58 +0000
ROA not before: Thu 09 Mar 2023 17:34:58 +0000
ROA not after: Thu 07 Mar 2024 17:39:58 +0000
asID: 52965
IP address blocks: 177.72.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fb:15:01:1e:b0:02:6b:31:57:0b:b3:f7:a9:d1:ef:7c:c0:c5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Validity
Not Before: Mar 9 17:34:58 2023 GMT
Not After : Mar 7 17:39:58 2024 GMT
Subject: CN=D3094BD18CB00FC9F2905173043ED9841C9BB474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:6a:d5:b5:64:9b:53:8e:11:b5:2f:b4:24:
d4:6b:55:aa:9a:f0:c2:d5:25:89:b5:35:5f:09:64:
e2:95:49:7a:c3:b0:25:85:c4:fe:5d:30:b0:c4:07:
7d:b5:81:ce:dd:30:f7:af:55:9e:9f:cc:1d:22:12:
33:30:c0:10:d6:e6:4e:5e:70:d6:74:2f:40:3a:3b:
93:77:10:8d:77:05:2a:e2:b2:a5:ae:f4:19:57:6b:
d6:2a:f6:04:71:c3:c5:82:9c:ce:0f:4b:85:3e:3a:
c0:6a:0d:70:4f:ba:9f:6a:da:88:cf:01:10:ce:4e:
36:8a:75:2e:30:d9:d6:88:56:e7:40:95:06:5d:aa:
c0:91:aa:75:70:25:b1:9e:7b:df:85:90:3d:3a:f2:
c0:25:0e:da:a6:ba:c7:33:67:00:5d:cd:f1:a3:e7:
37:e2:a6:c5:c5:19:a9:56:19:46:c5:b9:c5:97:e7:
00:0a:51:c1:4b:65:9e:84:cc:ce:7d:2c:43:e0:7b:
63:c3:85:e3:84:40:c2:78:7f:08:5d:a9:ac:72:c4:
b6:d8:04:8f:cb:4d:27:b6:f5:30:56:48:8d:cc:62:
c1:38:bc:68:5a:7f:02:eb:da:24:b3:33:72:35:a4:
71:95:22:8b:22:1b:77:3e:17:f3:a2:a7:e7:a3:0a:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:4B:D1:8C:B0:0F:C9:F2:90:51:73:04:3E:D9:84:1C:9B:B4:74
X509v3 Authority Key Identifier:
keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3234203d3e203532393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.72.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:2e:07:0f:18:f5:9a:74:a9:99:ae:af:0d:32:fa:4d:c4:2b:
ef:5f:35:da:50:98:50:8f:df:bf:20:f1:85:7d:a6:cf:6c:c7:
55:2b:74:b5:8b:cd:56:bc:c6:a1:76:19:4c:93:97:12:bb:aa:
88:e3:a3:c6:c4:a7:71:0a:e3:93:82:1d:82:82:d4:d4:89:cd:
33:51:29:4b:f5:b0:ac:c4:e4:7c:57:16:fb:21:39:c5:77:09:
99:a5:67:ae:85:2c:c6:62:f5:2f:72:0e:22:6f:1f:bf:ff:a7:
82:ac:76:85:73:30:de:68:de:ca:fb:df:ae:bb:10:6c:c6:de:
7f:6c:04:25:43:97:2a:74:34:f3:a8:c9:d2:28:de:6e:b0:3a:
7c:aa:51:28:6d:b3:c5:89:b5:d3:c7:67:1b:b1:05:f5:bd:37:
8b:0c:1a:30:57:45:4e:20:f8:9a:6c:b2:49:11:5c:5b:96:16:
1e:fa:d1:b7:40:66:01:97:3c:11:07:05:de:1c:57:5f:25:1e:
8f:72:be:7a:e3:ec:88:11:6b:74:86:c3:ff:e8:ac:94:ef:09:
40:e3:3f:80:7b:e7:1c:e7:1f:09:29:dd:88:f6:7d:06:51:6b:
af:51:70:b5:bd:12:e5:86:f1:b5:5b:b5:db:bf:c1:70:81:01:
5d:eb:00:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGPsVAR6wAmsxVwuz96nR73zAxTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIzNUEyNjZENDQ3Q0EzQjcyQTM1NTEzQkE5NzYxRjU4
MDVGMjNFMjAeFw0yMzAzMDkxNzM0NThaFw0yNDAzMDcxNzM5NThaMDMxMTAvBgNV
BAMTKEQzMDk0QkQxOENCMDBGQzlGMjkwNTE3MzA0M0VEOTg0MUM5QkI0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEWrVtWSbU44RtS+0JNRrVaqa
8MLVJYm1NV8JZOKVSXrDsCWFxP5dMLDEB321gc7dMPevVZ6fzB0iEjMwwBDW5k5e
cNZ0L0A6O5N3EI13BSrisqWu9BlXa9Yq9gRxw8WCnM4PS4U+OsBqDXBPup9q2ojP
ARDOTjaKdS4w2daIVudAlQZdqsCRqnVwJbGee9+FkD068sAlDtqmusczZwBdzfGj
5zfipsXFGalWGUbFucWX5wAKUcFLZZ6EzM59LEPge2PDheOEQMJ4fwhdqaxyxLbY
BI/LTSe29TBWSI3MYsE4vGhafwLr2iSzM3I1pHGVIosiG3c+F/Oip+ejClQNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0wlL0YywD8nykFFzBD7ZhBybtHQwHwYDVR0j
BBgwFoAUMjWiZtRHyjtyo1UTupdh9YBfI+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMS8zMjM1QTI2NkQ0NDdDQTNCNzJBMzU1MTNCQTk3NjFGNTgwNUYyM0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMzVBMjY2RDQ0N0NBM0I3
MkEzNTUxM0JBOTc2MUY1ODA1RjIzRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzEv
MzEzNzM3MmUzNzMyMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUjQMA0GCSqGSIb3DQEBCwUAA4IBAQCLLgcPGPWa
dKmZrq8NMvpNxCvvXzXaUJhQj9+/IPGFfabPbMdVK3S1i81WvMahdhlMk5cSu6qI
46PGxKdxCuOTgh2CgtTUic0zUSlL9bCsxOR8Vxb7ITnFdwmZpWeuhSzGYvUvcg4i
bx+//6eCrHaFczDeaN7K+9+uuxBsxt5/bAQlQ5cqdDTzqMnSKN5usDp8qlEobbPF
ibXTx2cbsQX1vTeLDBowV0VOIPiabLJJEVxblhYe+tG3QGYBlzwRBwXeHFdfJR6P
cr564+yIEWt0hsP/6KyU7wlA4z+Ae+cc5x8JKd2I9n0GUWuvUXC1vRLlhvG1W7Xb
v8FwgQFd6wCR
-----END CERTIFICATE-----
Generated at Sat May 10 03:32:01 2025 by rpki-client