Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39342e302f32332d3233203d3e20323635393137.roa
File: 3133312e3139362e39342e302f32332d3233203d3e20323635393137.roa (raw, json)
Hash identifier: Ubhj8S/KlbwlFLqwwMuRREfOqRp4k82t7L53wYQ3Dtc=
Subject key identifier: A5:1C:E1:39:52:39:BB:00:72:E1:8C:BE:67:08:EF:3B:23:D0:4A:76
Certificate issuer: /CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
Certificate serial: 374E5D5C5B4337647FE09A6B0445A81793B177D1
Authority key identifier: DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39342e302f32332d3233203d3e20323635393137.roa
Signing time: Tue 02 Jan 2024 14:00:00 +0000
ROA not before: Tue 02 Jan 2024 13:55:00 +0000
ROA not after: Tue 31 Dec 2024 14:00:00 +0000
asID: 265917
IP address blocks: 131.196.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4e:5d:5c:5b:43:37:64:7f:e0:9a:6b:04:45:a8:17:93:b1:77:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
Validity
Not Before: Jan 2 13:55:00 2024 GMT
Not After : Dec 31 14:00:00 2024 GMT
Subject: CN=3082010A0282010100B09C134A924362915E6B1CD1A8C182F9E6E7B4B6CE6A379AAF126375EF9A44F22179562168D8428A4A92BA06418D7ED2A80F871B0E8E8979EE021283E3552BE5BDDA7423C9F795BCF0A1EAC8C62DDE388D9C9E21CB9B1880D8D8B4F7B751E5CCE1F2B3CCA8A510B772CE781AA6F5107143735B35C72B8F1EEF4A79041B4847FD331871877037431EA42D54105160EE500915EED993AA6D44A72570DD5341D6E812D359AB22D94624E5403C52525E8155C89D698E16A4A9901871EF60A0293660CC4F1D21ECFF474D8BBCBC861D98FEBE56FA23C98629A09761C13FDD0A76C00BEFD75E882B89235389A7E9F9E0E02C8CDF0D1771A956440C141486223D6682030203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:13:4a:92:43:62:91:5e:6b:1c:d1:a8:c1:
82:f9:e6:e7:b4:b6:ce:6a:37:9a:af:12:63:75:ef:
9a:44:f2:21:79:56:21:68:d8:42:8a:4a:92:ba:06:
41:8d:7e:d2:a8:0f:87:1b:0e:8e:89:79:ee:02:12:
83:e3:55:2b:e5:bd:da:74:23:c9:f7:95:bc:f0:a1:
ea:c8:c6:2d:de:38:8d:9c:9e:21:cb:9b:18:80:d8:
d8:b4:f7:b7:51:e5:cc:e1:f2:b3:cc:a8:a5:10:b7:
72:ce:78:1a:a6:f5:10:71:43:73:5b:35:c7:2b:8f:
1e:ef:4a:79:04:1b:48:47:fd:33:18:71:87:70:37:
43:1e:a4:2d:54:10:51:60:ee:50:09:15:ee:d9:93:
aa:6d:44:a7:25:70:dd:53:41:d6:e8:12:d3:59:ab:
22:d9:46:24:e5:40:3c:52:52:5e:81:55:c8:9d:69:
8e:16:a4:a9:90:18:71:ef:60:a0:29:36:60:cc:4f:
1d:21:ec:ff:47:4d:8b:bc:bc:86:1d:98:fe:be:56:
fa:23:c9:86:29:a0:97:61:c1:3f:dd:0a:76:c0:0b:
ef:d7:5e:88:2b:89:23:53:89:a7:e9:f9:e0:e0:2c:
8c:df:0d:17:71:a9:56:44:0c:14:14:86:22:3d:66:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:E1:39:52:39:BB:00:72:E1:8C:BE:67:08:EF:3B:23:D0:4A:76
X509v3 Authority Key Identifier:
keyid:DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39342e302f32332d3233203d3e20323635393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.94.0/23
Signature Algorithm: sha256WithRSAEncryption
af:19:80:9d:45:0d:3d:65:73:3f:2d:ec:40:21:2a:8b:92:09:
12:1d:ad:da:83:32:0a:ab:df:51:d3:9f:3a:c2:1d:59:fd:7c:
44:d1:ea:43:8a:ec:53:fb:7d:a7:00:1d:6c:8f:92:d5:ce:ba:
ab:18:38:6f:de:de:cc:8e:4d:4f:40:ea:ce:49:cc:09:ec:26:
8c:24:58:74:7f:71:9e:02:89:63:9e:6d:d3:ad:2f:02:b8:c5:
