Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
File: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (raw, json)
Hash identifier: p51nJMtiMzrsIUeyHyFkWYM9p3l9KWCQTOFYKkS4iHA=
Subject key identifier: 25:FB:7D:6F:E6:D7:1F:E5:88:EF:1A:1D:F2:75:A4:1A:B4:8F:41:B2
Certificate issuer: /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial: 74F5653437934B305E24D1B917392FF8ABA51089
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
Signing time: Wed 10 Jan 2024 17:00:43 +0000
ROA not before: Wed 10 Jan 2024 16:55:43 +0000
ROA not after: Wed 08 Jan 2025 17:00:43 +0000
asID: 262343
IP address blocks: 143.255.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f5:65:34:37:93:4b:30:5e:24:d1:b9:17:39:2f:f8:ab:a5:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Validity
Not Before: Jan 10 16:55:43 2024 GMT
Not After : Jan 8 17:00:43 2025 GMT
Subject: CN=25FB7D6FE6D71FE588EF1A1DF275A41AB48F41B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:76:c9:37:4e:44:c6:0f:41:4a:cc:67:07:
19:76:04:84:f2:81:86:02:d2:6a:61:be:6d:45:c2:
2f:68:3c:e5:cc:18:ce:dc:95:56:4a:9b:0e:79:24:
07:0d:24:65:05:db:1f:f5:d8:ab:ca:05:be:ce:86:
b4:20:5e:9e:01:3d:75:63:9c:d7:c1:fc:24:e0:a4:
40:ba:ce:e9:a7:76:f4:65:d2:0d:74:19:70:1b:66:
ab:f2:5c:a8:a7:03:37:05:c7:af:cd:d9:af:4b:e7:
d8:1f:af:8a:51:bb:79:6d:51:15:7a:a3:4c:df:e2:
27:75:02:69:f4:6c:64:35:4d:e7:75:d3:37:fd:80:
f7:85:1e:54:7d:e5:36:f9:0e:2a:05:ce:80:a0:06:
ba:47:a8:7f:e2:2c:02:2f:88:9b:29:8e:48:a8:e8:
7e:6b:f7:3b:b0:17:a7:96:67:f0:5d:50:cb:f1:92:
d7:a9:46:f9:bb:39:bc:b0:e8:2a:15:0c:0c:6e:a4:
fa:33:1d:64:ba:45:50:3a:85:65:b8:96:84:a8:23:
c1:1a:5a:18:3b:aa:e5:b6:0e:0e:63:dc:0e:3c:6a:
c6:7a:63:92:20:7c:62:70:9c:8c:32:8c:d3:1f:c9:
fc:24:51:2a:a6:ff:38:aa:2d:57:97:f7:67:a4:12:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:7D:6F:E6:D7:1F:E5:88:EF:1A:1D:F2:75:A4:1A:B4:8F:41:B2
X509v3 Authority Key Identifier:
keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.124.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:e9:a7:dd:0e:30:6c:d4:48:09:35:f5:55:36:4b:64:06:89:
2c:39:4a:b2:71:a6:c2:ef:a2:7a:d3:66:36:8b:ad:29:eb:08:
f4:1b:92:a5:9f:ca:88:6e:23:92:f1:43:9b:a7:8c:41:e6:16:
16:ee:f1:23:f6:99:e8:ac:55:d6:a5:7a:ca:5c:7a:d7:8a:8f:
2d:4a:10:f0:2a:fd:51:a2:fb:33:d8:27:bb:0d:6b:78:fe:9e:
07:3a:b2:23:1c:7b:f3:0c:5f:de:a3:46:74:3b:10:29:60:dc:
32:d7:62:44:95:59:ef:d4:b1:47:96:ba:ad:db:43:bf:80:99:
6c:a2:48:9a:c1:5b:54:6d:6b:de:dd:9e:18:b9:48:61:b0:20:
9e:be:4d:c6:f6:2e:25:c1:f4:d2:a4:03:c5:51:9e:b0:cf:1f:
ba:27:5c:ee:e2:c1:ff:8f:7d:1c:86:47:ba:5c:ba:a4:6c:3d:
37:eb:e1:bf:b4:69:79:02:07:7c:16:08:8e:6d:79:8a:b5:5c:
b5:4f:83:d9:85:43:11:65:9e:8d:76:1f:51:c2:f2:a2:e5:54:
d4:25:a1:84:bc:69:dd:67:94:58:70:7b:79:24:19:d7:46:92:
ef:7f:d2:b4:2f:5c:21:1c:03:a0:cc:fc:be:af:71:1e:67:0c:
b9:88:5d:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdPVlNDeTSzBeJNG5Fzkv+KulEIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQTAyMDgzNkE3NzEyRUMwQzNDMTdGQzE2NEQzN0Y1
QUI1RTcwMzAeFw0yNDAxMTAxNjU1NDNaFw0yNTAxMDgxNzAwNDNaMDMxMTAvBgNV
BAMTKDI1RkI3RDZGRTZENzFGRTU4OEVGMUExREYyNzVBNDFBQjQ4RjQxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId3bJN05Exg9BSsxnBxl2BITy
gYYC0mphvm1Fwi9oPOXMGM7clVZKmw55JAcNJGUF2x/12KvKBb7OhrQgXp4BPXVj
nNfB/CTgpEC6zumndvRl0g10GXAbZqvyXKinAzcFx6/N2a9L59gfr4pRu3ltURV6
o0zf4id1Amn0bGQ1Ted10zf9gPeFHlR95Tb5DioFzoCgBrpHqH/iLAIviJspjkio
6H5r9zuwF6eWZ/BdUMvxktepRvm7Obyw6CoVDAxupPozHWS6RVA6hWW4loSoI8Ea
Whg7quW2Dg5j3A48asZ6Y5IgfGJwnIwyjNMfyfwkUSqm/ziqLVeX92ekEnO/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJft9b+bXH+WI7xod8nWkGrSPQbIwHwYDVR0j
BBgwFoAUPwoCCDancS7Aw8F/wWTTf1q15wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX
b2ovMS8zRjBBMDIwODM2QTc3MTJFQzBDM0MxN0ZDMTY0RDM3RjVBQjVFNzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMEEwMjA4MzZBNzcxMkVD
MEMzQzE3RkMxNjREMzdGNUFCNUU3MDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrMzR4ZzVBWWpObjF2U2ZaN3p3NEtyeXd6WkQ4djZZRTd5bzM0dktwV29qLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//fDANBgkqhkiG9w0BAQsFAAOCAQEAqumn
3Q4wbNRICTX1VTZLZAaJLDlKsnGmwu+ietNmNoutKesI9BuSpZ/KiG4jkvFDm6eM
QeYWFu7xI/aZ6KxV1qV6ylx614qPLUoQ8Cr9UaL7M9gnuw1reP6eBzqyIxx78wxf
3qNGdDsQKWDcMtdiRJVZ79SxR5a6rdtDv4CZbKJImsFbVG1r3t2eGLlIYbAgnr5N
xvYuJcH00qQDxVGesM8fuidc7uLB/499HIZHuly6pGw9N+vhv7RpeQIHfBYIjm15
irVctU+D2YVDEWWejXYfUcLyouVU1CWhhLxp3WeUWHB7eSQZ10aS73/StC9cIRwD
oMz8vq9xHmcMuYhdwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org