Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323636353535.roa
File: 3133382e3132322e3233362e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier: zes5CvDAA57Fijof1JmhZR5em/BAt1B7OCYiSkxmBC4=
Subject key identifier: A1:F9:38:C2:CE:FA:84:C4:26:14:C4:6A:99:A1:8C:44:5D:38:A9:8A
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 7025836F270A0EC50A76CD9251C66AE9BEE7C8C6
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323636353535.roa
Signing time: Wed 23 Nov 2022 12:31:22 +0000
ROA not before: Wed 23 Nov 2022 12:26:22 +0000
ROA not after: Wed 22 Nov 2023 12:31:22 +0000
asID: 266555
IP address blocks: 138.122.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:25:83:6f:27:0a:0e:c5:0a:76:cd:92:51:c6:6a:e9:be:e7:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Nov 23 12:26:22 2022 GMT
Not After : Nov 22 12:31:22 2023 GMT
Subject: CN=A1F938C2CEFA84C42614C46A99A18C445D38A98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:d8:96:d0:da:59:36:c1:f1:07:3b:c5:6f:
f2:0a:67:24:25:4b:f0:1e:b2:f6:58:01:41:6c:ec:
31:c9:69:85:c2:51:fe:51:4e:cc:29:34:4b:b3:4d:
a1:ac:a8:d6:80:4a:50:c2:f1:b5:59:b3:c9:27:68:
28:6f:33:47:7c:0b:fd:05:1b:2a:f8:c0:23:af:df:
33:51:0e:c9:53:9a:45:f1:dc:4f:19:0f:97:b3:6e:
ac:98:1d:e9:81:2b:b3:13:16:1f:e1:99:89:4d:67:
15:4c:96:90:1d:d9:7b:5d:78:77:ce:dc:11:0b:e6:
d4:79:a1:eb:8c:05:78:8b:c5:88:c5:56:26:9f:81:
9f:e8:9a:01:18:89:23:32:d7:71:35:e7:71:6b:d2:
ec:00:87:1a:bc:95:07:25:aa:5f:75:27:8a:69:24:
f5:ce:dd:bc:61:9b:32:a9:84:ed:dc:ef:70:15:fc:
40:19:ac:44:61:c3:40:43:30:e0:44:d7:05:26:e0:
3f:e3:88:c1:58:2f:e2:48:7b:93:15:26:2e:51:22:
61:c3:de:9d:20:7e:6c:f1:d1:b1:40:1e:88:bb:f8:
0e:5e:c3:05:1f:95:23:a3:62:5a:7d:fe:31:25:4e:
c6:c5:e5:d0:3c:8f:94:73:e5:db:15:d9:07:07:b6:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:38:C2:CE:FA:84:C4:26:14:C4:6A:99:A1:8C:44:5D:38:A9:8A
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323636353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/22
Signature Algorithm: sha256WithRSAEncryption
56:cc:bc:c4:01:da:03:de:2f:43:28:18:a2:c6:97:b8:d0:32:
bd:04:1a:80:3d:6c:e8:44:d4:96:76:06:04:3c:50:e6:13:6e:
57:7f:03:61:38:5b:41:66:da:49:3c:09:d3:cc:55:30:4c:73:
27:56:ae:c4:1b:92:89:d4:cb:50:b5:3c:18:b6:c2:59:07:7a:
1f:ca:09:39:81:c0:25:cd:e9:ac:ec:38:ca:ed:9b:8e:c4:10:
72:3e:db:5e:53:f8:14:03:2b:ab:7a:a1:e9:11:ac:a7:04:7e:
d0:e8:9e:80:44:02:82:f8:87:0a:73:6b:e6:f8:88:63:a6:33:
d2:5e:05:7f:1c:2b:11:2b:5a:e2:1b:0d:4f:ec:7d:a3:3b:51:
31:c0:a7:52:1d:d4:8b:20:94:c9:a3:8a:0e:aa:d6:e1:df:0c:
97:b7:bd:b2:1f:88:49:9d:c7:28:48:0e:aa:79:3f:5e:c9:70:
f7:25:ad:f3:d9:bf:41:99:f1:17:fc:f3:57:d1:99:37:5f:ac:
45:b4:2d:7d:04:e7:71:c4:a0:91:e2:f4:15:f0:72:73:93:39:
6d:7d:1e:d0:b9:13:28:e0:ce:67:3c:d9:e4:67:d5:f6:09:b5:
6c:f3:2c:1e:84:39:49:73:c8:cb:70:b8:19:39:f7:d0:bf:0b:
6b:43:72:7c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcCWDbycKDsUKds2SUcZq6b7nyMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxODlBNEJERUQ4RTJBRTMxQzBEQ0Y1MzM2ODkxRUEx
NjRFQ0EzNzAeFw0yMjExMjMxMjI2MjJaFw0yMzExMjIxMjMxMjJaMDMxMTAvBgNV
BAMTKEExRjkzOEMyQ0VGQTg0QzQyNjE0QzQ2QTk5QTE4QzQ0NUQzOEE5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRNiW0NpZNsHxBzvFb/IKZyQl
S/AesvZYAUFs7DHJaYXCUf5RTswpNEuzTaGsqNaASlDC8bVZs8knaChvM0d8C/0F
Gyr4wCOv3zNRDslTmkXx3E8ZD5ezbqyYHemBK7MTFh/hmYlNZxVMlpAd2XtdeHfO
3BEL5tR5oeuMBXiLxYjFViafgZ/omgEYiSMy13E153Fr0uwAhxq8lQclql91J4pp
JPXO3bxhmzKphO3c73AV/EAZrERhw0BDMOBE1wUm4D/jiMFYL+JIe5MVJi5RImHD
3p0gfmzx0bFAHoi7+A5ewwUflSOjYlp9/jElTsbF5dA8j5Rz5dsV2QcHtuvFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUofk4ws76hMQmFMRqmaGMRF04qYowHwYDVR0j
BBgwFoAUhRiaS97Y4q4xwNz1M2iR6hZOyjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmJIV1N2UUZFQWpOSHIxUHBjd1JrZWRnTDZCWjllb2tHNFl2bnNGZ29Q
anUvMC84NTE4OUE0QkRFRDhFMkFFMzFDMERDRjUzMzY4OTFFQTE2NEVDQTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MTg5QTRCREVEOEUyQUUz
MUMwRENGNTMzNjg5MUVBMTY0RUNBMzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJiSFdTdlFGRUFqTkhyMVBwY3dSa2VkZ0w2Qlo5ZW9rRzRZdm5zRmdvUGp1LzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop67DANBgkqhkiG9w0BAQsFAAOCAQEAVsy8
xAHaA94vQygYosaXuNAyvQQagD1s6ETUlnYGBDxQ5hNuV38DYThbQWbaSTwJ08xV
MExzJ1auxBuSidTLULU8GLbCWQd6H8oJOYHAJc3prOw4yu2bjsQQcj7bXlP4FAMr
q3qh6RGspwR+0OiegEQCgviHCnNr5viIY6Yz0l4FfxwrESta4hsNT+x9oztRMcCn
Uh3UiyCUyaOKDqrW4d8Ml7e9sh+ISZ3HKEgOqnk/Xslw9yWt89m/QZnxF/zzV9GZ
N1+sRbQtfQTnccSgkeL0FfByc5M5bX0e0LkTKODOZzzZ5GfV9gm1bPMsHoQ5SXPI
y3C4GTn30L8La0NyfA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:47 2025 by rpki-client