Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa
File: 3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: jXW5sj/I/o4057/J0pHkCnPFH52EX5kIGzurBrD5HU8=
Subject key identifier: 6A:21:1F:2B:F3:28:0B:9F:5E:90:E6:07:80:1C:8D:43:59:18:52:07
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 7588027994F42D76E6403213432F678B47292872
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:16 +0000
ROA not before: Thu 07 Nov 2024 20:35:16 +0000
ROA not after: Thu 06 Nov 2025 20:40:16 +0000
asID: 271724
IP address blocks: 143.255.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:88:02:79:94:f4:2d:76:e6:40:32:13:43:2f:67:8b:47:29:28:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=6A211F2BF3280B9F5E90E607801C8D4359185207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:46:41:5d:02:b3:59:53:44:9f:61:38:e1:
07:1b:bb:62:1a:2d:d3:35:fa:c6:e6:b0:0b:62:e8:
ba:d4:14:18:2c:20:d6:8c:fd:34:6c:ca:82:fb:77:
be:ef:f1:a5:1e:e3:11:7f:73:b1:2c:b6:84:49:61:
e6:96:31:9c:9a:1a:7a:b1:68:19:c2:1c:d9:a7:a7:
d7:34:49:43:50:f7:02:7c:4c:c2:4e:17:99:71:cf:
21:2f:e6:27:13:9b:ef:5b:06:64:54:8a:fa:ea:5d:
8c:1d:2c:ba:cc:2e:d8:c5:8f:77:da:26:0c:26:bb:
f6:eb:01:68:05:92:22:3c:cb:88:27:ca:d2:b7:f4:
5b:85:ee:7d:d6:4e:4c:93:fd:f1:31:44:a0:ad:54:
f0:de:8a:e6:64:6c:72:7c:58:ea:77:d3:15:aa:ec:
69:3f:36:7c:9a:1e:fa:e9:c1:7b:ad:a7:72:1b:53:
3f:87:38:e5:f2:9c:99:f8:12:f2:94:29:db:39:38:
e3:39:d8:d2:cb:17:15:cb:75:41:60:32:d2:54:ac:
8b:79:ce:b8:12:f3:6a:1e:3f:18:4a:28:4f:16:7b:
c9:19:27:19:03:20:40:da:fc:11:3b:1b:2b:59:5c:
42:d0:f0:13:a0:52:45:d2:ab:d5:7b:64:0b:45:9c:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:1F:2B:F3:28:0B:9F:5E:90:E6:07:80:1C:8D:43:59:18:52:07
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:46:38:c0:f8:ac:55:8b:28:32:9b:e7:01:01:65:8c:8e:b4:
ff:3c:88:32:d9:bd:94:72:c0:bf:ff:7f:d6:a4:59:89:47:a4:
53:31:49:51:e1:f9:f9:9b:c1:16:7e:ae:b2:77:f1:86:14:28:
62:2c:dd:17:33:51:84:ce:1f:48:ba:c4:4e:a4:d0:4a:13:d8:
a1:46:2a:d5:29:7a:b0:4a:82:50:2f:69:c9:a1:6c:f2:fd:81:
da:fe:83:57:d9:72:70:e0:a6:ee:ef:da:97:cb:cd:5b:b8:7d:
00:2a:d0:d1:78:bc:95:83:27:a3:36:62:8e:2c:30:d7:f3:03:
f2:54:f2:ca:be:08:1d:26:a8:2d:cf:4d:21:74:7b:f9:4a:2d:
45:29:b0:55:d5:19:f7:22:fd:28:92:65:89:ff:8e:98:b5:b9:
fa:65:fd:cd:4e:2c:0a:5e:2a:a3:fd:46:a3:0a:9a:24:b0:a7:
97:e4:00:f9:b4:cf:bf:d0:a5:52:2b:d4:a8:59:98:05:1d:22:
db:d6:dd:10:68:65:30:79:9f:e3:37:a3:c9:04:08:03:db:4d:
c6:f9:ba:98:86:52:09:95:3b:08:72:b7:8b:3f:fa:7a:e0:80:
49:5a:ca:9e:ee:89:88:b1:3b:27:59:50:ab:6e:1e:7a:2c:23:
23:73:16:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdYgCeZT0LXbmQDITQy9ni0cpKHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTZaFw0yNTExMDYyMDQwMTZaMDMxMTAvBgNV
BAMTKDZBMjExRjJCRjMyODBCOUY1RTkwRTYwNzgwMUM4RDQzNTkxODUyMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDUZBXQKzWVNEn2E44Qcbu2Ia
LdM1+sbmsAti6LrUFBgsINaM/TRsyoL7d77v8aUe4xF/c7EstoRJYeaWMZyaGnqx
aBnCHNmnp9c0SUNQ9wJ8TMJOF5lxzyEv5icTm+9bBmRUivrqXYwdLLrMLtjFj3fa
Jgwmu/brAWgFkiI8y4gnytK39FuF7n3WTkyT/fExRKCtVPDeiuZkbHJ8WOp30xWq
7Gk/NnyaHvrpwXutp3IbUz+HOOXynJn4EvKUKds5OOM52NLLFxXLdUFgMtJUrIt5
zrgS82oePxhKKE8We8kZJxkDIEDa/BE7GytZXELQ8BOgUkXSq9V7ZAtFnD5tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaiEfK/MoC59ekOYHgByNQ1kYUgcwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//cDANBgkqhkiG9w0BAQsFAAOCAQEAS0Y4
wPisVYsoMpvnAQFljI60/zyIMtm9lHLAv/9/1qRZiUekUzFJUeH5+ZvBFn6usnfx
hhQoYizdFzNRhM4fSLrETqTQShPYoUYq1Sl6sEqCUC9pyaFs8v2B2v6DV9lycOCm
7u/al8vNW7h9ACrQ0Xi8lYMnozZijiww1/MD8lTyyr4IHSaoLc9NIXR7+UotRSmw
VdUZ9yL9KJJlif+OmLW5+mX9zU4sCl4qo/1GowqaJLCnl+QA+bTPv9ClUivUqFmY
BR0i29bdEGhlMHmf4zejyQQIA9tNxvm6mIZSCZU7CHK3iz/6euCASVrKnu6JiLE7
J1lQq24eeiwjI3MWCw==
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org