ef:79:0f:a6:48:b7:53:38:db:b2:47:c3:d7:06:5f:60:76:62:
b6:2b:5e:03:58:c8:43:78:76:0c:ca:86:7d:8c:ec:9d:d5:05:
bc:6d:93:57:18:a5:44:3e:97:e7:ec:42:46:d4:01:5f:f6:ec:
29:1a:a1:81:16:9f:78:de:7a:10:46:5d:1a:05:78:ab:fe:2b:
a1:b0:39:c4:91:6f:cb:df:81:5d:53:94:f4:3c:d0:37:09:88:
62:6a:2d:84:e4:2b:bf:a6:7a:36:e1:7b:1b:9b:04:2b:d6:c5:
ea:be:a9:60:d8:32:fa:bb:11:97:6e:21:7a:7a:67:c3:21:b4:
50:81:c0:45:22:9b:4d:b4:35:b4:ac:9d:e2:aa:a5:f8:c0:52:
e1:25:55:4d:65:2f:9b:64:22:65:bf:ad:7c:46:b7:6d:46:9a:
28:d5:aa:94
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUN05dXFtDN2R/4JprBEWoF5Oxd9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZEMjg4REJEOURFQkVCOEZGREUwNUUyNUY1MDM2RjIy
NTA5MzQyMTAeFw0yNDAxMDIxMzU1MDBaFw0yNDEyMzExNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA5QzEzNEE5MjQzNjI5MTVF
NkIxQ0QxQThDMTgyRjlFNkU3QjRCNkNFNkEzNzlBQUYxMjYzNzVFRjlBNDRGMjIx
Nzk1NjIxNjhEODQyOEE0QTkyQkEwNjQxOEQ3RUQyQTgwRjg3MUIwRThFODk3OUVF
MDIxMjgzRTM1NTJCRTVCRERBNzQyM0M5Rjc5NUJDRjBBMUVBQzhDNjJEREUzODhE
OUM5RTIxQ0I5QjE4ODBEOEQ4QjRGN0I3NTFFNUNDRTFGMkIzQ0NBOEE1MTBCNzcy
Q0U3ODFBQTZGNTEwNzE0MzczNUIzNUM3MkI4RjFFRUY0QTc5MDQxQjQ4NDdGRDMz
MTg3MTg3NzAzNzQzMUVBNDJENTQxMDUxNjBFRTUwMDkxNUVFRDk5M0FBNkQ0NEE3
MjU3MERENTM0MUQ2RTgxMkQzNTlBQjIyRDk0NjI0RTU0MDNDNTI1MjVFODE1NUM4
OUQ2OThFMTZBNEE5OTAxODcxRUY2MEEwMjkzNjYwQ0M0RjFEMjFFQ0ZGNDc0RDhC
QkNCQzg2MUQ5OEZFQkU1NkZBMjNDOTg2MjlBMDk3NjFDMTNGREQwQTc2QzAwQkVG
RDc1RTg4MkI4OTIzNTM4OUE3RTlGOUUwRTAyQzhDREYwRDE3NzFBOTU2NDQwQzE0
MTQ4NjIyM0Q2NjgyMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsJwTSpJDYpFeaxzRqMGC+ebntLbOajearxJjde+aRPIheVYhaNhC
ikqSugZBjX7SqA+HGw6OiXnuAhKD41Ur5b3adCPJ95W88KHqyMYt3jiNnJ4hy5sY
gNjYtPe3UeXM4fKzzKilELdyzngapvUQcUNzWzXHK48e70p5BBtIR/0zGHGHcDdD
HqQtVBBRYO5QCRXu2ZOqbUSnJXDdU0HW6BLTWasi2UYk5UA8UlJegVXInWmOFqSp
kBhx72CgKTZgzE8dIez/R02LvLyGHZj+vlb6I8mGKaCXYcE/3Qp2wAvv116IK4kj
U4mn6fng4CyM3w0XcalWRAwUFIYiPWaCAwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKUc4TlSObsAcuGMvmcI7zsj0Ep2MB8GA1UdIwQYMBaAFN/SiNvZ3r64/94F4l9Q
NvIlCTQhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6VEdQMVA1OHQ3ZXRi
TmsxN2JyTFViYUZRdXJ1ZGU1UmZlQUNjUmZpV2d1LzAvREZEMjg4REJEOURFQkVC
OEZGREUwNUUyNUY1MDM2RjIyNTA5MzQyMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERkQyODhEQkQ5REVCRUI4RkZERTA1RTI1RjUwMzZGMjI1MDkz
NDIxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yelRHUDFQNTh0N2V0Yk5rMTdi
ckxVYmFGUXVydWRlNVJmZUFDY1JmaVdndS8wLzMxMzMzMTJlMzEzOTM2MmUzOTM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1MzkzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
g8ReMA0GCSqGSIb3DQEBCwUAA4IBAQCvGYCdRQ09ZXM/LexAISqLkgkSHa3agzIK
q99R0586wh1Z/XxE0epDiuxT+32nAB1sj5LVzrqrGDhv3t7Mjk1PQOrOScwJ7CaM
JFh0f3GeAoljnm3TrS8CuMXveQ+mSLdTONuyR8PXBl9gdmK2K14DWMhDeHYMyoZ9
jOyd1QW8bZNXGKVEPpfn7EJG1AFf9uwpGqGBFp943noQRl0aBXir/iuhsDnEkW/L
34FdU5T0PNA3CYhiai2E5Cu/pno24XsbmwQr1sXqvqlg2DL6uxGXbiF6emfDIbRQ
gcBFIptNtDW0rJ3iqqX4wFLhJVVNZS+bZCJlv618RrdtRpoo1aqU
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:40 2025 by rpki-client