Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: DGAVRXmXwvDt3WFVOhisSk/OzFl3z1pld/jjDbb0V5o=
Subject key identifier: C8:26:84:9F:FE:D5:40:58:3E:5B:5D:4D:C3:6F:84:96:28:53:D4:B9
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 1B709AF1C45B973771033DCD1FABD26593C99E70
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 28270
IP address blocks: 168.121.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:70:9a:f1:c4:5b:97:37:71:03:3d:cd:1f:ab:d2:65:93:c9:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=C826849FFED540583E5B5D4DC36F84962853D4B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:25:01:55:56:25:67:db:ad:73:85:2c:9c:
82:43:1f:fb:58:c9:0a:a1:f0:df:6d:fe:b0:fa:f1:
84:c5:fc:59:44:ae:42:bf:42:1a:dc:f2:15:88:0e:
05:ed:bd:c3:62:10:e6:29:da:26:22:34:8a:50:2d:
2c:30:74:15:66:b7:10:90:8e:1d:a6:68:c1:cf:6a:
f0:cd:02:59:fb:21:47:ec:18:7e:b4:29:2a:91:97:
6b:dc:c2:e3:57:51:e4:6c:75:07:36:ac:fa:26:e3:
fa:e6:cf:d8:6d:a7:fc:7d:dd:9e:20:5d:3f:eb:07:
00:2c:0d:86:f9:27:38:1d:44:a9:75:29:9c:19:f4:
3e:8e:41:77:8f:52:58:58:d7:42:7f:2c:9f:1a:e2:
ab:28:31:8f:49:93:b4:da:b5:ff:87:cb:43:be:8e:
4f:5f:ae:90:6d:3c:64:18:d3:da:06:c9:55:50:93:
6e:fe:dc:27:54:7f:63:4e:ac:e4:d5:58:7e:09:15:
3d:c0:e7:e9:ba:0c:41:3a:aa:7c:af:b0:80:1e:cd:
79:0b:c9:f5:e6:56:d7:96:28:48:f6:3e:11:a6:ce:
e1:55:aa:5b:68:ac:09:6c:8a:c6:9e:af:2a:6a:2f:
f3:ac:5e:3c:fd:9f:39:d1:9c:04:80:d3:46:0f:95:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:84:9F:FE:D5:40:58:3E:5B:5D:4D:C3:6F:84:96:28:53:D4:B9
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:98:5e:9c:fb:6c:8b:e1:a0:f0:1b:1a:1e:6f:f2:d0:af:ba:
d5:03:ff:1f:cd:a0:36:a8:4d:1d:97:79:48:d9:c7:a5:ce:d4:
1e:cd:0a:32:e0:f8:80:05:c8:d0:ab:3b:ff:0a:3a:74:fe:b0:
73:b6:8d:bb:81:81:1d:00:cb:5d:57:ef:23:e7:d0:d3:77:d8:
d6:e5:ae:fd:15:33:66:97:43:46:81:37:cf:3e:71:39:02:09:
4d:9e:90:3e:69:d6:1c:0a:ae:71:4c:16:81:3f:be:42:5a:8f:
bf:cd:a5:89:de:af:2a:12:45:a1:07:4d:b7:92:d7:fc:13:bf:
e3:bc:b5:07:aa:3b:0c:2c:e3:a2:41:16:34:ca:44:3e:77:97:
d2:d7:6b:e5:26:4f:b2:4e:92:36:d4:a9:06:f7:f9:7e:d5:94:
d0:08:dc:57:67:69:35:a9:af:14:1c:b5:3f:4f:d3:57:7c:d7:
9f:ed:de:8a:d7:a0:bc:e7:b9:2c:85:65:93:bb:60:8f:ea:c5:
ca:59:7a:fc:a5:d7:7d:ce:f9:48:d6:0b:4f:00:91:c1:87:7f:
74:66:fc:86:1c:a9:e8:54:ce:73:c6:9d:5b:e6:62:a9:34:bf:
90:8f:4e:33:19:55:12:62:cf:28:0a:86:1f:39:a9:62:89:0b:
25:1c:a6:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG3Ca8cRblzdxAz3NH6vSZZPJnnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTFaFw0yNTEwMTMwMTQ5NTFaMDMxMTAvBgNV
BAMTKEM4MjY4NDlGRkVENTQwNTgzRTVCNUQ0REMzNkY4NDk2Mjg1M0Q0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuSUBVVYlZ9utc4UsnIJDH/tY
yQqh8N9t/rD68YTF/FlErkK/Qhrc8hWIDgXtvcNiEOYp2iYiNIpQLSwwdBVmtxCQ
jh2maMHPavDNAln7IUfsGH60KSqRl2vcwuNXUeRsdQc2rPom4/rmz9htp/x93Z4g
XT/rBwAsDYb5JzgdRKl1KZwZ9D6OQXePUlhY10J/LJ8a4qsoMY9Jk7Tatf+Hy0O+
jk9frpBtPGQY09oGyVVQk27+3CdUf2NOrOTVWH4JFT3A5+m6DEE6qnyvsIAezXkL
yfXmVteWKEj2PhGmzuFVqltorAlsisaerypqL/OsXjz9nznRnASA00YPlUMHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyCaEn/7VQFg+W11Nw2+ElihT1LkwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNjM4MmUzMTMyMzEyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqHk1MA0GCSqGSIb3DQEBCwUAA4IBAQBymF6c+2yL
4aDwGxoeb/LQr7rVA/8fzaA2qE0dl3lI2celztQezQoy4PiABcjQqzv/Cjp0/rBz
to27gYEdAMtdV+8j59DTd9jW5a79FTNml0NGgTfPPnE5AglNnpA+adYcCq5xTBaB
P75CWo+/zaWJ3q8qEkWhB023ktf8E7/jvLUHqjsMLOOiQRY0ykQ+d5fS12vlJk+y
TpI21KkG9/l+1ZTQCNxXZ2k1qa8UHLU/T9NXfNef7d6K16C857kshWWTu2CP6sXK
WXr8pdd9zvlI1gtPAJHBh390ZvyGHKnoVM5zxp1b5mKpNL+Qj04zGVUSYs8oCoYf
OaliiQslHKYV
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:19:44 2025 by rpki-client