Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa
File: 3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa (raw, json)
Hash identifier: 2Cvt8bswpw5OfiKPgB9wi9LG+d7EpKTR6xpJUcPXsJk=
Subject key identifier: 88:3A:60:F8:9D:0B:2C:15:A9:AC:81:D4:8D:38:FF:C1:88:2B:88:D1
Certificate issuer: /CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Certificate serial: 6865B1EA56220C5E62F7442FB3D5949B8235DBDE
Authority key identifier: CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa
Signing time: Sat 30 Mar 2024 00:46:21 +0000
ROA not before: Sat 30 Mar 2024 00:41:21 +0000
ROA not after: Sat 29 Mar 2025 00:46:21 +0000
asID: 264269
IP address blocks: 138.118.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:65:b1:ea:56:22:0c:5e:62:f7:44:2f:b3:d5:94:9b:82:35:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Validity
Not Before: Mar 30 00:41:21 2024 GMT
Not After : Mar 29 00:46:21 2025 GMT
Subject: CN=883A60F89D0B2C15A9AC81D48D38FFC1882B88D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:10:31:57:71:d4:60:f8:0e:d7:84:a2:ac:
86:eb:f0:11:fd:27:43:21:6a:1d:a1:cd:78:34:63:
2b:b9:d9:77:c9:21:e0:26:24:93:1a:04:57:ae:35:
6d:f3:fd:87:8b:63:26:d5:37:fc:7c:11:9d:32:b6:
d8:70:a0:bf:a2:ed:74:2b:46:95:c5:da:c2:3c:45:
47:a6:cf:7a:86:38:a0:b2:49:6f:eb:9f:4c:ae:a4:
db:11:54:a7:69:59:48:82:17:7f:aa:b9:b1:37:c3:
40:51:79:17:82:4b:4a:a7:45:7f:61:4a:3c:16:dc:
fd:54:87:c2:1a:66:2a:58:ea:91:ce:dd:6e:60:3f:
a6:25:8c:a5:31:f1:78:ca:a5:3d:58:e4:85:0e:99:
99:b5:16:23:ae:6f:df:cd:38:18:9e:d8:11:c0:2f:
d6:c9:ac:46:9d:75:b3:39:bb:1f:29:2f:79:69:b2:
56:63:2c:c8:be:78:c1:27:de:25:29:3e:f3:19:bf:
5a:b0:a6:69:5d:b1:6a:86:dc:85:c7:13:4c:04:33:
4b:2a:db:d9:f3:5f:e9:70:ec:bf:3f:ea:4e:32:32:
b3:05:24:67:a6:97:46:fd:89:43:4a:a6:8e:98:9c:
60:b8:3a:fd:bf:24:8f:0a:8b:ab:c7:2a:2f:13:10:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:60:F8:9D:0B:2C:15:A9:AC:81:D4:8D:38:FF:C1:88:2B:88:D1
X509v3 Authority Key Identifier:
keyid:CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.248.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dc:1e:ac:91:a6:36:19:d8:05:01:c6:7d:04:63:1f:80:af:
73:93:97:b4:53:61:70:1c:d6:ba:74:85:ca:76:5c:b7:f9:4b:
f9:d1:08:0c:0c:98:04:a1:dc:13:5d:d7:64:a5:3e:bb:de:f3:
80:db:83:0c:f5:6d:20:61:5d:33:4b:02:e0:d9:82:e4:1d:b3:
78:86:a3:4f:2b:3c:a0:e2:0c:95:5b:4f:a5:2b:19:51:38:f7:
b3:bd:60:e7:0c:bf:e3:96:01:22:96:59:37:a4:51:23:25:e1:
82:17:55:34:a5:95:d4:bc:00:cc:45:b0:b6:f4:58:fd:81:6f:
9c:ca:64:20:7c:17:20:59:a9:83:05:87:57:4d:cb:7c:b7:18:
6b:e5:7f:4c:0e:90:48:fd:45:c6:c8:51:79:df:ed:6e:6e:56:
35:a3:87:5e:f2:70:11:cd:88:f2:57:97:6b:36:64:cb:53:78:
0d:f5:d3:9b:0d:1a:ea:70:b3:60:27:25:75:af:5c:64:db:3c:
9b:6c:3e:77:a5:16:56:02:07:d3:bb:a6:27:22:f7:79:6b:05:
29:dc:13:84:8b:3b:6d:84:a1:ff:c2:27:5c:70:a3:84:2a:b1:
be:65:e3:5e:dd:b8:cc:f8:18:74:52:5e:83:3e:69:7e:9b:2d:
59:da:5f:c2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaGWx6lYiDF5i90Qvs9WUm4I1294wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBQzUwODJFMzI3MDk0OEM0OTk3Q0Q4OTE4Q0FCRkZE
MDY4MjMzNTAeFw0yNDAzMzAwMDQxMjFaFw0yNTAzMjkwMDQ2MjFaMDMxMTAvBgNV
BAMTKDg4M0E2MEY4OUQwQjJDMTVBOUFDODFENDhEMzhGRkMxODgyQjg4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGBAxV3HUYPgO14SirIbr8BH9
J0Mhah2hzXg0Yyu52XfJIeAmJJMaBFeuNW3z/YeLYybVN/x8EZ0ytthwoL+i7XQr
RpXF2sI8RUemz3qGOKCySW/rn0yupNsRVKdpWUiCF3+qubE3w0BReReCS0qnRX9h
SjwW3P1Uh8IaZipY6pHO3W5gP6YljKUx8XjKpT1Y5IUOmZm1FiOub9/NOBie2BHA
L9bJrEaddbM5ux8pL3lpslZjLMi+eMEn3iUpPvMZv1qwpmldsWqG3IXHE0wEM0sq
29nzX+lw7L8/6k4yMrMFJGeml0b9iUNKpo6YnGC4Ov2/JI8Ki6vHKi8TEPfzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiDpg+J0LLBWprIHUjTj/wYgriNEwHwYDVR0j
BBgwFoAUyqxQguMnCUjEmXzYkYyr/9BoIzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pFblBCTDd0SnJuSmRub1J3eDZjQWZUQ0tMOHE3NGlqcnZQZW82Rmcx
R0UvMC9DQUFDNTA4MkUzMjcwOTQ4QzQ5OTdDRDg5MThDQUJGRkQwNjgyMzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBQUM1MDgyRTMyNzA5NDhD
NDk5N0NEODkxOENBQkZGRDA2ODIzMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKRW5QQkw3dEpybkpkbm9Sd3g2Y0FmVENLTDhxNzRpanJ2UGVvNkZnMUdFLzAv
MzEzMzM4MmUzMTMxMzgyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2+DANBgkqhkiG9w0BAQsFAAOCAQEAM9we
rJGmNhnYBQHGfQRjH4Cvc5OXtFNhcBzWunSFynZct/lL+dEIDAyYBKHcE13XZKU+
u97zgNuDDPVtIGFdM0sC4NmC5B2zeIajTys8oOIMlVtPpSsZUTj3s71g5wy/45YB
IpZZN6RRIyXhghdVNKWV1LwAzEWwtvRY/YFvnMpkIHwXIFmpgwWHV03LfLcYa+V/
TA6QSP1FxshRed/tbm5WNaOHXvJwEc2I8leXazZky1N4DfXTmw0a6nCzYCclda9c
ZNs8m2w+d6UWVgIH07umJyL3eWsFKdwThIs7bYSh/8InXHCjhCqxvmXjXt24zPgY
dFJegz5pfpstWdpfwg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:33 2025 by rpki-client