Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
File: 3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier: V3ffBxusZmCqDcCtH4hflbzBQvn8x+hx3iBU9JT8z8I=
Subject key identifier: AF:B7:F6:70:4B:40:57:3A:2D:EA:71:55:95:DA:C2:FB:75:53:F8:61
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 35E9B3544EE5D38B89337BCA991FFA01E246D99A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 179.191.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e9:b3:54:4e:e5:d3:8b:89:33:7b:ca:99:1f:fa:01:e2:46:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=AFB7F6704B40573A2DEA715595DAC2FB7553F861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:7d:ca:5a:ae:ec:d1:fa:8a:67:59:a3:a8:
bb:e6:96:d7:44:43:03:eb:35:05:af:c1:9d:64:cc:
d5:b0:e4:73:92:46:f5:11:45:35:de:ee:37:e3:10:
0b:89:ea:53:5a:04:66:55:f3:91:8f:42:bb:f3:d2:
2b:94:37:76:a6:8c:1b:5e:84:2a:71:5b:c6:13:84:
67:98:eb:98:b0:9d:52:04:5e:e3:6d:fe:a3:66:d9:
d6:05:9d:91:c8:13:6c:f4:f6:5b:5d:cb:d9:eb:ab:
f1:76:c6:d8:fb:a5:0c:65:d3:8b:61:7e:11:7d:9a:
1a:b2:c4:f8:8e:87:eb:1d:a9:c0:aa:fc:f1:40:b3:
97:6e:34:39:42:21:8f:4a:a1:b5:4f:9b:88:65:52:
0a:d4:5f:2d:05:ee:01:d1:14:47:d1:65:c2:49:6a:
19:31:b9:1a:c7:6e:e6:d2:33:1f:31:0e:72:8d:9c:
37:c0:fc:c0:d2:49:b0:52:6c:f4:8a:43:d1:6a:ad:
cd:80:d3:8f:8c:1e:7f:c0:16:5b:d6:42:35:d2:94:
73:f4:07:1a:66:20:53:85:7b:43:8b:14:90:30:71:
df:71:45:19:37:3c:70:b4:79:db:79:fc:43:ae:87:
b9:59:2d:e3:04:77:e8:23:28:55:ff:6a:57:dd:c9:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:F6:70:4B:40:57:3A:2D:EA:71:55:95:DA:C2:FB:75:53:F8:61
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.191.128.0/20
Signature Algorithm: sha256WithRSAEncryption
99:79:ad:b8:3f:4e:e8:fb:36:0e:a9:fe:94:83:d8:ce:2b:85:
ea:d7:f2:55:50:10:e9:c2:17:f0:93:36:3a:0c:c6:d3:9e:1e:
44:0a:b3:78:ff:4a:12:41:01:e4:60:82:85:c3:fd:bc:a4:d3:
86:e5:9e:cb:30:4e:0f:7e:33:d8:89:08:11:04:53:5b:c5:40:
b9:b2:d0:cd:4c:40:06:4b:16:df:c5:39:53:d2:4d:f6:e2:4f:
81:e3:7f:39:6c:47:e5:21:8d:07:47:64:4f:d0:35:3a:e3:11:
5b:f9:eb:7c:8d:0e:ae:6b:f6:c3:21:41:d4:48:ee:03:fb:cc:
99:bb:71:81:9b:d8:8f:0f:79:04:66:3f:d9:bc:a7:41:f9:a2:
62:c4:23:0a:10:a3:bf:87:16:3b:92:fd:1e:26:78:08:e1:93:
15:10:30:97:76:75:e6:09:de:17:cc:ad:19:28:e8:5c:cd:0e:
4e:89:cc:69:58:8f:b9:6f:e5:70:27:03:97:01:89:cc:29:2f:
0f:04:e8:e9:81:98:05:66:d0:ea:4a:16:31:c8:56:6f:8a:3f:
9c:c8:aa:f7:d7:7f:ed:9f:1f:82:1f:c7:77:d9:f5:c3:7d:36:
f2:a3:50:c8:57:66:e1:92:28:49:5a:7d:04:3e:0b:84:cc:b7:
4d:c0:f8:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNemzVE7l04uJM3vKmR/6AeJG2ZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTRaFw0yNTExMDYyMDQwMTRaMDMxMTAvBgNV
BAMTKEFGQjdGNjcwNEI0MDU3M0EyREVBNzE1NTk1REFDMkZCNzU1M0Y4NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpL33KWq7s0fqKZ1mjqLvmltdE
QwPrNQWvwZ1kzNWw5HOSRvURRTXe7jfjEAuJ6lNaBGZV85GPQrvz0iuUN3amjBte
hCpxW8YThGeY65iwnVIEXuNt/qNm2dYFnZHIE2z09ltdy9nrq/F2xtj7pQxl04th
fhF9mhqyxPiOh+sdqcCq/PFAs5duNDlCIY9KobVPm4hlUgrUXy0F7gHRFEfRZcJJ
ahkxuRrHbubSMx8xDnKNnDfA/MDSSbBSbPSKQ9Fqrc2A04+MHn/AFlvWQjXSlHP0
BxpmIFOFe0OLFJAwcd9xRRk3PHC0edt5/EOuh7lZLeMEd+gjKFX/alfdydvdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr7f2cEtAVzot6nFVldrC+3VT+GEwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzv4AwDQYJKoZIhvcNAQELBQADggEBAJl5rbg/
Tuj7Ng6p/pSD2M4rherX8lVQEOnCF/CTNjoMxtOeHkQKs3j/ShJBAeRggoXD/byk
04blnsswTg9+M9iJCBEEU1vFQLmy0M1MQAZLFt/FOVPSTfbiT4HjfzlsR+UhjQdH
ZE/QNTrjEVv563yNDq5r9sMhQdRI7gP7zJm7cYGb2I8PeQRmP9m8p0H5omLEIwoQ
o7+HFjuS/R4meAjhkxUQMJd2deYJ3hfMrRko6FzNDk6JzGlYj7lv5XAnA5cBicwp
Lw8E6OmBmAVm0OpKFjHIVm+KP5zIqvfXf+2fH4Ifx3fZ9cN9NvKjUMhXZuGSKEla
fQQ+C4TMt03A+Og=
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org