Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137302e38322e39322e302f32322d3232203d3e203238323230.roa
File: 3137302e38322e39322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: cfHHDZRFVZ+6KNOLveXZv85rszy/ZUFm1KlAwFQHYJM=
Subject key identifier: 34:A5:84:AF:13:FB:81:31:9B:00:D8:FB:BD:B7:2C:BF:EF:44:5D:9B
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 274415B467F0FB9CE3A063DEA16E3BDAFCA4D9BD
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137302e38322e39322e302f32322d3232203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:12 +0000
ROA not before: Mon 08 Apr 2024 20:00:12 +0000
ROA not after: Mon 07 Apr 2025 20:05:12 +0000
asID: 28220
IP address blocks: 170.82.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:44:15:b4:67:f0:fb:9c:e3:a0:63:de:a1:6e:3b:da:fc:a4:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:12 2024 GMT
Not After : Apr 7 20:05:12 2025 GMT
Subject: CN=34A584AF13FB81319B00D8FBBDB72CBFEF445D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:05:e3:d9:1e:46:a8:fd:42:f4:22:aa:f7:
24:3f:c2:bd:b1:3e:3c:ec:43:f8:4f:cf:3c:16:29:
eb:20:20:60:9f:70:1a:b6:28:10:b1:07:90:2b:f2:
78:18:bb:ad:50:81:3d:4a:46:b6:9b:f7:0c:6f:02:
a1:f3:8a:07:70:eb:03:ee:81:a5:b6:0a:6e:b1:24:
50:46:69:de:85:de:13:d6:94:a1:ee:11:fa:4d:20:
79:9c:ec:c3:7c:da:ed:a0:fa:e0:25:01:29:48:a8:
26:96:1f:db:84:d6:a3:45:72:24:80:46:30:8c:b3:
3b:5f:c7:2c:49:64:fb:dd:d4:10:6d:b0:0d:2a:dc:
cf:67:c1:dd:ca:75:af:f4:2d:01:2a:3c:6b:b4:dc:
06:ac:12:1f:0a:5d:bc:a6:5d:bb:ea:cc:15:9a:40:
95:34:0a:87:b8:54:e2:64:d4:11:61:4c:b3:a0:db:
0a:67:08:fb:a3:e3:46:bc:82:75:79:d6:0f:bc:58:
40:3f:e2:b0:c1:21:a4:80:47:03:69:d4:e6:39:ba:
54:2a:d3:93:0d:5a:9c:79:89:d5:30:b2:47:6c:aa:
ef:1f:82:bf:ad:1e:2d:92:40:81:2a:c9:88:1b:d9:
a1:9e:c0:b5:7e:ee:cb:ca:77:7c:60:f1:34:01:41:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:84:AF:13:FB:81:31:9B:00:D8:FB:BD:B7:2C:BF:EF:44:5D:9B
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137302e38322e39322e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.92.0/22
Signature Algorithm: sha256WithRSAEncryption
59:fc:1a:3d:f4:f6:46:eb:a4:6a:4e:4d:4e:c6:96:41:7a:b5:
12:c5:42:da:af:23:e1:3c:2a:38:15:0d:a0:7c:f7:d5:67:4e:
a0:2d:53:01:2e:60:ff:be:5b:49:b7:03:4d:a6:e6:83:67:3a:
61:8a:da:2f:73:8e:ab:eb:a7:e4:eb:bf:8a:da:0d:29:a3:bb:
70:f1:ad:32:ff:55:c6:10:fc:5f:a2:52:7b:ef:45:c1:3a:e1:
8d:c7:fb:b6:b1:75:db:3e:f5:76:15:9e:42:4a:3c:a2:2a:8c:
4b:f5:5c:7a:f0:fb:d9:48:55:76:4c:ac:d9:6b:d2:ce:e9:63:
1e:c4:23:e4:ae:ff:9d:11:13:87:bd:ef:8a:4c:d2:ce:29:66:
66:0b:45:7b:14:de:f8:04:c8:4d:67:b1:ef:ab:41:19:a8:00:
70:be:b0:95:d5:50:ea:b2:62:cf:da:4e:ee:15:d4:ca:4d:8d:
e7:df:9e:b3:5e:83:d8:42:91:fe:95:f3:40:0c:d9:9d:c7:3e:
40:6c:bd:6d:b4:d5:d8:cf:3a:69:e1:2b:9a:31:5c:b8:ab:3e:
b7:ae:0f:cf:a5:dc:9d:31:fb:13:34:a1:d3:42:b3:71:49:41:
fc:68:1f:d7:07:64:10:ab:6e:06:45:71:b7:44:ef:a8:43:30:
22:55:db:08
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ0QVtGfw+5zjoGPeoW472vyk2b0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTJaFw0yNTA0MDcyMDA1MTJaMDMxMTAvBgNV
BAMTKDM0QTU4NEFGMTNGQjgxMzE5QjAwRDhGQkJEQjcyQ0JGRUY0NDVEOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqygXj2R5GqP1C9CKq9yQ/wr2x
PjzsQ/hPzzwWKesgIGCfcBq2KBCxB5Ar8ngYu61QgT1KRrab9wxvAqHzigdw6wPu
gaW2Cm6xJFBGad6F3hPWlKHuEfpNIHmc7MN82u2g+uAlASlIqCaWH9uE1qNFciSA
RjCMsztfxyxJZPvd1BBtsA0q3M9nwd3Kda/0LQEqPGu03AasEh8KXbymXbvqzBWa
QJU0Coe4VOJk1BFhTLOg2wpnCPuj40a8gnV51g+8WEA/4rDBIaSARwNp1OY5ulQq
05MNWpx5idUwskdsqu8fgr+tHi2SQIEqyYgb2aGewLV+7svKd3xg8TQBQRkXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNKWErxP7gTGbANj7vbcsv+9EXZswHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzNzMwMmUzODMyMmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpSXDANBgkqhkiG9w0BAQsFAAOCAQEAWfwaPfT2Ruuk
ak5NTsaWQXq1EsVC2q8j4TwqOBUNoHz31WdOoC1TAS5g/75bSbcDTabmg2c6YYra
L3OOq+un5Ou/itoNKaO7cPGtMv9VxhD8X6JSe+9FwTrhjcf7trF12z71dhWeQko8
oiqMS/VcevD72UhVdkys2WvSzuljHsQj5K7/nRETh73vikzSzilmZgtFexTe+ATI
TWex76tBGagAcL6wldVQ6rJiz9pO7hXUyk2N59+es16D2EKR/pXzQAzZncc+QGy9
bbTV2M86aeErmjFcuKs+t64Pz6XcnTH7EzSh00KzcUlB/Ggf1wdkEKtuBkVxt0Tv
qEMwIlXbCA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:15 2025 by rpki-client