Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier: +c+grYiKiF5A/39fZxT7/SSDw7O1KfooIEojiMnlLFs=
Subject key identifier: 3F:91:B4:65:68:1E:02:FA:FB:FB:1A:6C:62:36:06:C6:C7:DC:AB:46
Certificate issuer: /CN=BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365
Certificate serial: 39BFA265CEED470C13C2CC1749BA94E2CE885BA3
Authority key identifier: BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time: Fri 09 Feb 2024 15:45:37 +0000
ROA not before: Fri 09 Feb 2024 15:40:37 +0000
ROA not after: Fri 07 Feb 2025 15:45:37 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bf:a2:65:ce:ed:47:0c:13:c2:cc:17:49:ba:94:e2:ce:88:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365
Validity
Not Before: Feb 9 15:40:37 2024 GMT
Not After : Feb 7 15:45:37 2025 GMT
Subject: CN=3F91B465681E02FAFBFB1A6C623606C6C7DCAB46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:40:32:6e:cb:6f:18:55:d9:cb:0f:66:23:
7d:27:57:e2:19:97:e5:d6:b5:c7:6d:3f:cb:49:ca:
4d:b8:d4:b0:d0:3c:f6:68:18:93:83:2a:38:de:90:
b8:13:99:29:c9:4d:7b:ec:61:67:71:13:69:0c:19:
c5:b0:be:6a:43:af:88:e6:de:9c:50:2d:d6:fc:99:
23:7e:88:0e:c0:d5:83:63:7b:80:67:96:04:7d:6d:
3a:83:8c:67:10:22:5f:05:d4:ff:7c:eb:9a:53:b3:
03:bd:7d:42:fa:a5:c9:a8:d2:81:aa:ef:cb:0b:0a:
34:4f:fe:e5:1d:e6:61:95:0f:bf:24:66:ff:ce:72:
e2:c8:57:a0:e0:63:f0:5b:a7:47:36:b9:17:2f:67:
84:fe:94:5a:a8:d6:72:73:74:1b:e6:08:7c:f6:a6:
07:12:99:f8:25:5c:72:3f:38:b0:41:36:41:e0:f2:
29:9b:8b:72:44:1f:fe:a0:04:f6:03:2b:3b:e1:3f:
e6:26:61:d1:41:ca:a9:b0:84:6c:b0:86:79:8a:0f:
9d:4b:9b:20:b0:07:3a:06:30:4e:87:e5:5c:1a:31:
87:a9:2a:f4:cd:b1:e2:ff:15:7b:b5:84:89:a2:c2:
00:3f:54:34:ba:1e:d0:c8:f7:bf:11:0f:89:14:6d:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:B4:65:68:1E:02:FA:FB:FB:1A:6C:62:36:06:C6:C7:DC:AB:46
X509v3 Authority Key Identifier:
keyid:BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
33:d7:b6:19:c0:26:be:cd:89:1d:ee:21:6f:f4:c4:e2:5e:13:
92:dd:f8:9e:ee:fb:48:6d:2c:95:88:b4:c9:b2:33:1e:cf:75:
15:0f:01:18:22:b3:7d:6f:93:ce:7f:e8:7a:8a:bd:ae:bc:d8:
5f:02:f0:bc:61:7b:0c:90:e3:a2:63:4c:32:c7:8c:61:40:a1:
08:6a:8a:65:42:68:77:0e:e3:61:28:0c:61:83:3e:fe:82:dd:
f9:07:7c:cd:cc:f5:23:39:eb:60:c8:88:4d:6e:dc:2d:26:40:
c1:b2:29:e5:99:48:f6:40:1d:ea:3d:3b:1e:e1:08:91:90:74:
9d:dd:8f:7f:1b:33:c9:c9:3b:65:29:37:28:2f:4f:aa:f6:47:
66:2c:a3:a7:d3:5c:4d:a6:10:ed:0c:3d:99:f5:e9:27:70:7a:
5e:ce:29:87:95:b1:28:2c:57:21:91:fd:59:64:89:d9:b0:e2:
99:e0:61:33:1b:10:1c:60:4d:81:77:ba:dd:c4:3d:68:2c:7e:
57:4e:c1:af:0f:97:55:bb:ea:8a:aa:e0:f0:56:5e:f9:d9:1d:
d5:ae:88:01:82:ea:0e:6f:25:f1:a6:3f:63:9e:9a:25:cc:1d:
0f:d2:3f:17:f2:09:d1:10:83:0a:3c:72:98:18:82:c9:83:09:
fa:40:17:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOb+iZc7tRwwTwswXSbqU4s6IW6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYxNkRFRUZENjlBNzJGQzdDQUFDOUNFMUIxOTBBMURE
MkRDRTM2NTAeFw0yNDAyMDkxNTQwMzdaFw0yNTAyMDcxNTQ1MzdaMDMxMTAvBgNV
BAMTKDNGOTFCNDY1NjgxRTAyRkFGQkZCMUE2QzYyMzYwNkM2QzdEQ0FCNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWm0AybstvGFXZyw9mI30nV+IZ
l+XWtcdtP8tJyk241LDQPPZoGJODKjjekLgTmSnJTXvsYWdxE2kMGcWwvmpDr4jm
3pxQLdb8mSN+iA7A1YNje4BnlgR9bTqDjGcQIl8F1P9865pTswO9fUL6pcmo0oGq
78sLCjRP/uUd5mGVD78kZv/OcuLIV6DgY/Bbp0c2uRcvZ4T+lFqo1nJzdBvmCHz2
pgcSmfglXHI/OLBBNkHg8imbi3JEH/6gBPYDKzvhP+YmYdFByqmwhGywhnmKD51L
myCwBzoGME6H5VwaMYepKvTNseL/FXu1hImiwgA/VDS6HtDI978RD4kUbRMVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUP5G0ZWgeAvr7+xpsYjYGxsfcq0YwHwYDVR0j
BBgwFoAUvxbe79aacvx8qsnOGxkKHdLc42UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC9CRjE2REVFRkQ2OUE3MkZDN0NBQUM5Q0UxQjE5MEExREQyRENFMzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGMTZERUVGRDY5QTcyRkM3
Q0FBQzlDRTFCMTkwQTFERDJEQ0UzNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzMDMxMmUzMjMwMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyRSQMA0GCSqGSIb3DQEBCwUAA4IBAQAz17YZwCa+
zYkd7iFv9MTiXhOS3fie7vtIbSyViLTJsjMez3UVDwEYIrN9b5POf+h6ir2uvNhf
AvC8YXsMkOOiY0wyx4xhQKEIaoplQmh3DuNhKAxhgz7+gt35B3zNzPUjOetgyIhN
btwtJkDBsinlmUj2QB3qPTse4QiRkHSd3Y9/GzPJyTtlKTcoL0+q9kdmLKOn01xN
phDtDD2Z9ekncHpezimHlbEoLFchkf1ZZInZsOKZ4GEzGxAcYE2Bd7rdxD1oLH5X
TsGvD5dVu+qKquDwVl752R3VrogBguoObyXxpj9jnpolzB0P0j8X8gnREIMKPHKY
GILJgwn6QBdE
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org