Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
File: 3137392e39362e3234302e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: AKehSECZz96KHgf/p9s6MTKkwGhKr39r/D7vonTzcSs=
Subject key identifier: 38:EA:33:CA:C9:61:6E:7E:A5:7F:AC:F9:6B:56:9B:DE:4A:F3:E6:02
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 74DCEFC701278D5AABD39680CDE80887FD6EAA97
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:10 +0000
ROA not before: Tue 12 Mar 2024 19:46:10 +0000
ROA not after: Tue 11 Mar 2025 19:51:10 +0000
asID: 28220
IP address blocks: 179.96.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:dc:ef:c7:01:27:8d:5a:ab:d3:96:80:cd:e8:08:87:fd:6e:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:10 2024 GMT
Not After : Mar 11 19:51:10 2025 GMT
Subject: CN=38EA33CAC9616E7EA57FACF96B569BDE4AF3E602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:61:0c:67:d7:d6:b2:86:a6:da:06:61:bd:
db:c8:fe:25:04:3a:4f:92:f5:7e:6e:6b:d9:38:c5:
ba:0f:54:d3:bf:46:0f:98:99:34:f5:8c:f2:0f:97:
1d:99:35:5b:25:41:30:5c:99:ff:c6:8e:d0:ed:d4:
41:96:f7:48:d5:09:26:95:b3:1b:86:cc:6e:d5:2c:
cd:7a:92:30:81:a8:7c:f1:31:c8:29:75:54:21:36:
14:52:25:08:dd:44:30:24:ee:3c:cc:59:5f:ad:77:
bf:a6:bf:8b:10:a3:85:94:61:b9:63:99:c7:37:b6:
66:5c:3a:90:80:fd:61:7c:2c:13:a6:02:75:7f:7c:
1a:c9:e7:09:72:27:35:92:1d:e5:e2:54:23:95:12:
53:ab:40:b4:0e:d9:d4:b1:90:7c:0f:02:76:01:e2:
07:b6:47:b6:e5:7f:f0:85:61:4c:c4:5c:f7:77:25:
5e:d0:76:b3:5f:09:3e:68:6f:25:c2:53:41:f7:fa:
9d:98:79:2c:7b:40:46:12:a0:e3:6e:65:29:94:9b:
1a:c9:75:bd:b6:da:86:78:6d:9d:bd:c7:1b:1c:57:
b2:2c:6b:4b:d1:5d:85:7e:14:a6:9f:7c:1e:63:63:
3c:66:60:15:3f:57:95:20:e1:23:a4:65:3e:27:8a:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:33:CA:C9:61:6E:7E:A5:7F:AC:F9:6B:56:9B:DE:4A:F3:E6:02
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.96.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:8b:73:79:75:50:38:27:6b:4d:07:5f:8e:aa:e2:bf:67:9c:
bf:25:bf:94:35:33:f5:7a:a9:fa:4d:47:ed:73:d6:f0:eb:97:
c3:10:b1:ca:b0:4d:f6:59:16:e0:0e:f7:5f:66:db:3e:b3:15:
d5:0e:3a:a7:ce:04:c0:f1:46:e4:aa:b4:0e:bf:7e:36:84:d7:
32:11:a5:37:c2:9d:05:4e:9a:cc:fd:e4:2b:a9:82:38:b2:48:
11:c1:ae:6c:35:39:fa:37:57:78:d8:fc:60:9f:1e:d9:ff:b5:
d8:d9:59:3b:44:9c:53:d4:f6:01:ef:f6:d7:dc:0e:27:d5:80:
5d:57:4b:08:38:7d:6a:6b:f8:95:b1:61:ec:1b:df:d0:90:14:
b3:5d:7f:e9:c9:41:d9:26:de:5d:3c:0d:be:b7:6f:ce:fa:28:
11:40:7b:e2:70:ca:28:26:12:ea:fe:65:bc:8e:8c:56:40:43:
ec:0f:3c:8e:c8:1f:f5:32:6d:d7:c7:f4:4b:3f:73:70:47:18:
e1:18:a0:fd:37:59:3e:9c:73:aa:96:83:9f:ca:b3:00:98:a7:
de:57:df:c0:c5:c1:c0:90:27:48:cc:11:05:8f:65:22:c9:02:
fe:97:c5:a9:2d:13:fe:eb:36:71:5d:b1:78:1d:2f:90:93:96:
d7:52:2b:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdNzvxwEnjVqr05aAzegIh/1uqpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTBaFw0yNTAzMTExOTUxMTBaMDMxMTAvBgNV
BAMTKDM4RUEzM0NBQzk2MTZFN0VBNTdGQUNGOTZCNTY5QkRFNEFGM0U2MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuGEMZ9fWsoam2gZhvdvI/iUE
Ok+S9X5ua9k4xboPVNO/Rg+YmTT1jPIPlx2ZNVslQTBcmf/GjtDt1EGW90jVCSaV
sxuGzG7VLM16kjCBqHzxMcgpdVQhNhRSJQjdRDAk7jzMWV+td7+mv4sQo4WUYblj
mcc3tmZcOpCA/WF8LBOmAnV/fBrJ5wlyJzWSHeXiVCOVElOrQLQO2dSxkHwPAnYB
4ge2R7blf/CFYUzEXPd3JV7QdrNfCT5obyXCU0H3+p2YeSx7QEYSoONuZSmUmxrJ
db222oZ4bZ29xxscV7Isa0vRXYV+FKaffB5jYzxmYBU/V5Ug4SOkZT4nivdFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOOozyslhbn6lf6z5a1ab3krz5gIwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzNzM5MmUzOTM2MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEs2DwMA0GCSqGSIb3DQEBCwUAA4IBAQAKi3N5dVA4
J2tNB1+OquK/Z5y/Jb+UNTP1eqn6TUftc9bw65fDELHKsE32WRbgDvdfZts+sxXV
DjqnzgTA8UbkqrQOv342hNcyEaU3wp0FTprM/eQrqYI4skgRwa5sNTn6N1d42Pxg
nx7Z/7XY2Vk7RJxT1PYB7/bX3A4n1YBdV0sIOH1qa/iVsWHsG9/QkBSzXX/pyUHZ
Jt5dPA2+t2/O+igRQHvicMooJhLq/mW8joxWQEPsDzyOyB/1Mm3Xx/RLP3NwRxjh
GKD9N1k+nHOqloOfyrMAmKfeV9/AxcHAkCdIzBEFj2UiyQL+l8WpLRP+6zZxXbF4
HS+Qk5bXUitF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org