Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203238323230.roa
File: 3138392e34352e31362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: OM9qD4BhhAE1ntvsxaiiBjvEpvNlV/k2I5w0nMOoFtk=
Subject key identifier: 42:46:D8:B8:D2:8A:EA:35:62:C3:82:A7:0C:EC:52:A9:45:D4:A5:FA
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 23B78A42D7F7389C819BD26D05019E3A41BAA145
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203238323230.roa
Signing time: Wed 13 Mar 2024 00:24:36 +0000
ROA not before: Wed 13 Mar 2024 00:19:36 +0000
ROA not after: Wed 12 Mar 2025 00:24:36 +0000
asID: 28220
IP address blocks: 189.45.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b7:8a:42:d7:f7:38:9c:81:9b:d2:6d:05:01:9e:3a:41:ba:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 13 00:19:36 2024 GMT
Not After : Mar 12 00:24:36 2025 GMT
Subject: CN=4246D8B8D28AEA3562C382A70CEC52A945D4A5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:c0:d1:f7:e7:8a:91:f0:8d:7b:43:f0:df:
64:27:29:ad:fa:95:08:5a:ab:72:16:95:0f:8e:2e:
df:12:17:a5:e0:af:a1:ec:37:c3:35:f7:0c:20:ec:
f9:ac:6d:ac:c2:e3:ab:53:89:bb:81:f2:4d:f4:6f:
8c:fb:30:b4:60:28:36:29:20:1d:a8:42:9a:57:a0:
fd:7a:7e:8c:d8:15:c7:0e:69:fe:b9:62:5b:d7:a7:
36:e5:e6:35:29:18:f9:bd:1c:e9:f4:79:25:e0:60:
6b:29:29:73:46:7b:cb:a8:5e:16:c1:fe:21:47:fb:
91:f0:72:a8:20:87:66:de:4b:c6:87:72:7c:a6:6a:
68:a2:b2:7d:00:29:a6:1d:2e:c9:68:a6:ee:a9:03:
a0:f8:2f:a1:7e:ad:33:40:c9:6d:05:e8:84:50:b8:
12:43:17:25:cf:78:1a:f1:bc:31:ea:6c:19:18:25:
17:00:92:bf:5e:92:87:2c:e5:0d:9a:70:f9:cb:9e:
46:a6:e9:31:47:28:16:24:9f:90:7f:c8:00:07:d3:
f9:a1:f5:ea:c5:4b:3d:9e:d0:9c:23:7d:c1:b8:cd:
47:61:e4:17:59:86:0f:ac:28:44:5c:71:c7:13:92:
c6:09:1a:94:d2:b9:13:da:7d:c0:33:ec:97:f8:96:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:D8:B8:D2:8A:EA:35:62:C3:82:A7:0C:EC:52:A9:45:D4:A5:FA
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.16.0/20
Signature Algorithm: sha256WithRSAEncryption
75:50:78:c0:4b:df:1c:2b:09:e4:aa:18:63:f5:23:91:92:f4:
24:41:f1:8c:0f:03:df:fd:b9:3f:d7:c3:0e:66:a2:2b:d8:ae:
3b:67:be:b0:d3:f1:3d:57:70:1b:ee:ef:e7:cb:76:55:fe:ae:
42:ae:0e:bd:ba:19:ec:e6:e7:e6:7a:83:7c:73:74:a3:b6:28:
38:bb:3d:91:6b:07:79:34:c7:62:f3:ce:1a:f2:0b:94:5d:e7:
b3:b9:c7:ed:2c:fe:52:0f:e6:8b:14:a6:9e:94:57:55:24:85:
ca:72:1e:26:79:0c:14:00:2b:5e:74:9f:87:eb:df:39:31:50:
7b:0f:58:4b:78:84:36:c7:f1:75:93:dc:1a:0b:6a:5c:0c:cb:
4d:80:51:1b:26:e8:95:3f:8f:d5:ab:44:7b:03:b0:cc:e9:d3:
ec:3a:ba:92:f2:09:7b:7c:71:a1:5d:af:54:78:15:f0:a4:d7:
61:df:88:2c:54:6d:f8:a7:db:72:11:94:81:f0:2b:91:17:a8:
ea:7b:5a:21:e2:89:9d:80:8d:f8:f1:24:13:fd:8c:4a:6f:22:
b1:12:b9:9b:e3:53:f1:52:50:ae:21:8d:63:11:d4:e8:15:8c:
8d:e4:8c:bb:62:70:62:fd:9f:5f:a1:cf:b0:26:a5:26:24:9d:
df:fb:81:8c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI7eKQtf3OJyBm9JtBQGeOkG6oUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTMwMDE5MzZaFw0yNTAzMTIwMDI0MzZaMDMxMTAvBgNV
BAMTKDQyNDZEOEI4RDI4QUVBMzU2MkMzODJBNzBDRUM1MkE5NDVENEE1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn48DR9+eKkfCNe0Pw32QnKa36
lQhaq3IWlQ+OLt8SF6Xgr6HsN8M19wwg7PmsbazC46tTibuB8k30b4z7MLRgKDYp
IB2oQppXoP16fozYFccOaf65YlvXpzbl5jUpGPm9HOn0eSXgYGspKXNGe8uoXhbB
/iFH+5Hwcqggh2beS8aHcnymamiisn0AKaYdLslopu6pA6D4L6F+rTNAyW0F6IRQ
uBJDFyXPeBrxvDHqbBkYJRcAkr9ekocs5Q2acPnLnkam6TFHKBYkn5B/yAAH0/mh
9erFSz2e0JwjfcG4zUdh5BdZhg+sKERccccTksYJGpTSuRPafcAz7Jf4lr+/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQkbYuNKK6jViw4KnDOxSqUXUpfowHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0tEDANBgkqhkiG9w0BAQsFAAOCAQEAdVB4wEvfHCsJ
5KoYY/UjkZL0JEHxjA8D3/25P9fDDmaiK9iuO2e+sNPxPVdwG+7v58t2Vf6uQq4O
vboZ7Obn5nqDfHN0o7YoOLs9kWsHeTTHYvPOGvILlF3ns7nH7Sz+Ug/mixSmnpRX
VSSFynIeJnkMFAArXnSfh+vfOTFQew9YS3iENsfxdZPcGgtqXAzLTYBRGybolT+P
1atEewOwzOnT7Dq6kvIJe3xxoV2vVHgV8KTXYd+ILFRt+KfbchGUgfArkReo6nta
IeKJnYCN+PEkE/2MSm8isRK5m+NT8VJQriGNYxHU6BWMjeSMu2JwYv2fX6HPsCal
JiSd3/uBjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org