Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323032.roa
File: 3133382e3230342e3232302e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier: gLw54HVUp9ej6Dc8px/umaH3/CWP9qp4aQtgkLTQcrs=
Subject key identifier: 45:BF:1F:8C:8D:D5:53:52:15:6B:10:55:8B:45:A6:D7:F6:9F:13:F3
Certificate issuer: /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial: 5EF07BEF500058151E2C8F2B8A3A520E16320756
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323032.roa
Signing time: Thu 23 Feb 2023 16:51:38 +0000
ROA not before: Thu 23 Feb 2023 16:46:38 +0000
ROA not after: Thu 22 Feb 2024 16:51:38 +0000
asID: 202
IP address blocks: 138.204.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f0:7b:ef:50:00:58:15:1e:2c:8f:2b:8a:3a:52:0e:16:32:07:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Validity
Not Before: Feb 23 16:46:38 2023 GMT
Not After : Feb 22 16:51:38 2024 GMT
Subject: CN=45BF1F8C8DD55352156B10558B45A6D7F69F13F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:9a:8f:c4:6e:10:f2:b9:25:ef:83:5a:91:
4a:2c:4d:00:3a:d7:67:1b:b9:b5:ee:05:5b:89:fe:
63:52:89:f6:8b:eb:1c:64:95:dd:fe:c0:fa:40:ca:
67:aa:45:64:a6:78:9f:c0:ca:7e:7d:7a:27:78:75:
55:60:00:d6:6f:46:61:b4:29:14:c1:4b:82:27:86:
d2:3b:3b:b0:14:ce:a3:7a:19:62:c8:39:24:ca:03:
ed:2b:93:af:92:af:3a:dd:6c:f6:19:6a:42:05:66:
a7:32:22:61:9b:12:c3:3b:50:cc:7b:78:9c:bc:60:
48:65:33:44:4f:c3:fa:7b:57:af:19:4d:4d:2e:7f:
a0:00:f7:79:42:5e:d2:26:0c:67:dc:1a:c4:e8:5f:
d5:8e:f9:15:f3:37:ab:3a:c3:a0:0b:9f:14:6a:64:
c8:29:c0:9a:96:b1:95:6d:b8:e3:ec:65:bd:37:6f:
bf:ae:bf:64:21:15:3e:9b:4c:ad:78:22:b0:1d:65:
b1:23:3c:51:b8:b4:69:f2:b1:f7:12:cf:46:63:05:
91:9b:22:57:59:85:13:dd:08:d8:0b:56:89:d2:6b:
82:9e:8d:35:b4:c4:99:85:91:12:13:9f:ab:fd:e4:
6d:40:b7:f1:58:c9:1f:44:20:1b:23:2c:f4:11:0a:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BF:1F:8C:8D:D5:53:52:15:6B:10:55:8B:45:A6:D7:F6:9F:13:F3
X509v3 Authority Key Identifier:
keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:ce:de:10:cb:b6:c3:e7:e9:95:f3:ff:97:0e:ed:d9:9c:56:
5b:0d:a6:16:44:0e:dc:16:4d:2f:f4:2b:01:84:4a:dd:3b:04:
87:a4:1d:cf:6f:eb:89:d1:f5:a6:ab:ba:75:fb:87:1c:d9:98:
4d:7b:b2:c0:89:79:84:6f:78:b5:0e:af:78:32:49:af:d5:ac:
ad:d0:7f:d9:66:a7:df:d5:0b:49:6b:aa:40:36:38:47:25:60:
11:6a:07:32:bf:75:25:40:6a:6d:0e:98:2c:57:a8:35:ef:df:
79:9b:84:14:47:82:3c:04:2c:c9:1a:6c:49:85:35:86:6c:8f:
c0:29:68:a5:1f:30:cd:bb:04:6f:a8:33:10:9a:9a:81:68:51:
5c:44:53:87:69:8b:2c:da:3f:e7:14:4f:d6:52:70:84:30:16:
15:85:31:67:f2:ec:7c:5f:40:b0:4d:92:eb:d7:0b:20:58:7a:
a8:9f:c4:9f:31:50:31:78:8d:cf:a3:29:ce:18:a7:99:5b:48:
7e:d5:c0:59:aa:62:89:14:19:4b:26:8b:ee:61:ed:c8:7f:3e:
ff:ee:0c:f4:17:c7:f0:1f:63:06:3c:3f:60:6d:53:3e:b2:c9:
96:0d:40:33:b6:26:c2:ad:c2:84:8e:66:d3:10:d1:52:6a:f2:
ab:6e:8f:e8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXvB771AAWBUeLI8rijpSDhYyB1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2QzEwODdCQjFBNTI2MENCMzJFNDVGQkFCMDVCRkM2
MTE3N0RERTAeFw0yMzAyMjMxNjQ2MzhaFw0yNDAyMjIxNjUxMzhaMDMxMTAvBgNV
BAMTKDQ1QkYxRjhDOERENTUzNTIxNTZCMTA1NThCNDVBNkQ3RjY5RjEzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eZqPxG4Q8rkl74NakUosTQA6
12cbubXuBVuJ/mNSifaL6xxkld3+wPpAymeqRWSmeJ/Ayn59eid4dVVgANZvRmG0
KRTBS4InhtI7O7AUzqN6GWLIOSTKA+0rk6+SrzrdbPYZakIFZqcyImGbEsM7UMx7
eJy8YEhlM0RPw/p7V68ZTU0uf6AA93lCXtImDGfcGsToX9WO+RXzN6s6w6ALnxRq
ZMgpwJqWsZVtuOPsZb03b7+uv2QhFT6bTK14IrAdZbEjPFG4tGnysfcSz0ZjBZGb
IldZhRPdCNgLVonSa4KejTW0xJmFkRITn6v95G1At/FYyR9EIBsjLPQRCsNpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURb8fjI3VU1IVaxBVi0Wm1/afE/MwHwYDVR0j
BBgwFoAU8WwQh7saUmDLMuRfurBb/GEXfd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9GMTZDMTA4N0JCMUE1MjYwQ0IzMkU0NUZCQUIwNUJGQzYxMTc3RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxNkMxMDg3QkIxQTUyNjBD
QjMyRTQ1RkJBQjA1QkZDNjExNzdEREUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAorM3DANBgkqhkiG9w0BAQsFAAOCAQEA087eEMu2w+fp
lfP/lw7t2ZxWWw2mFkQO3BZNL/QrAYRK3TsEh6Qdz2/ridH1pqu6dfuHHNmYTXuy
wIl5hG94tQ6veDJJr9WsrdB/2Wan39ULSWuqQDY4RyVgEWoHMr91JUBqbQ6YLFeo
Ne/feZuEFEeCPAQsyRpsSYU1hmyPwClopR8wzbsEb6gzEJqagWhRXERTh2mLLNo/
5xRP1lJwhDAWFYUxZ/LsfF9AsE2S69cLIFh6qJ/EnzFQMXiNz6MpzhinmVtIftXA
WapiiRQZSyaL7mHtyH8+/+4M9BfH8B9jBjw/YG1TPrLJlg1AM7Ymwq3ChI5m0xDR
Umryq26P6A==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:48:07 2025 by rpki-client