Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32332d3233203d3e203533313533.roa
File: 3133382e3230342e3232302e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier: Gd+E8ix4sPPY0WR1j8ZtAs0KDbLeIf2stGD+/sAsm0Q=
Subject key identifier: 73:36:3E:AB:4B:50:C8:2A:1F:FB:E2:73:B1:7A:29:FB:A4:13:97:F5
Certificate issuer: /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial: 1D5D52E3A48233D2C89483161A836B561C2076FC
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32332d3233203d3e203533313533.roa
Signing time: Fri 24 May 2024 14:20:01 +0000
ROA not before: Fri 24 May 2024 14:15:01 +0000
ROA not after: Fri 23 May 2025 14:20:01 +0000
asID: 53153
IP address blocks: 138.204.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5d:52:e3:a4:82:33:d2:c8:94:83:16:1a:83:6b:56:1c:20:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
Validity
Not Before: May 24 14:15:01 2024 GMT
Not After : May 23 14:20:01 2025 GMT
Subject: CN=73363EAB4B50C82A1FFBE273B17A29FBA41397F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:54:67:56:b2:e4:9d:d4:fc:a5:b1:4d:97:
7a:7a:2e:bc:43:67:78:7e:77:fd:ba:32:a4:e1:58:
6f:88:42:41:b9:7f:98:39:b9:61:a8:41:0a:63:8d:
17:b4:ba:3f:3b:5e:5c:99:e1:b1:78:94:0b:35:a5:
3b:3e:75:d0:fd:ff:c3:6c:3c:29:75:40:cd:16:1f:
66:8f:c2:cf:05:7f:51:f1:aa:17:88:a3:34:51:cb:
79:44:7f:e8:d9:3a:dd:f6:31:3c:b0:28:b0:96:39:
f2:a6:3f:7e:b0:6b:ce:a6:50:fd:cd:26:ae:5d:55:
7a:0d:2e:0d:ca:41:15:55:1a:07:8c:d3:ab:3a:d8:
14:19:b8:46:43:30:f3:89:04:fe:ea:c1:58:59:c3:
81:23:38:10:a4:e9:40:96:36:d5:61:70:37:fa:bf:
dd:95:ba:05:49:e3:6d:d8:da:7c:81:5f:73:8a:ab:
ed:c6:4b:df:5a:8e:39:ec:a2:31:a8:6a:c2:38:fa:
9f:4c:e4:54:20:85:c0:d7:55:88:cf:cc:ae:65:49:
6e:6a:d0:03:29:f9:de:51:de:95:8e:32:7e:91:fd:
fe:31:17:a2:bc:1a:3c:57:05:96:df:38:65:5b:29:
a2:c8:32:df:41:f4:19:f1:17:57:79:7b:7d:2a:e6:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:3E:AB:4B:50:C8:2A:1F:FB:E2:73:B1:7A:29:FB:A4:13:97:F5
X509v3 Authority Key Identifier:
keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32332d3233203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/23
Signature Algorithm: sha256WithRSAEncryption
66:31:eb:b3:af:98:7d:d3:f7:25:81:9e:10:72:2c:ad:65:4e:
ed:84:68:8b:bb:2e:71:4e:9c:d0:53:78:ac:6f:b6:7c:88:15:
e6:ed:a7:59:7b:28:f9:36:ba:65:80:01:59:87:14:b6:55:cf:
78:b9:ce:7b:82:5d:fa:48:91:91:b3:66:d4:74:89:0e:19:0f:
09:da:1b:77:e9:bc:1f:39:2e:be:88:15:8c:e4:06:f4:21:57:
80:c7:79:07:65:b9:a7:9f:f3:db:21:9a:cb:7c:1c:05:d0:03:
3b:1d:10:03:aa:76:7e:2c:20:30:cb:4b:7a:7b:e3:fa:95:8c:
2d:43:4c:59:93:e3:25:5c:0d:76:25:b8:7c:b8:c0:1b:d5:07:
d3:ce:2b:4c:85:4e:78:27:d5:13:76:e3:fc:0e:7d:90:5b:e9:
17:c4:27:ea:73:76:7c:57:c2:01:14:08:09:8a:52:ac:26:00:
fd:ee:c0:6b:b6:5c:0e:e0:9b:26:5b:18:83:f7:8a:8b:0e:a4:
2a:fe:1f:75:c3:c3:9d:eb:a5:ee:43:67:e6:d7:b6:f9:04:da:
4c:af:e4:85:17:87:0f:23:eb:3e:b0:b8:2d:cf:eb:98:4f:73:
fb:65:1a:94:59:2b:73:df:56:9a:ab:51:01:99:76:39:72:e8:
e0:6f:c1:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHV1S46SCM9LIlIMWGoNrVhwgdvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzNkE0QTI1Nzk5MTQyODY0RURGOTdCMTAwMzkzRDUw
RDE2Mzc0MjAeFw0yNDA1MjQxNDE1MDFaFw0yNTA1MjMxNDIwMDFaMDMxMTAvBgNV
BAMTKDczMzYzRUFCNEI1MEM4MkExRkZCRTI3M0IxN0EyOUZCQTQxMzk3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg01RnVrLkndT8pbFNl3p6LrxD
Z3h+d/26MqThWG+IQkG5f5g5uWGoQQpjjRe0uj87XlyZ4bF4lAs1pTs+ddD9/8Ns
PCl1QM0WH2aPws8Ff1HxqheIozRRy3lEf+jZOt32MTywKLCWOfKmP36wa86mUP3N
Jq5dVXoNLg3KQRVVGgeM06s62BQZuEZDMPOJBP7qwVhZw4EjOBCk6UCWNtVhcDf6
v92VugVJ423Y2nyBX3OKq+3GS99ajjnsojGoasI4+p9M5FQghcDXVYjPzK5lSW5q
0AMp+d5R3pWOMn6R/f4xF6K8GjxXBZbfOGVbKaLIMt9B9BnxF1d5e30q5icbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUczY+q0tQyCof++JzsXop+6QTl/UwHwYDVR0j
BBgwFoAUlTakoleZFChk7fl7EAOT1Q0WN0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC85NTM2QTRBMjU3OTkxNDI4NjRFREY5N0IxMDAzOTNENTBEMTYzNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MzZBNEEyNTc5OTE0Mjg2
NEVERjk3QjEwMDM5M0Q1MEQxNjM3NDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKzNwwDQYJKoZIhvcNAQELBQADggEBAGYx67Ov
mH3T9yWBnhByLK1lTu2EaIu7LnFOnNBTeKxvtnyIFebtp1l7KPk2umWAAVmHFLZV
z3i5znuCXfpIkZGzZtR0iQ4ZDwnaG3fpvB85Lr6IFYzkBvQhV4DHeQdluaef89sh
mst8HAXQAzsdEAOqdn4sIDDLS3p74/qVjC1DTFmT4yVcDXYluHy4wBvVB9POK0yF
Tngn1RN24/wOfZBb6RfEJ+pzdnxXwgEUCAmKUqwmAP3uwGu2XA7gmyZbGIP3iosO
pCr+H3XDw53rpe5DZ+bXtvkE2kyv5IUXhw8j6z6wuC3P65hPc/tlGpRZK3PfVpqr
UQGZdjly6OBvwWs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:55 2025 by rpki-client