Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e39362e302f32302d3234203d3e203238323538.roa
File: 3138362e3233352e39362e302f32302d3234203d3e203238323538.roa (raw, json)
Hash identifier: 5vRSIeMwPy0N8175+jveN+gLn0CMvDrWG+M5BWYH+Rg=
Subject key identifier: D6:2A:C0:23:21:FF:EE:80:C6:A6:E6:CE:6F:6E:CC:97:4D:17:33:53
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 62163695BC601D475A42B246829FE5D2EB01BD33
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e39362e302f32302d3234203d3e203238323538.roa
Signing time: Fri 03 May 2024 21:20:02 +0000
ROA not before: Fri 03 May 2024 21:15:02 +0000
ROA not after: Fri 02 May 2025 21:20:02 +0000
asID: 28258
IP address blocks: 186.235.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:16:36:95:bc:60:1d:47:5a:42:b2:46:82:9f:e5:d2:eb:01:bd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:15:02 2024 GMT
Not After : May 2 21:20:02 2025 GMT
Subject: CN=D62AC02321FFEE80C6A6E6CE6F6ECC974D173353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:c6:ba:3a:66:f2:2a:ba:a0:4a:25:43:ac:
47:64:91:5a:d0:ab:a6:0a:de:28:72:ff:b3:51:a9:
e0:a6:4f:9a:a2:3d:f8:93:cd:75:2d:9f:e8:c8:03:
ee:51:aa:b0:97:ff:63:48:88:ce:5a:20:6e:d2:94:
e9:17:fb:b3:05:09:7e:dd:45:c1:cd:20:1e:a7:4b:
eb:a6:e1:e4:a3:a7:d8:c6:72:aa:55:23:65:46:94:
9a:2d:9d:84:44:ea:a8:46:6a:0a:ac:3f:ae:8b:23:
8f:90:e7:ea:40:d3:3c:9f:e4:80:0e:a2:57:3c:a9:
04:a4:cf:4f:ed:5d:8a:32:c6:cb:d6:05:26:8e:cf:
e9:f9:24:d1:51:6a:b3:1c:09:5b:fa:99:2d:c6:88:
e9:8b:f4:8a:de:5a:41:69:b2:f5:0f:0a:67:de:3e:
91:fb:a4:65:77:ce:70:20:1d:77:a6:69:c5:05:97:
c4:03:a2:d6:70:ce:cc:ba:79:8e:d3:82:3e:e9:d4:
94:b9:d8:31:32:3f:87:70:65:ab:89:dd:40:13:88:
8a:12:e5:4c:1c:88:c0:fd:d7:35:c5:9d:10:f8:a7:
5f:73:e0:12:d1:3a:89:f1:b8:bf:bf:02:cc:a1:74:
99:0c:32:92:31:48:3d:b9:ca:6d:6d:2c:0a:37:f6:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:C0:23:21:FF:EE:80:C6:A6:E6:CE:6F:6E:CC:97:4D:17:33:53
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e39362e302f32302d3234203d3e203238323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
24:be:92:58:02:86:a8:97:36:18:37:8e:f0:5b:06:cf:7e:5c:
25:56:e6:09:71:db:56:58:72:17:18:d4:3b:01:6f:d1:55:e1:
4a:c1:90:26:84:a7:a4:4d:fb:ba:ea:d2:93:78:88:61:f6:87:
c4:7c:98:55:dc:c2:77:91:e5:a0:41:a1:8c:6e:a4:56:e2:2e:
78:e7:9c:db:77:56:83:91:3e:16:6b:7e:bd:ea:6c:97:01:81:
b4:6e:ae:1e:07:98:c5:49:1a:6b:fa:2f:2d:44:41:34:ec:33:
9f:cc:55:1b:50:ae:fd:21:59:3c:df:b9:a2:97:e0:6f:e1:d4:
48:7c:62:de:46:6c:19:74:3a:f9:4a:7d:11:c6:14:90:d9:76:
50:a1:ed:05:2f:d5:a8:4b:6f:38:01:7c:10:8d:9f:83:00:e0:
70:9c:76:cd:f6:40:dd:a9:f3:e9:5d:71:c6:31:74:f8:8d:d6:
df:34:bf:2b:30:22:61:da:c8:ee:c5:2b:f2:1b:46:5e:45:d1:
12:9d:91:ac:24:d0:ae:7e:e1:d7:7e:01:ce:61:a5:62:d4:37:
00:4f:6a:b7:76:2c:42:8d:1f:73:08:7b:20:1b:ce:e7:14:d0:
97:5e:00:9f:7b:bb:ae:b4:6d:bc:cd:10:fc:df:06:f6:3c:0a:
79:7f:ac:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYhY2lbxgHUdaQrJGgp/l0usBvTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTE1MDJaFw0yNTA1MDIyMTIwMDJaMDMxMTAvBgNV
BAMTKEQ2MkFDMDIzMjFGRkVFODBDNkE2RTZDRTZGNkVDQzk3NEQxNzMzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCousa6OmbyKrqgSiVDrEdkkVrQ
q6YK3ihy/7NRqeCmT5qiPfiTzXUtn+jIA+5RqrCX/2NIiM5aIG7SlOkX+7MFCX7d
RcHNIB6nS+um4eSjp9jGcqpVI2VGlJotnYRE6qhGagqsP66LI4+Q5+pA0zyf5IAO
olc8qQSkz0/tXYoyxsvWBSaOz+n5JNFRarMcCVv6mS3GiOmL9IreWkFpsvUPCmfe
PpH7pGV3znAgHXemacUFl8QDotZwzsy6eY7Tgj7p1JS52DEyP4dwZauJ3UATiIoS
5UwciMD91zXFnRD4p19z4BLROonxuL+/AsyhdJkMMpIxSD25ym1tLAo39r6hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1irAIyH/7oDGpubOb27Ml00XM1MwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzODM2MmUzMjMzMzUyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuutgMA0GCSqGSIb3DQEBCwUAA4IBAQAkvpJYAoao
lzYYN47wWwbPflwlVuYJcdtWWHIXGNQ7AW/RVeFKwZAmhKekTfu66tKTeIhh9ofE
fJhV3MJ3keWgQaGMbqRW4i5455zbd1aDkT4Wa3696myXAYG0bq4eB5jFSRpr+i8t
REE07DOfzFUbUK79IVk837mil+Bv4dRIfGLeRmwZdDr5Sn0RxhSQ2XZQoe0FL9Wo
S284AXwQjZ+DAOBwnHbN9kDdqfPpXXHGMXT4jdbfNL8rMCJh2sjuxSvyG0ZeRdES
nZGsJNCufuHXfgHOYaVi1DcAT2q3dixCjR9zCHsgG87nFNCXXgCfe7uutG28zRD8
3wb2PAp5f6zu
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:35 2025 by rpki-client