Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
File: 3133382e302e3130302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: 2LkqJs3m1BTxoksoLi5Vc/SoPQgudLKES5vDTNYzhkw=
Subject key identifier: C2:53:0C:74:73:B6:0A:F3:D9:7D:40:C8:4E:CC:CC:88:C2:8A:9F:5F
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 2137F8B972237946832855D9900382BC7A140191
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:17 +0000
ROA not before: Mon 08 Apr 2024 20:00:17 +0000
ROA not after: Mon 07 Apr 2025 20:05:17 +0000
asID: 28220
IP address blocks: 138.0.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:37:f8:b9:72:23:79:46:83:28:55:d9:90:03:82:bc:7a:14:01:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:17 2024 GMT
Not After : Apr 7 20:05:17 2025 GMT
Subject: CN=C2530C7473B60AF3D97D40C84ECCCC88C28A9F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:06:d7:0d:c2:1f:32:08:10:1a:dc:0f:06:
6f:63:f3:c4:9d:6d:ce:99:6a:84:eb:fb:83:10:9e:
85:7a:f2:84:59:65:84:2e:6e:16:3a:4d:b8:9d:24:
66:8f:82:17:c8:de:ae:0b:2f:ca:8d:85:c0:98:97:
ac:1f:f5:11:c4:45:59:2e:cc:05:cf:7c:bb:8c:5e:
f7:14:97:4f:96:2e:f1:76:03:04:70:11:b8:62:1e:
13:4b:be:dd:7f:d9:46:96:49:30:8c:e4:6d:94:ba:
e2:0a:19:7b:34:ff:16:da:b3:69:78:2f:37:a0:b3:
c8:84:04:84:4a:1f:85:98:ff:ad:5c:64:2c:45:5b:
e6:00:53:6d:50:45:45:b2:f2:c2:de:c5:66:10:ea:
65:0a:0b:c6:83:49:5a:b5:73:ec:e7:25:2f:46:8d:
a0:05:33:96:ba:28:bd:64:d3:e9:58:ba:bd:92:39:
e6:2d:50:a0:82:d0:03:3e:50:bb:2b:b8:34:bb:7d:
91:81:3d:d2:ee:8a:c5:8f:8e:44:be:26:62:ae:30:
f8:c2:8c:3e:90:ce:0d:92:ec:96:b6:07:c4:6c:e9:
1f:6e:15:2a:56:f7:56:28:d0:73:b6:83:77:1b:b7:
cd:7a:cc:37:50:c4:08:73:1a:0c:19:6d:a6:95:4d:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:0C:74:73:B6:0A:F3:D9:7D:40:C8:4E:CC:CC:88:C2:8A:9F:5F
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:a9:c2:af:b1:74:7c:e3:d0:9f:f0:ad:43:c5:f5:73:b3:ae:
39:b7:ba:3f:11:38:c5:73:4d:e9:78:b4:40:f4:81:e8:90:e1:
d4:17:37:1a:0a:bf:1f:06:2e:22:61:7f:5a:88:81:a3:b2:f7:
bb:0f:a9:27:21:22:20:f8:ad:ee:d0:5a:78:f9:cf:b4:56:83:
16:56:38:a0:a3:9c:00:0a:45:08:7a:68:02:34:6f:31:a9:69:
49:74:6d:92:89:57:b0:31:b5:e7:ca:0f:8f:fe:cc:f2:39:dd:
d5:a1:13:43:c4:cb:2a:ff:64:f1:8b:2d:2c:e0:74:66:bc:93:
47:41:3e:a4:07:25:11:43:3d:23:04:9f:64:16:9a:0e:24:e7:
34:5a:94:a7:53:8f:40:ef:a8:ba:6f:b6:07:c0:6f:21:73:80:
03:f0:5e:c9:7c:8d:6c:0a:76:59:3f:a3:6e:5b:58:5f:41:cd:
9a:9f:88:85:e0:74:73:91:99:00:0e:0b:75:a7:a4:ba:fa:98:
8e:7d:37:6d:88:1c:be:65:d3:6c:37:54:43:48:a9:e2:4b:34:
8e:98:09:d5:5f:74:3d:26:56:67:e8:25:c3:bc:85:bb:75:5e:
b1:03:04:96:28:43:85:8e:6d:ca:31:1a:bf:4e:fb:b5:0b:52:
da:d9:88:26
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUITf4uXIjeUaDKFXZkAOCvHoUAZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTdaFw0yNTA0MDcyMDA1MTdaMDMxMTAvBgNV
BAMTKEMyNTMwQzc0NzNCNjBBRjNEOTdENDBDODRFQ0NDQzg4QzI4QTlGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88wbXDcIfMggQGtwPBm9j88Sd
bc6ZaoTr+4MQnoV68oRZZYQubhY6TbidJGaPghfI3q4LL8qNhcCYl6wf9RHERVku
zAXPfLuMXvcUl0+WLvF2AwRwEbhiHhNLvt1/2UaWSTCM5G2UuuIKGXs0/xbas2l4
Lzegs8iEBIRKH4WY/61cZCxFW+YAU21QRUWy8sLexWYQ6mUKC8aDSVq1c+znJS9G
jaAFM5a6KL1k0+lYur2SOeYtUKCC0AM+ULsruDS7fZGBPdLuisWPjkS+JmKuMPjC
jD6Qzg2S7Ja2B8Rs6R9uFSpW91Yo0HO2g3cbt816zDdQxAhzGgwZbaaVTRPjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwlMMdHO2CvPZfUDITszMiMKKn18wHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzMzM4MmUzMDJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAZDANBgkqhkiG9w0BAQsFAAOCAQEAf6nCr7F0fOPQ
n/CtQ8X1c7OuObe6PxE4xXNN6Xi0QPSB6JDh1Bc3Ggq/HwYuImF/WoiBo7L3uw+p
JyEiIPit7tBaePnPtFaDFlY4oKOcAApFCHpoAjRvMalpSXRtkolXsDG158oPj/7M
8jnd1aETQ8TLKv9k8YstLOB0ZryTR0E+pAclEUM9IwSfZBaaDiTnNFqUp1OPQO+o
um+2B8BvIXOAA/BeyXyNbAp2WT+jbltYX0HNmp+IheB0c5GZAA4LdaekuvqYjn03
bYgcvmXTbDdUQ0ip4ks0jpgJ1V90PSZWZ+glw7yFu3VesQMElihDhY5tyjEav077
tQtS2tmIJg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:49 2025 by rpki-client