Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
File: 3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: yUOxQ2viYlQeviDWpjYDy1NmTUEkLZykLe/uTmW5PNc=
Subject key identifier: 20:CC:00:BA:86:20:48:01:69:FF:B6:10:56:DA:70:0F:DA:BC:37:AA
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 10F156329513BAA15AB57EACCCAB5E6637E3095D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 138.122.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f1:56:32:95:13:ba:a1:5a:b5:7e:ac:cc:ab:5e:66:37:e3:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=20CC00BA8620480169FFB61056DA700FDABC37AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:dd:7d:27:9d:3a:cd:ec:4e:46:73:96:68:
0a:ae:c6:e0:5b:82:8d:be:e3:c6:c6:5d:76:b7:9e:
f4:51:3f:f5:0c:53:98:b9:f5:28:31:74:a7:5c:60:
7f:de:1e:8d:1b:f6:5c:d5:7c:aa:6f:0e:25:e7:77:
45:17:2e:10:bb:91:fd:1b:d3:60:c2:b1:1b:3f:23:
c6:f0:ac:02:49:41:d4:6c:ee:8e:cc:ef:5d:50:52:
6f:d5:a2:a4:ff:30:5f:ef:35:e1:0d:9b:6d:98:e4:
9a:98:77:2d:8f:dc:b8:87:65:d6:3e:4f:f1:7e:df:
7e:72:d6:09:63:0c:a3:42:58:a9:ba:ca:a1:b0:5f:
99:9d:34:8c:74:c2:37:d5:ef:7a:18:67:a7:92:e7:
6d:1c:29:1b:7c:e5:a2:b7:b3:47:a9:7d:d2:81:6d:
67:4e:49:10:2f:7a:6e:f3:3e:45:d8:5c:68:fc:d5:
e9:99:b0:fd:c6:53:7c:bb:f7:92:76:49:88:e0:7c:
6a:01:10:af:a7:ac:e1:08:b1:8a:f2:89:c7:df:1f:
54:b7:3d:30:77:2f:49:4a:b4:38:1e:04:a9:8f:06:
52:12:d2:18:a4:0d:e3:e7:35:21:58:68:68:75:41:
9b:a8:3b:c0:3e:14:7e:59:4b:08:28:c5:8a:6e:a3:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:00:BA:86:20:48:01:69:FF:B6:10:56:DA:70:0F:DA:BC:37:AA
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.237.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4d:68:77:50:d5:3a:c0:95:53:9a:c1:f9:57:97:ac:46:ad:
f2:e2:8a:05:5d:c2:d1:cb:fa:da:18:da:3e:64:da:a5:38:14:
54:e3:33:9d:f0:aa:1a:e3:4e:c3:47:d7:8a:9e:18:fc:1f:05:
d0:f4:4d:d9:07:d6:1c:65:47:82:76:6b:f3:ab:e6:44:61:25:
f2:79:34:c9:4a:5a:60:9f:52:9a:b9:24:81:8f:c1:a8:3a:a9:
be:89:3f:97:8f:d6:25:e8:8f:15:a6:28:36:21:ee:64:f3:70:
f4:c9:29:11:8e:07:df:2e:2d:9e:3b:86:67:20:aa:c8:e7:e8:
ae:2b:e1:c6:89:3b:30:59:56:ac:f4:61:1e:34:e2:0e:ad:9f:
a0:c6:9d:e4:5f:b2:41:3b:30:4d:f2:32:e1:d7:6d:de:4d:fd:
e0:c6:14:9b:f5:70:9a:ce:97:0a:52:2a:8a:2d:a6:9c:38:71:
f8:06:ff:a7:e0:a3:ce:32:28:24:25:39:62:f0:8b:93:dd:5f:
74:e6:ed:bf:c4:d8:60:92:91:b8:25:1f:75:33:cc:a7:d1:83:
2d:02:47:f5:8f:41:69:92:95:82:8f:32:e7:a0:f4:3c:e3:2d:
f1:03:53:e3:d6:24:61:70:e6:49:32:a4:d5:3b:f2:2f:bb:0a:
78:2a:62:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEPFWMpUTuqFatX6szKteZjfjCV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTRaFw0yNTExMDYyMDQwMTRaMDMxMTAvBgNV
BAMTKDIwQ0MwMEJBODYyMDQ4MDE2OUZGQjYxMDU2REE3MDBGREFCQzM3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLht19J506zexORnOWaAquxuBb
go2+48bGXXa3nvRRP/UMU5i59SgxdKdcYH/eHo0b9lzVfKpvDiXnd0UXLhC7kf0b
02DCsRs/I8bwrAJJQdRs7o7M711QUm/VoqT/MF/vNeENm22Y5JqYdy2P3LiHZdY+
T/F+335y1gljDKNCWKm6yqGwX5mdNIx0wjfV73oYZ6eS520cKRt85aK3s0epfdKB
bWdOSRAvem7zPkXYXGj81emZsP3GU3y795J2SYjgfGoBEK+nrOEIsYryicffH1S3
PTB3L0lKtDgeBKmPBlIS0hikDePnNSFYaGh1QZuoO8A+FH5ZSwgoxYpuo8TBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIMwAuoYgSAFp/7YQVtpwD9q8N6owHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKeu0wDQYJKoZIhvcNAQELBQADggEBAANNaHdQ
1TrAlVOawflXl6xGrfLiigVdwtHL+toY2j5k2qU4FFTjM53wqhrjTsNH14qeGPwf
BdD0TdkH1hxlR4J2a/Or5kRhJfJ5NMlKWmCfUpq5JIGPwag6qb6JP5eP1iXojxWm
KDYh7mTzcPTJKRGOB98uLZ47hmcgqsjn6K4r4caJOzBZVqz0YR404g6tn6DGneRf
skE7ME3yMuHXbd5N/eDGFJv1cJrOlwpSKootppw4cfgG/6fgo84yKCQlOWLwi5Pd
X3Tm7b/E2GCSkbglH3UzzKfRgy0CR/WPQWmSlYKPMueg9DzjLfEDU+PWJGFw5kky
pNU78i+7CngqYtc=
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org