Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32332d3233203d3e203533313533.roa
File: 3138372e36312e3130382e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier: 8LEVVmLhhRw4HQRptzY0h0bZBRUQkh9Y1b2MOqiJ5nY=
Subject key identifier: E6:59:38:A2:09:71:72:89:9F:18:2B:C8:AC:C8:9A:CE:7A:9F:82:E8
Certificate issuer: /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial: 6A6A6FA7CF26CC353981846FFCBFF50B771D3225
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32332d3233203d3e203533313533.roa
Signing time: Wed 14 Feb 2024 20:33:19 +0000
ROA not before: Wed 14 Feb 2024 20:28:19 +0000
ROA not after: Wed 12 Feb 2025 20:33:19 +0000
asID: 53153
IP address blocks: 187.61.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6a:6f:a7:cf:26:cc:35:39:81:84:6f:fc:bf:f5:0b:77:1d:32:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Validity
Not Before: Feb 14 20:28:19 2024 GMT
Not After : Feb 12 20:33:19 2025 GMT
Subject: CN=E65938A2097172899F182BC8ACC89ACE7A9F82E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:3f:6d:30:a1:68:f2:7f:80:a6:55:0a:a9:
2f:0d:b9:a8:52:b3:d5:ce:8b:c9:68:58:41:55:38:
f0:17:98:64:e5:b7:ea:48:8b:94:d1:6f:50:6b:a4:
2a:2a:7d:90:9e:e9:f6:65:f1:ad:b0:4b:ef:5e:36:
26:af:33:d6:7c:6e:c6:84:23:86:52:37:d6:53:6d:
d4:15:30:b7:9e:0e:e6:d5:86:32:78:e1:2f:f2:ee:
47:c3:48:b1:5d:82:75:fc:f4:d2:67:e2:6a:15:6a:
c5:22:8b:6a:f4:a8:69:11:60:82:89:d2:4e:1c:f7:
22:07:97:d3:3c:2f:9f:b0:e5:92:d8:09:65:14:4d:
a2:1c:1f:d0:53:87:4f:a8:46:1c:fd:ab:43:9c:e9:
f1:f5:fb:1c:e0:0c:22:da:be:60:d9:8d:68:bb:ec:
b1:af:0c:3b:1f:3b:6b:79:1b:1e:44:f1:7a:5a:91:
0a:82:d6:dd:dd:91:a6:90:19:86:4f:be:db:3a:79:
1f:ef:59:a7:ed:6a:cc:33:12:d7:6d:e0:4b:f8:2e:
63:78:a4:d2:87:64:62:da:d9:ba:69:6d:ed:10:2b:
a8:3e:b7:8f:c9:28:45:1c:9b:aa:24:37:c1:34:ac:
b8:42:86:f0:dd:6b:20:ab:c4:64:dd:b2:ef:db:92:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:38:A2:09:71:72:89:9F:18:2B:C8:AC:C8:9A:CE:7A:9F:82:E8
X509v3 Authority Key Identifier:
keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32332d3233203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.108.0/23
Signature Algorithm: sha256WithRSAEncryption
29:36:c5:cb:20:34:2e:72:fd:f0:e3:6d:23:d2:e9:ed:53:da:
82:04:ff:99:ce:20:47:82:f6:23:cf:5b:de:40:ec:dc:fd:92:
04:92:15:32:b7:65:d4:de:37:e9:ac:5d:a0:d6:f1:32:a0:be:
86:80:74:0c:27:7b:66:d8:1e:b9:10:63:98:fc:cf:66:00:b8:
d1:b9:b6:7f:5c:fa:b7:07:fd:94:47:df:4a:da:ea:17:6b:c8:
8d:4f:df:ba:49:ce:7a:78:7d:21:c0:1b:f9:ca:77:b6:bf:0a:
d7:76:88:1a:b7:a4:93:6d:e7:8b:ae:e2:c3:e8:47:ce:03:83:
af:25:65:6a:11:f6:4c:34:52:5f:fc:ce:70:2b:23:ad:f8:9f:
b6:55:fa:68:77:70:41:0d:39:9d:f7:67:3e:f2:38:a0:3c:fc:
8f:87:92:73:d3:f8:8b:bb:d4:26:15:0e:cc:ac:1c:c7:dd:d2:
88:3a:ef:f5:73:f2:04:ad:d0:3d:8b:6c:eb:77:2e:9c:d0:6f:
6f:ba:42:ec:4a:48:67:50:f5:40:73:e3:06:c5:01:c1:90:31:
7f:15:d3:43:80:0d:18:f7:47:ef:35:d6:e8:33:f0:96:3c:94:
e0:cb:cf:71:49:17:06:50:6a:17:42:d4:1b:78:9e:15:54:7d:
4a:cb:de:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUampvp88mzDU5gYRv/L/1C3cdMiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdBNjhEQTdDRTQ5NzRGRTgyOTE3MTEwODUyODU1QTYw
MzZBNkFBRjAeFw0yNDAyMTQyMDI4MTlaFw0yNTAyMTIyMDMzMTlaMDMxMTAvBgNV
BAMTKEU2NTkzOEEyMDk3MTcyODk5RjE4MkJDOEFDQzg5QUNFN0E5RjgyRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgz9tMKFo8n+AplUKqS8NuahS
s9XOi8loWEFVOPAXmGTlt+pIi5TRb1BrpCoqfZCe6fZl8a2wS+9eNiavM9Z8bsaE
I4ZSN9ZTbdQVMLeeDubVhjJ44S/y7kfDSLFdgnX89NJn4moVasUii2r0qGkRYIKJ
0k4c9yIHl9M8L5+w5ZLYCWUUTaIcH9BTh0+oRhz9q0Oc6fH1+xzgDCLavmDZjWi7
7LGvDDsfO2t5Gx5E8XpakQqC1t3dkaaQGYZPvts6eR/vWaftaswzEtdt4Ev4LmN4
pNKHZGLa2bppbe0QK6g+t4/JKEUcm6okN8E0rLhChvDdayCrxGTdsu/bksVpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5lk4oglxcomfGCvIrMiaznqfgugwHwYDVR0j
BBgwFoAUF6aNp85JdP6CkXEQhShVpgNqaq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC8xN0E2OERBN0NFNDk3NEZFODI5MTcxMTA4NTI4NTVBNjAzNkE2QUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3QTY4REE3Q0U0OTc0RkU4
MjkxNzExMDg1Mjg1NUE2MDM2QTZBQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuz1sMA0GCSqGSIb3DQEBCwUAA4IBAQApNsXLIDQu
cv3w420j0untU9qCBP+ZziBHgvYjz1veQOzc/ZIEkhUyt2XU3jfprF2g1vEyoL6G
gHQMJ3tm2B65EGOY/M9mALjRubZ/XPq3B/2UR99K2uoXa8iNT9+6Sc56eH0hwBv5
yne2vwrXdogat6STbeeLruLD6EfOA4OvJWVqEfZMNFJf/M5wKyOt+J+2Vfpod3BB
DTmd92c+8jigPPyPh5Jz0/iLu9QmFQ7MrBzH3dKIOu/1c/IErdA9i2zrdy6c0G9v
ukLsSkhnUPVAc+MGxQHBkDF/FdNDgA0Y90fvNdboM/CWPJTgy89xSRcGUGoXQtQb
eJ4VVH1Ky95I
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:54 2025 by rpki-client