Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
File: 3133312e3139362e37362e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier: xdof+2tIg8rYLf220hVvDSUtMkt/rO0/KrDG/vfpOyk=
Subject key identifier: F5:E6:AF:2E:3B:B7:59:3D:5B:58:B0:8C:E1:BD:97:19:68:EB:97:0A
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 1065EC8051D3052550D44B20E5FA6DC3249C1826
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 131.196.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:65:ec:80:51:d3:05:25:50:d4:4b:20:e5:fa:6d:c3:24:9c:18:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=F5E6AF2E3BB7593D5B58B08CE1BD971968EB970A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:88:14:21:74:fb:23:5f:fb:24:5f:42:c7:
36:e9:42:05:c9:84:72:5a:b9:41:a4:67:51:bf:12:
04:b5:2f:ac:64:40:00:8b:ab:a4:44:78:51:2d:4a:
eb:98:a3:d9:19:02:da:9d:44:80:e1:5c:da:11:22:
b2:59:e2:57:85:07:ef:80:c4:a2:b3:6a:7b:82:73:
9c:c1:3e:7e:1b:92:ea:b8:72:11:3d:a1:af:e7:53:
78:e3:49:8b:00:74:2b:38:5b:f2:f7:bd:7c:4b:c6:
b2:1a:69:c3:51:4e:d0:21:43:ef:1d:a7:f9:38:8e:
4d:05:db:1f:cc:6d:01:c0:4c:a4:9e:13:9c:fb:44:
d6:77:df:a5:f6:22:07:11:08:02:33:87:d0:78:5e:
70:1b:80:ee:c3:a6:d4:e8:9a:cf:5e:f6:15:b7:c8:
d0:ea:bc:91:0d:bd:99:d2:9b:8a:e7:90:29:b7:71:
2e:cf:2d:7c:d0:53:3c:18:50:70:3c:5b:7d:8a:fe:
df:bf:83:8b:f1:88:39:b8:c6:c4:bb:26:0b:f5:3b:
7d:92:7d:67:c2:df:99:1e:6a:11:04:02:bb:01:d9:
c9:5b:1b:7f:39:a9:1a:11:30:15:d7:6d:94:ac:4c:
18:4f:33:d4:ca:72:0c:f2:d2:46:be:85:73:60:3f:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E6:AF:2E:3B:B7:59:3D:5B:58:B0:8C:E1:BD:97:19:68:EB:97:0A
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:8c:8a:fc:f4:10:03:36:48:7d:e9:ff:41:95:f9:00:f2:4c:
84:9b:df:87:5b:9f:1a:18:1e:9c:f6:d7:07:3a:ab:a9:40:d2:
78:e7:a8:d7:63:cc:43:70:dc:38:e7:02:24:92:fc:a0:c2:a4:
c6:bb:7c:2b:f5:ca:b4:53:d1:ac:4b:c2:f4:56:68:50:98:ec:
35:df:21:87:08:92:52:31:53:9e:30:a4:2a:a5:45:25:71:58:
63:d4:21:35:da:bb:63:30:bf:eb:a9:c5:9a:02:32:64:e9:94:
6e:5a:e0:f3:10:45:c7:72:e8:cb:1a:a4:54:84:d8:5d:f5:25:
0d:5f:b0:86:f8:c1:37:5a:a8:19:7f:f1:4e:ea:40:59:b0:0b:
ec:af:b9:ec:0e:91:7f:8a:1d:35:b2:98:13:8f:b2:02:dc:d5:
96:09:49:63:64:49:8a:c0:97:de:01:45:ff:8d:02:53:84:b3:
f3:e8:03:db:4c:ed:01:a3:70:b8:3a:d0:5e:c1:bb:73:06:d5:
22:6f:38:dd:b5:2d:cb:da:14:dc:8e:33:cc:f7:a8:a1:1f:36:
d1:61:6f:4b:ec:66:15:6f:4f:0b:59:d3:ff:d8:5d:ae:4b:78:
4a:84:d6:09:bd:54:72:b4:1f:a7:f4:83:21:97:fc:41:b8:27:
36:4b:f5:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEGXsgFHTBSVQ1Esg5fptwyScGCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTJaFw0yNTExMDYyMDQwMTJaMDMxMTAvBgNV
BAMTKEY1RTZBRjJFM0JCNzU5M0Q1QjU4QjA4Q0UxQkQ5NzE5NjhFQjk3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWYgUIXT7I1/7JF9CxzbpQgXJ
hHJauUGkZ1G/EgS1L6xkQACLq6REeFEtSuuYo9kZAtqdRIDhXNoRIrJZ4leFB++A
xKKzanuCc5zBPn4bkuq4chE9oa/nU3jjSYsAdCs4W/L3vXxLxrIaacNRTtAhQ+8d
p/k4jk0F2x/MbQHATKSeE5z7RNZ336X2IgcRCAIzh9B4XnAbgO7DptToms9e9hW3
yNDqvJENvZnSm4rnkCm3cS7PLXzQUzwYUHA8W32K/t+/g4vxiDm4xsS7Jgv1O32S
fWfC35keahEEArsB2clbG385qRoRMBXXbZSsTBhPM9TKcgzy0ka+hXNgPyrFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9eavLju3WT1bWLCM4b2XGWjrlwowHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBg8RMMA0GCSqGSIb3DQEBCwUAA4IBAQCKjIr89BAD
Nkh96f9BlfkA8kyEm9+HW58aGB6c9tcHOqupQNJ456jXY8xDcNw45wIkkvygwqTG
u3wr9cq0U9GsS8L0VmhQmOw13yGHCJJSMVOeMKQqpUUlcVhj1CE12rtjML/rqcWa
AjJk6ZRuWuDzEEXHcujLGqRUhNhd9SUNX7CG+ME3WqgZf/FO6kBZsAvsr7nsDpF/
ih01spgTj7IC3NWWCUljZEmKwJfeAUX/jQJThLPz6APbTO0Bo3C4OtBewbtzBtUi
bzjdtS3L2hTcjjPM96ihHzbRYW9L7GYVb08LWdP/2F2uS3hKhNYJvVRytB+n9IMh
l/xBuCc2S/U3
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org