Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa
File: 3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa (raw, json)
Hash identifier: Vq3Ffzn9lm+C5IAzAPV1eH7wlLyJGeSe6oqMrfApYJo=
Subject key identifier: A3:44:43:6D:41:F6:73:53:F7:06:90:9C:DC:83:ED:12:D5:20:38:E7
Certificate issuer: /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial: 41B235F6FB90BED3F1C2860ADF18B75529B6F953
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa
Signing time: Tue 25 Mar 2025 20:35:33 +0000
ROA not before: Tue 25 Mar 2025 20:30:33 +0000
ROA not after: Tue 24 Mar 2026 20:35:33 +0000
asID: 264862
IP address blocks: 168.181.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b2:35:f6:fb:90:be:d3:f1:c2:86:0a:df:18:b7:55:29:b6:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Validity
Not Before: Mar 25 20:30:33 2025 GMT
Not After : Mar 24 20:35:33 2026 GMT
Subject: CN=A344436D41F67353F706909CDC83ED12D52038E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:6e:ec:fb:fa:32:cc:3f:e7:05:e1:bf:db:
0b:20:5b:fb:ef:98:a4:89:11:d3:59:75:fc:67:95:
6f:65:6a:7d:bd:31:d4:86:e8:2a:97:85:c6:1a:d3:
34:38:72:61:16:99:1d:30:2e:be:f2:62:dd:81:58:
88:4b:6a:86:56:5c:d4:ea:4f:d3:b2:e1:77:74:c4:
2e:0e:f3:94:43:f2:7c:92:9f:09:18:5f:69:50:4f:
37:b3:4e:70:1b:39:80:d9:ae:7e:6e:a6:13:14:57:
c4:44:fd:61:88:ea:63:a0:15:84:6a:1b:57:ab:2a:
8b:d7:ab:72:e8:ed:d2:2e:d4:59:87:dc:02:2c:85:
50:8f:b3:1f:25:8e:71:5c:fe:5d:b3:6a:75:3c:e9:
54:39:a2:12:21:5e:9f:0b:c7:9b:a7:98:4f:86:7e:
4e:c1:3c:f2:93:2a:14:09:20:f2:29:70:2d:9d:53:
41:1e:47:9f:a4:76:16:b9:ac:a1:e1:0f:9a:98:95:
06:7e:03:8f:8f:07:1c:94:f0:77:59:4d:98:ae:f0:
68:ea:eb:48:6e:78:34:2b:43:bf:d0:da:29:70:fb:
be:84:e2:4e:5f:6a:3d:08:93:0d:8a:34:6a:b6:b9:
ba:80:c1:48:f4:b4:20:8e:80:c8:b1:e9:20:cd:e5:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:43:6D:41:F6:73:53:F7:06:90:9C:DC:83:ED:12:D5:20:38:E7
X509v3 Authority Key Identifier:
keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:f4:00:ff:46:2d:0b:3e:df:31:19:54:e0:49:00:06:ff:3a:
f5:f0:1d:fa:64:5c:ed:7b:5d:90:f2:79:56:2a:9a:5a:bf:d3:
2f:8a:df:9e:94:79:2a:79:ae:c0:1e:6c:8a:04:41:a8:19:89:
36:f0:ba:43:9b:c3:73:0d:1b:e4:69:c9:85:8e:f8:af:f9:80:
51:ee:4b:80:44:ed:7b:e5:4d:7f:29:c0:7c:4c:4d:39:05:8e:
cc:55:a9:30:59:bb:b7:a7:c1:a5:91:30:75:02:f0:ef:c0:70:
64:2d:48:6c:ff:06:83:3e:5f:1c:e5:c9:c9:82:44:79:38:a4:
ac:40:c1:6b:07:31:d8:37:86:8a:34:aa:10:5f:7f:85:66:b3:
c7:28:53:16:c6:07:ad:b0:3d:09:fc:4b:5b:ed:ef:e2:59:2c:
1a:f3:d9:e2:b3:38:9b:81:44:5f:8d:cf:9b:0a:71:d5:6f:8c:
8f:24:62:32:69:ff:b4:84:cd:59:a7:87:89:9c:99:71:39:ee:
52:5d:89:14:71:5f:6e:75:bf:af:05:19:98:51:04:26:02:a9:
94:8d:e8:24:92:86:80:2d:d2:5a:a1:2b:8f:00:c4:d1:5c:84:
17:f5:8e:d8:10:ba:c2:50:f4:96:70:fe:be:c9:30:e4:5e:04:
d3:f5:e2:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQbI19vuQvtPxwoYK3xi3VSm2+VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg5OTBFNjEwMEQyRkYwQTAwMTQ2NzQzRjZENzQzQzNB
M0M3OTQ0QjAeFw0yNTAzMjUyMDMwMzNaFw0yNjAzMjQyMDM1MzNaMDMxMTAvBgNV
BAMTKEEzNDQ0MzZENDFGNjczNTNGNzA2OTA5Q0RDODNFRDEyRDUyMDM4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4W7s+/oyzD/nBeG/2wsgW/vv
mKSJEdNZdfxnlW9lan29MdSG6CqXhcYa0zQ4cmEWmR0wLr7yYt2BWIhLaoZWXNTq
T9Oy4Xd0xC4O85RD8nySnwkYX2lQTzezTnAbOYDZrn5uphMUV8RE/WGI6mOgFYRq
G1erKovXq3Lo7dIu1FmH3AIshVCPsx8ljnFc/l2zanU86VQ5ohIhXp8Lx5unmE+G
fk7BPPKTKhQJIPIpcC2dU0EeR5+kdha5rKHhD5qYlQZ+A4+PBxyU8HdZTZiu8Gjq
60hueDQrQ7/Q2ilw+76E4k5faj0Ikw2KNGq2ubqAwUj0tCCOgMix6SDN5SczAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUo0RDbUH2c1P3BpCc3IPtEtUgOOcwHwYDVR0j
BBgwFoAUaJkOYQDS/woAFGdD9tdDw6PHlEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC82ODk5MEU2MTAwRDJGRjBBMDAxNDY3NDNGNkQ3NDNDM0EzQzc5NDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTkwRTYxMDBEMkZGMEEw
MDE0Njc0M0Y2RDc0M0MzQTNDNzk0NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHWGNoMm5vQmRrR2tqaE5NOW11Z1JzZ2FrcEs5RHB0SGZRamNINkZXV2NtLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM4MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAai1hDANBgkqhkiG9w0BAQsFAAOCAQEAKvQA
/0YtCz7fMRlU4EkABv869fAd+mRc7XtdkPJ5ViqaWr/TL4rfnpR5KnmuwB5sigRB
qBmJNvC6Q5vDcw0b5GnJhY74r/mAUe5LgETte+VNfynAfExNOQWOzFWpMFm7t6fB
pZEwdQLw78BwZC1IbP8Ggz5fHOXJyYJEeTikrEDBawcx2DeGijSqEF9/hWazxyhT
FsYHrbA9CfxLW+3v4lksGvPZ4rM4m4FEX43Pmwpx1W+MjyRiMmn/tITNWaeHiZyZ
cTnuUl2JFHFfbnW/rwUZmFEEJgKplI3oJJKGgC3SWqErjwDE0VyEF/WO2BC6wlD0
lnD+vskw5F4E0/Xiqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net