Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3234203d3e203533323234.roa
File: 3138392e34352e32342e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier: LtwEwaN2gtu9MT6zmbc0b13u9yheCgHGqi7hHwJVZbQ=
Subject key identifier: 9E:4D:D4:7D:98:2D:1C:DE:8C:08:F9:4F:4E:89:DC:C6:C3:77:70:43
Certificate issuer: /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial: 2AE1696137448A41BB0E9A9C0B6CF20814F9A981
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3234203d3e203533323234.roa
Signing time: Mon 13 Mar 2023 17:08:54 +0000
ROA not before: Mon 13 Mar 2023 17:03:54 +0000
ROA not after: Mon 11 Mar 2024 17:08:54 +0000
asID: 53224
IP address blocks: 189.45.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e1:69:61:37:44:8a:41:bb:0e:9a:9c:0b:6c:f2:08:14:f9:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Validity
Not Before: Mar 13 17:03:54 2023 GMT
Not After : Mar 11 17:08:54 2024 GMT
Subject: CN=9E4DD47D982D1CDE8C08F94F4E89DCC6C3777043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:4c:d1:8d:21:88:f6:ec:f4:12:7e:03:c6:
55:36:2d:bb:8f:9a:32:52:a4:b0:b1:41:b5:61:cd:
19:89:52:4a:f0:4e:51:45:10:44:2c:7a:83:80:ca:
3d:1f:e9:39:2e:3a:e8:c0:bd:7f:20:35:8f:9f:b3:
8d:0b:db:68:27:d0:ef:a4:bd:2a:07:c6:b7:10:37:
a6:ee:63:27:80:57:ff:0b:08:8f:9d:68:3a:36:d8:
10:2f:c2:a4:f1:0d:64:99:8e:80:8b:79:9f:8f:8d:
5c:bd:36:92:2d:b9:21:21:8a:79:e6:18:c5:b3:34:
53:86:f9:d3:67:60:0a:cc:be:89:3d:b8:21:8d:e1:
db:19:2c:3c:7f:35:f5:74:a0:f4:da:d1:d8:8a:13:
0d:ab:4e:e4:44:69:9c:18:df:c6:29:87:2a:6d:05:
74:aa:b3:75:ff:ec:ba:96:e5:be:39:87:c3:3b:b7:
47:1f:79:86:e8:79:d1:dc:20:23:3b:16:be:07:ff:
ad:ae:53:dd:a9:e2:11:bd:5e:2f:f4:cc:99:7f:2c:
07:35:9c:52:5c:86:9d:99:0b:ca:76:fa:bf:10:aa:
a8:02:cd:d6:54:2b:a8:bb:9d:f4:4b:8a:dd:89:3f:
85:cd:f7:25:08:69:e1:7f:f5:7e:04:69:dd:d0:d7:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:D4:7D:98:2D:1C:DE:8C:08:F9:4F:4E:89:DC:C6:C3:77:70:43
X509v3 Authority Key Identifier:
keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3234203d3e203533323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.24.0/21
Signature Algorithm: sha256WithRSAEncryption
13:67:5e:cc:b0:18:fe:7e:4b:c7:63:bf:a3:77:52:fd:d5:c7:
19:66:1c:68:4d:e2:d1:89:69:13:d8:8a:3e:ff:a6:2c:44:0a:
4e:2b:73:7c:e0:14:c9:ef:48:d7:72:10:86:d2:db:ac:71:ad:
34:f3:95:f1:9b:d3:7c:ec:a3:2d:f8:bc:20:1c:1d:8e:6f:93:
6d:41:32:3c:57:32:d8:d4:f6:3f:7d:6f:11:ba:fd:1d:cd:74:
c0:51:d9:49:2f:52:02:65:62:50:66:c7:7e:ef:0d:8f:1a:46:
79:2d:6f:e8:4c:ba:81:8e:92:d8:9c:fe:d1:1e:bd:0e:38:6a:
25:0e:8c:88:74:e7:04:e6:cc:71:9e:43:98:53:6e:13:b2:e6:
73:54:20:a6:fb:da:1a:9e:52:7d:57:c6:08:e1:85:08:d1:e2:
fd:c8:ac:3c:72:99:4f:b4:50:8e:ac:ca:23:d7:86:32:45:99:
64:83:b7:a1:99:95:a1:70:f4:d7:0d:47:11:9f:cb:25:36:6a:
d7:f5:50:b0:d6:3e:0d:58:8f:3b:db:22:bd:a5:d3:18:84:4c:
94:83:23:f3:94:d5:3c:3f:65:2a:c8:0f:6c:a5:99:b3:85:65:
2f:a4:f8:54:d8:62:49:3e:01:c8:e4:00:dc:1a:1f:76:6d:e6:
66:0d:cb:a4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKuFpYTdEikG7DpqcC2zyCBT5qYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMTMxNzAzNTRaFw0yNDAzMTExNzA4NTRaMDMxMTAvBgNV
BAMTKDlFNERENDdEOTgyRDFDREU4QzA4Rjk0RjRFODlEQ0M2QzM3NzcwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOekzRjSGI9uz0En4DxlU2LbuP
mjJSpLCxQbVhzRmJUkrwTlFFEEQseoOAyj0f6TkuOujAvX8gNY+fs40L22gn0O+k
vSoHxrcQN6buYyeAV/8LCI+daDo22BAvwqTxDWSZjoCLeZ+PjVy9NpItuSEhinnm
GMWzNFOG+dNnYArMvok9uCGN4dsZLDx/NfV0oPTa0diKEw2rTuREaZwY38Yphypt
BXSqs3X/7LqW5b45h8M7t0cfeYboedHcICM7Fr4H/62uU92p4hG9Xi/0zJl/LAc1
nFJchp2ZC8p2+r8QqqgCzdZUK6i7nfRLit2JP4XN9yUIaeF/9X4Ead3Q19yXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnk3UfZgtHN6MCPlPToncxsN3cEMwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMzMy
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA70tGDANBgkqhkiG9w0BAQsFAAOCAQEAE2dezLAY/n5L
x2O/o3dS/dXHGWYcaE3i0YlpE9iKPv+mLEQKTitzfOAUye9I13IQhtLbrHGtNPOV
8ZvTfOyjLfi8IBwdjm+TbUEyPFcy2NT2P31vEbr9Hc10wFHZSS9SAmViUGbHfu8N
jxpGeS1v6Ey6gY6S2Jz+0R69DjhqJQ6MiHTnBObMcZ5DmFNuE7Lmc1QgpvvaGp5S
fVfGCOGFCNHi/cisPHKZT7RQjqzKI9eGMkWZZIO3oZmVoXD01w1HEZ/LJTZq1/VQ
sNY+DViPO9sivaXTGIRMlIMj85TVPD9lKsgPbKWZs4VlL6T4VNhiST4ByOQA3Bof
dm3mZg3LpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org