Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: Cxyp/5821v150e9HEKgUm6rdm4SgfamcPEjFbxzX3Ac=
Subject key identifier: 67:C2:E3:F5:34:98:55:1F:F7:C2:AE:68:A8:A4:D6:E9:C8:9E:CF:81
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 6BBF14534C93DDB74BB4824EC20E829C96AB8FDB
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 138.121.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bf:14:53:4c:93:dd:b7:4b:b4:82:4e:c2:0e:82:9c:96:ab:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=67C2E3F53498551FF7C2AE68A8A4D6E9C89ECF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:ff:d9:13:96:f4:e4:9c:f5:99:c8:18:3e:
e5:8b:81:7b:36:13:bc:00:49:bc:e5:35:69:58:38:
5a:de:8b:a8:8e:86:a1:73:4d:f8:4a:27:c9:5b:25:
a6:33:b5:58:04:2c:db:78:4c:28:65:3c:0b:a1:34:
13:09:43:4e:9c:3d:3a:aa:cd:24:5f:dd:69:51:95:
ce:c7:c5:89:f3:35:1f:e2:dd:76:55:73:6c:97:82:
e0:f8:4c:4f:4c:42:21:b6:64:e5:1d:9d:90:7e:64:
a0:e5:07:48:33:31:c6:4f:9b:c4:8c:cb:3f:94:d3:
40:59:5a:d1:1b:0a:c9:78:f0:5b:21:76:77:04:f9:
3f:33:45:d4:06:b1:0f:32:16:20:50:61:8e:6e:b4:
24:16:62:de:f1:aa:9f:76:f6:ed:58:a4:2e:e3:ae:
fc:62:a0:29:77:14:0b:3a:0d:64:d2:f0:ed:2d:d0:
45:58:79:9d:f5:bb:2f:fd:a8:9a:b9:6b:43:21:c8:
a3:4b:c9:30:c7:6f:6a:8c:04:89:c5:72:fa:ae:59:
b1:e2:2f:e2:e6:e0:b1:49:21:b9:45:39:36:ac:0e:
aa:3a:a7:b6:a8:f5:f0:3d:9e:13:af:53:cd:64:61:
b3:90:c7:50:06:ff:81:da:dc:0b:d0:01:f1:18:ea:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:E3:F5:34:98:55:1F:F7:C2:AE:68:A8:A4:D6:E9:C8:9E:CF:81
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:85:91:f4:82:67:0b:79:34:13:d1:7f:51:af:30:b4:c4:69:
83:41:6e:53:e3:cd:0b:1f:75:18:28:cc:1f:64:5e:16:c1:9e:
8e:32:b4:68:bc:bb:04:af:cb:b0:e8:43:96:39:4e:44:7b:11:
ef:c9:cd:82:5d:5e:dd:4d:48:cd:53:28:2d:17:fe:bf:a0:31:
e3:36:01:af:52:31:8e:56:83:2d:fe:a9:2e:c6:ff:01:fb:9b:
5a:49:32:fa:93:56:b8:e8:43:a0:49:59:65:90:8d:c5:44:e0:
5b:aa:ee:48:14:b6:d8:8b:3a:20:35:d7:a2:bb:bb:39:75:73:
b2:59:b9:72:7b:66:6a:da:6b:1b:b6:e9:40:10:60:16:9f:47:
ed:0e:31:47:74:19:9b:7a:7c:98:4d:51:96:cf:c9:10:09:af:
34:16:28:65:b8:54:91:a4:e8:a2:b8:a3:9d:c5:00:0f:bc:f9:
0c:9a:a3:96:58:5a:80:00:31:ba:a2:bd:90:0e:7a:aa:db:3a:
b1:f9:23:04:72:93:18:28:03:e3:81:69:d8:33:5e:af:2e:fd:
dc:db:a4:72:51:56:57:b5:51:ee:dc:38:f5:dd:69:04:2d:db:
32:28:4c:9a:b6:d0:69:d8:8b:d6:02:8b:b1:17:6b:68:74:5c:
d4:93:b9:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa78UU0yT3bdLtIJOwg6CnJarj9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTVaFw0yNTExMDYyMDQwMTVaMDMxMTAvBgNV
BAMTKDY3QzJFM0Y1MzQ5ODU1MUZGN0MyQUU2OEE4QTRENkU5Qzg5RUNGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13v/ZE5b05Jz1mcgYPuWLgXs2
E7wASbzlNWlYOFrei6iOhqFzTfhKJ8lbJaYztVgELNt4TChlPAuhNBMJQ06cPTqq
zSRf3WlRlc7HxYnzNR/i3XZVc2yXguD4TE9MQiG2ZOUdnZB+ZKDlB0gzMcZPm8SM
yz+U00BZWtEbCsl48FshdncE+T8zRdQGsQ8yFiBQYY5utCQWYt7xqp929u1YpC7j
rvxioCl3FAs6DWTS8O0t0EVYeZ31uy/9qJq5a0MhyKNLyTDHb2qMBInFcvquWbHi
L+Lm4LFJIblFOTasDqo6p7ao9fA9nhOvU81kYbOQx1AG/4Ha3AvQAfEY6pE1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ8Lj9TSYVR/3wq5oqKTW6ciez4EwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKedwwDQYJKoZIhvcNAQELBQADggEBAIuFkfSC
Zwt5NBPRf1GvMLTEaYNBblPjzQsfdRgozB9kXhbBno4ytGi8uwSvy7DoQ5Y5TkR7
Ee/JzYJdXt1NSM1TKC0X/r+gMeM2Aa9SMY5Wgy3+qS7G/wH7m1pJMvqTVrjoQ6BJ
WWWQjcVE4Fuq7kgUttiLOiA116K7uzl1c7JZuXJ7Zmraaxu26UAQYBafR+0OMUd0
GZt6fJhNUZbPyRAJrzQWKGW4VJGk6KK4o53FAA+8+Qyao5ZYWoAAMbqivZAOeqrb
OrH5IwRykxgoA+OBadgzXq8u/dzbpHJRVle1Ue7cOPXdaQQt2zIoTJq20GnYi9YC
i7EXa2h0XNSTuTY=
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org