Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
File: 3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: ayY2VEC9CXXulqReqnyLXk7gW1mlGK7YoezvD7ZnGAc=
Subject key identifier: A7:E2:59:AC:09:93:58:85:71:AD:4B:FC:BE:56:20:53:11:78:2B:2E
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 05CF5640A6113439C9E643D7B473A7D433260ED3
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 28270
IP address blocks: 138.122.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cf:56:40:a6:11:34:39:c9:e6:43:d7:b4:73:a7:d4:33:26:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=A7E259AC0993588571AD4BFCBE56205311782B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:04:48:5a:12:eb:99:12:5b:90:da:4f:b4:
e1:8a:98:33:1c:bc:69:67:87:73:23:a1:cd:b8:9e:
bd:a4:19:97:dc:86:f0:83:c5:26:a4:48:88:40:87:
15:15:06:94:d3:44:14:44:ca:be:e1:29:b9:8e:3a:
2b:cf:54:87:54:bd:56:58:75:98:b0:69:c0:fc:f1:
43:55:20:2e:3c:18:db:8d:47:cc:cd:e1:58:1e:02:
05:8f:20:bd:fe:64:44:f5:27:54:df:48:ec:79:cf:
d9:4c:19:c4:bf:f2:1d:6e:03:1f:f0:76:87:ec:80:
95:d9:08:20:3a:e2:5f:bf:84:34:be:96:73:08:10:
b1:0c:83:e0:07:97:cf:b2:61:58:86:95:a0:db:78:
ef:6b:4a:72:fd:9d:e2:74:78:bf:a3:ae:de:15:30:
da:f3:90:45:6b:d4:b2:93:c3:41:6a:2a:25:ff:5d:
f9:e6:9a:a7:7e:55:bf:49:ea:a5:b0:92:c5:68:e2:
79:1e:e0:06:0d:e5:13:14:ef:16:f6:49:a5:9f:83:
5b:cc:1b:df:f9:42:06:02:0b:f4:12:51:c6:46:9d:
ae:15:fc:eb:6f:b0:3d:e9:85:2f:68:99:72:28:85:
3e:b1:2c:a4:d6:7a:11:d6:0e:0b:64:4c:75:e4:13:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:59:AC:09:93:58:85:71:AD:4B:FC:BE:56:20:53:11:78:2B:2E
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:48:83:39:9f:81:a7:f5:a8:fe:da:2a:55:1d:85:8c:e0:ce:
39:35:61:96:59:16:3e:83:a5:27:38:0c:10:bf:0b:28:a0:77:
10:c7:31:96:45:bd:16:fd:e7:46:06:c0:46:e7:e4:d4:be:0a:
21:f0:3f:36:f8:de:33:45:5b:21:69:60:dd:cc:73:c8:a9:83:
46:68:e3:8f:5c:7c:23:0c:da:57:18:f2:c5:bf:c7:51:c3:18:
c3:db:39:07:36:2a:72:39:e6:7c:6e:b1:5c:2b:cd:3b:3b:7b:
ee:9c:de:87:36:57:d3:45:c8:1f:8b:01:87:3c:48:a1:44:30:
bc:a0:99:c3:20:a3:70:3e:a8:d2:8d:f3:69:3d:d1:72:2e:72:
36:66:c5:83:e6:b6:5f:76:0b:b5:b4:0f:5f:71:7f:1c:b7:e7:
20:1d:8f:37:b7:9a:10:e8:6a:0f:8d:94:1d:96:22:bb:6e:5b:
ec:1d:33:94:18:af:f1:8f:80:04:7b:71:85:d0:9e:78:d8:0a:
3e:bd:6a:88:61:e5:6c:f4:60:2f:5e:b0:bc:70:b5:d1:2a:25:
14:75:b0:32:a8:9e:a0:f5:22:4f:19:1b:60:6d:b4:d8:1c:b8:
9e:92:ad:00:6c:48:bb:8c:36:29:d8:9d:47:a7:79:4f:d6:1e:
9b:2e:aa:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBc9WQKYRNDnJ5kPXtHOn1DMmDtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NDhaFw0yNTEwMTMwMTQ5NDhaMDMxMTAvBgNV
BAMTKEE3RTI1OUFDMDk5MzU4ODU3MUFENEJGQ0JFNTYyMDUzMTE3ODJCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZiQRIWhLrmRJbkNpPtOGKmDMc
vGlnh3Mjoc24nr2kGZfchvCDxSakSIhAhxUVBpTTRBREyr7hKbmOOivPVIdUvVZY
dZiwacD88UNVIC48GNuNR8zN4VgeAgWPIL3+ZET1J1TfSOx5z9lMGcS/8h1uAx/w
dofsgJXZCCA64l+/hDS+lnMIELEMg+AHl8+yYViGlaDbeO9rSnL9neJ0eL+jrt4V
MNrzkEVr1LKTw0FqKiX/Xfnmmqd+Vb9J6qWwksVo4nke4AYN5RMU7xb2SaWfg1vM
G9/5QgYCC/QSUcZGna4V/OtvsD3phS9omXIohT6xLKTWehHWDgtkTHXkE4OZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp+JZrAmTWIVxrUv8vlYgUxF4Ky4wHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKeuwwDQYJKoZIhvcNAQELBQADggEBAKdIgzmf
gaf1qP7aKlUdhYzgzjk1YZZZFj6DpSc4DBC/CyigdxDHMZZFvRb950YGwEbn5NS+
CiHwPzb43jNFWyFpYN3Mc8ipg0Zo449cfCMM2lcY8sW/x1HDGMPbOQc2KnI55nxu
sVwrzTs7e+6c3oc2V9NFyB+LAYc8SKFEMLygmcMgo3A+qNKN82k90XIucjZmxYPm
tl92C7W0D19xfxy35yAdjze3mhDoag+NlB2WIrtuW+wdM5QYr/GPgAR7cYXQnnjY
Cj69aohh5Wz0YC9esLxwtdEqJRR1sDKonqD1Ik8ZG2BttNgcuJ6SrQBsSLuMNinY
nUeneU/WHpsuqow=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:54 2025 by rpki-client