Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
File: 3230302e3132392e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier: dcEnYhd82oBore9C/hzi5qlYErBjl7cUkcokQyi0Es8=
Subject key identifier: FF:D0:65:07:3F:6C:11:47:0F:22:68:5F:A2:E1:B4:6B:70:A8:99:88
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 1C736CAB2B755FDCA36AA547917CA215CFB6713E
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:05 +0000
ROA not before: Wed 29 Nov 2023 17:44:05 +0000
ROA not after: Wed 27 Nov 2024 17:49:05 +0000
asID: 1916
IP address blocks: 200.129.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:73:6c:ab:2b:75:5f:dc:a3:6a:a5:47:91:7c:a2:15:cf:b6:71:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:05 2023 GMT
Not After : Nov 27 17:49:05 2024 GMT
Subject: CN=FFD065073F6C11470F22685FA2E1B46B70A89988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:30:36:3a:30:c8:0f:e9:d1:12:2d:0d:15:
c3:fb:b1:90:4e:2a:6a:11:0c:f8:97:bb:f2:aa:ae:
a2:34:db:9a:d4:28:95:5c:f7:8c:83:f8:f7:61:58:
eb:7b:9e:ca:35:94:59:9b:9a:a4:b9:80:24:94:95:
85:3a:3e:aa:75:6b:d0:22:db:22:25:59:3c:4b:5a:
6e:91:ca:c5:07:81:0d:30:56:0d:30:86:e6:53:63:
a2:cb:7a:a7:db:e9:76:8c:37:cf:15:b8:69:0a:a6:
bd:a8:23:dc:a4:10:6f:4a:ab:b4:11:52:c2:67:63:
01:e3:73:95:c5:a1:e0:c6:0e:be:3d:33:d5:bd:20:
03:fe:37:84:cb:55:3e:1f:3e:e5:1e:04:4b:f0:6c:
46:6f:9c:80:92:4f:28:07:d5:3d:30:77:8e:d8:99:
31:88:ad:c6:62:e7:02:14:f3:00:ac:07:8b:17:64:
fa:e9:04:f7:6f:ef:87:35:55:a5:95:82:b1:e0:06:
11:28:16:29:6c:36:1b:fb:f9:25:c4:a6:41:d4:c0:
46:5d:7b:9c:15:85:bb:dc:52:c4:0d:14:ca:1e:1c:
1f:95:d3:8e:c5:46:76:91:f8:a8:e9:b8:e1:b4:d2:
92:f4:28:b7:83:a8:1a:6c:1b:3e:f8:02:2a:69:ba:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:65:07:3F:6C:11:47:0F:22:68:5F:A2:E1:B4:6B:70:A8:99:88
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:26:62:57:48:ef:03:91:0a:2f:25:47:6a:e1:e9:3d:69:55:
93:3f:76:fb:df:be:2d:40:48:5c:e1:a7:0a:69:8d:a0:50:8e:
74:d0:f9:3c:f5:c7:6b:43:64:32:fb:79:e4:e0:70:3b:c7:b0:
d4:3c:05:68:cf:cf:0e:69:db:58:b3:0a:eb:80:99:ea:af:b3:
72:dc:91:3b:8d:53:d0:2d:34:e6:3d:d1:32:73:cf:d9:fe:be:
f2:36:67:d4:f5:bc:5e:f6:9f:3a:52:5d:34:89:a5:96:d5:52:
2b:21:12:19:7f:cc:a1:4d:78:e6:d2:fd:b3:4d:10:f5:22:c4:
fe:04:34:81:de:22:b5:a1:77:21:06:65:c1:b0:b5:dc:e5:a9:
d2:0e:c7:04:3c:06:d5:ae:8d:d7:d3:de:e2:d8:68:5d:1a:a6:
bc:21:cd:4d:ae:21:d8:8f:ee:de:06:1b:6e:38:d3:24:d5:f2:
06:ec:e8:8b:42:e0:ea:50:f8:b1:a4:92:3d:f6:8b:e9:11:1d:
cd:d4:2a:8d:45:a6:8b:e8:8c:50:d8:9a:8d:6f:9b:31:0d:0e:
15:4e:b9:85:4f:2d:6e:1f:44:aa:ad:30:74:a2:54:d6:99:26:
54:2e:3f:8b:e3:45:23:94:d6:f7:d0:bd:f7:6b:0c:e6:b3:87:
f0:5e:21:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUHHNsqyt1X9yjaqVHkXyiFc+2cT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhEMDNBRDY1OUFBNDgwRUY1QTNENUJEQzkzNzUzQTRC
RjYxNDgxRDAeFw0yMzExMjkxNzQ0MDVaFw0yNDExMjcxNzQ5MDVaMDMxMTAvBgNV
BAMTKEZGRDA2NTA3M0Y2QzExNDcwRjIyNjg1RkEyRTFCNDZCNzBBODk5ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcATA2OjDID+nREi0NFcP7sZBO
KmoRDPiXu/KqrqI025rUKJVc94yD+PdhWOt7nso1lFmbmqS5gCSUlYU6Pqp1a9Ai
2yIlWTxLWm6RysUHgQ0wVg0whuZTY6LLeqfb6XaMN88VuGkKpr2oI9ykEG9Kq7QR
UsJnYwHjc5XFoeDGDr49M9W9IAP+N4TLVT4fPuUeBEvwbEZvnICSTygH1T0wd47Y
mTGIrcZi5wIU8wCsB4sXZPrpBPdv74c1VaWVgrHgBhEoFilsNhv7+SXEpkHUwEZd
e5wVhbvcUsQNFMoeHB+V047FRnaR+KjpuOG00pL0KLeDqBpsGz74Aippul9vAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU/9BlBz9sEUcPImhfouG0a3ComYgwHwYDVR0j
BBgwFoAUKNA61lmqSA71o9W9yTdTpL9hSB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC8yOEQwM0FENjU5QUE0ODBFRjVBM0Q1QkRDOTM3NTNBNEJGNjE0ODFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RDAzQUQ2NTlBQTQ4MEVG
NUEzRDVCREM5Mzc1M0E0QkY2MTQ4MUQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMyMzkyZTMwMmUzMDJmMzEzNjJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwDIgTANBgkqhkiG9w0BAQsFAAOCAQEAOyZiV0jvA5EKLyVH
auHpPWlVkz92+9++LUBIXOGnCmmNoFCOdND5PPXHa0NkMvt55OBwO8ew1DwFaM/P
DmnbWLMK64CZ6q+zctyRO41T0C005j3RMnPP2f6+8jZn1PW8XvafOlJdNImlltVS
KyESGX/MoU145tL9s00Q9SLE/gQ0gd4itaF3IQZlwbC13OWp0g7HBDwG1a6N19Pe
4thoXRqmvCHNTa4h2I/u3gYbbjjTJNXyBuzoi0Lg6lD4saSSPfaL6REdzdQqjUWm
i+iMUNiajW+bMQ0OFU65hU8tbh9Eqq0wdKJU1pkmVC4/i+NFI5TW99C992sM5rOH
8F4hJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org