Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
File: 3137392e39362e3234302e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: zOSSrvM5DWGDj8YlScW/0Ob524XY1i7IAY57k4C6F80=
Subject key identifier: 5D:B5:66:F2:BD:CC:D2:E7:A5:28:82:94:E1:AA:C5:F4:06:01:49:8E
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 5B65AAB8E463E7774BA524B99E12D0181571F548
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:26 +0000
ROA not before: Mon 08 Apr 2024 20:00:26 +0000
ROA not after: Mon 07 Apr 2025 20:05:26 +0000
asID: 28220
IP address blocks: 179.96.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:65:aa:b8:e4:63:e7:77:4b:a5:24:b9:9e:12:d0:18:15:71:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:26 2024 GMT
Not After : Apr 7 20:05:26 2025 GMT
Subject: CN=5DB566F2BDCCD2E7A5288294E1AAC5F40601498E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:1b:ed:a4:e2:88:03:c4:28:c2:ac:a9:a5:
d5:0d:16:5a:7f:3f:cf:a8:db:fe:a7:19:eb:08:0a:
12:cc:e7:99:f2:dd:67:e0:90:24:43:9f:70:0b:03:
51:b8:ea:73:32:4d:2b:65:ff:e7:62:9d:52:3f:2d:
8c:3f:37:6e:8b:7f:a6:0d:5b:30:53:2a:30:22:e7:
d6:32:23:cd:28:21:26:a7:5e:d4:ca:08:5b:4d:8c:
99:4d:c3:db:b5:b9:31:d1:80:48:5f:ed:7a:7c:0d:
3c:bc:8f:ce:4e:ef:6d:05:da:05:c6:b3:0b:60:ad:
ee:50:68:bc:ee:c9:9d:0f:5c:7f:cf:ce:30:0c:c1:
a8:6c:39:d3:ea:32:44:53:9d:0a:a3:17:f2:6c:6f:
48:83:a5:4c:af:19:27:31:46:ea:5b:3e:0d:b4:22:
7f:d2:5c:c6:17:df:f2:03:7c:73:4f:7b:c6:68:04:
9b:c8:ba:72:4f:5e:59:3b:62:d6:cc:3d:bf:5f:ba:
70:9c:79:41:be:c9:43:e4:07:93:61:8c:ff:23:e2:
b8:4f:80:9e:21:f0:9f:88:d7:72:8d:8f:64:08:92:
16:f3:32:fe:23:f3:e6:dd:dd:ea:db:39:30:4d:10:
b4:0f:90:05:bd:1a:58:fa:45:d5:d2:7d:c8:77:07:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:66:F2:BD:CC:D2:E7:A5:28:82:94:E1:AA:C5:F4:06:01:49:8E
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3234302e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.96.240.0/20
Signature Algorithm: sha256WithRSAEncryption
90:93:6a:83:aa:6a:07:1e:ac:8e:e9:70:c1:4d:b2:dd:54:e4:
17:41:5e:5b:48:17:0f:00:2b:c3:19:51:7e:59:01:01:33:c9:
02:ed:9e:97:13:3d:35:a4:d8:68:9f:a8:aa:cd:5f:4b:82:a9:
cf:2e:7a:11:a7:37:56:d8:a2:8d:4b:5e:bf:33:01:56:bd:b7:
a3:94:a8:19:5f:43:e4:64:6d:73:b0:bd:9f:0a:fb:e0:e9:bf:
4b:70:16:53:b1:8f:95:7c:68:7e:0e:7e:f8:ae:77:34:fc:df:
2c:d0:83:73:82:f1:42:93:fd:cf:61:66:cd:c8:e0:d3:ca:75:
1e:99:92:06:e3:0f:a5:40:37:7c:ec:e7:4b:46:bb:ad:6a:72:
0d:b5:42:5f:e6:05:65:01:38:70:74:6b:6c:b5:d4:a7:60:1a:
b8:0f:24:1d:8a:88:5c:48:3b:b0:91:db:f5:91:17:5e:31:8e:
73:f3:df:7e:62:81:86:b7:7b:7e:23:9f:f2:75:79:32:3f:2c:
e4:cf:58:c4:f2:7d:a7:f8:6c:f3:c4:7e:d1:ca:28:b6:9a:aa:
94:f9:cd:f4:13:e9:b5:58:2d:3f:99:d4:2d:14:bf:e9:b7:17:
ec:5f:80:3e:fa:b2:c4:b8:86:ab:91:81:23:17:76:bc:bd:fb:
4c:c6:4d:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW2WquORj53dLpSS5nhLQGBVx9UgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjZaFw0yNTA0MDcyMDA1MjZaMDMxMTAvBgNV
BAMTKDVEQjU2NkYyQkRDQ0QyRTdBNTI4ODI5NEUxQUFDNUY0MDYwMTQ5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZkhvtpOKIA8QowqyppdUNFlp/
P8+o2/6nGesIChLM55ny3WfgkCRDn3ALA1G46nMyTStl/+dinVI/LYw/N26Lf6YN
WzBTKjAi59YyI80oISanXtTKCFtNjJlNw9u1uTHRgEhf7Xp8DTy8j85O720F2gXG
swtgre5QaLzuyZ0PXH/PzjAMwahsOdPqMkRTnQqjF/Jsb0iDpUyvGScxRupbPg20
In/SXMYX3/IDfHNPe8ZoBJvIunJPXlk7YtbMPb9funCceUG+yUPkB5NhjP8j4rhP
gJ4h8J+I13KNj2QIkhbzMv4j8+bd3erbOTBNELQPkAW9Glj6RdXSfch3B+gtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXbVm8r3M0uelKIKU4arF9AYBSY4wHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzNzM5MmUzOTM2MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEs2DwMA0GCSqGSIb3DQEBCwUAA4IBAQCQk2qDqmoH
HqyO6XDBTbLdVOQXQV5bSBcPACvDGVF+WQEBM8kC7Z6XEz01pNhon6iqzV9LgqnP
LnoRpzdW2KKNS16/MwFWvbejlKgZX0PkZG1zsL2fCvvg6b9LcBZTsY+VfGh+Dn74
rnc0/N8s0INzgvFCk/3PYWbNyODTynUemZIG4w+lQDd87OdLRrutanINtUJf5gVl
AThwdGtstdSnYBq4DyQdiohcSDuwkdv1kRdeMY5z899+YoGGt3t+I5/ydXkyPyzk
z1jE8n2n+GzzxH7Ryii2mqqU+c30E+m1WC0/mdQtFL/ptxfsX4A++rLEuIarkYEj
F3a8vftMxk1d
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:53 2025 by rpki-client