Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: MDl15PyfCsBVpgK5wnMxE0cqDNX0Xl+T9mi6L6as1cM=
Subject key identifier: 4E:F0:4B:0E:8F:25:5B:FF:D7:5A:33:F0:52:9A:05:A0:90:62:FA:05
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 1D7B6D434E0A029ABE8D72E097000E2D6FEA173E
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 08 Apr 2024 20:06:52 +0000
ROA not before: Mon 08 Apr 2024 20:01:52 +0000
ROA not after: Mon 07 Apr 2025 20:06:52 +0000
asID: 271724
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7b:6d:43:4e:0a:02:9a:be:8d:72:e0:97:00:0e:2d:6f:ea:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:52 2024 GMT
Not After : Apr 7 20:06:52 2025 GMT
Subject: CN=4EF04B0E8F255BFFD75A33F0529A05A09062FA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:57:be:c6:fb:11:3e:32:24:28:94:d1:f6:
00:6e:79:46:3f:bf:85:1f:0c:be:d9:d0:48:bd:06:
37:8b:bb:e0:aa:72:c3:22:e9:d2:2c:f0:51:f1:43:
37:c5:b0:37:05:4f:c0:e9:45:9e:60:19:71:e9:8a:
74:75:86:ed:fc:5d:07:6d:14:22:4f:86:c2:83:d6:
38:16:73:ee:3e:78:16:12:7a:41:60:13:c0:da:56:
bd:9e:17:5c:36:86:ad:36:04:97:e3:f2:38:ae:91:
ac:00:eb:6c:62:72:9f:3e:6e:0b:16:e6:89:37:7d:
7c:7c:59:67:f4:a8:93:c3:05:94:db:11:3d:8c:b4:
ab:44:44:8c:0d:d2:9f:12:ee:91:c8:c6:24:15:22:
b5:b7:2d:e5:7a:38:a4:59:59:fa:94:47:68:62:08:
55:de:d1:bc:03:b8:80:20:b1:13:cc:37:ce:f4:d8:
a7:5a:2f:cf:e7:d2:06:ee:33:9e:6c:fd:80:ba:c3:
36:13:92:b2:fe:67:50:0b:09:26:ef:34:7b:fd:b8:
1f:18:8c:d6:5d:62:a9:37:a9:ea:a1:c7:ff:86:26:
db:e6:59:6d:93:eb:70:65:d9:dc:3b:db:f7:a7:f7:
d4:d0:9f:3b:cd:8b:72:e1:a0:91:a3:96:bb:4a:89:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:4B:0E:8F:25:5B:FF:D7:5A:33:F0:52:9A:05:A0:90:62:FA:05
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:b9:34:b5:3c:69:60:c2:87:a1:d5:f4:11:0e:b4:2c:97:88:
2a:e2:ee:a8:f3:cf:17:0e:32:a0:0b:6e:97:30:e0:cd:7e:d6:
aa:7f:d4:ae:d7:aa:c2:b3:d5:d3:a2:6a:43:af:66:ae:2c:93:
18:ed:1d:5b:70:29:29:37:63:e6:4e:5f:82:55:db:48:f3:98:
37:68:80:0d:1d:3d:fa:f0:fe:03:b4:8b:56:fc:da:09:a6:21:
0f:02:5d:63:31:f9:46:ce:10:8a:99:b0:63:d9:90:c2:b4:f5:
3a:a8:dd:6e:64:e2:8b:94:67:2a:18:e3:f8:5b:83:75:59:40:
43:be:ca:62:f8:64:1e:99:87:5b:dc:39:7a:5c:de:1a:7a:8a:
68:a2:f1:11:35:98:a6:8c:e8:f4:50:80:99:13:dd:17:fb:71:
9c:bc:2d:57:7f:6c:2e:68:00:a3:1c:fd:88:e0:44:54:f4:75:
3a:49:dd:a9:5e:0e:5d:60:07:75:a5:5b:e0:9d:00:37:5c:86:
64:c7:10:05:44:2e:96:df:b1:9e:6d:d1:47:39:ba:35:75:70:
08:36:f9:2d:61:93:32:e9:7a:1c:e4:68:54:02:6a:fb:8d:fd:
51:4a:d8:c4:f3:35:31:8a:20:64:e1:a5:cc:27:49:b0:c8:3c:
a2:56:2b:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHXttQ04KApq+jXLglwAOLW/qFz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTJaFw0yNTA0MDcyMDA2NTJaMDMxMTAvBgNV
BAMTKDRFRjA0QjBFOEYyNTVCRkZENzVBMzNGMDUyOUEwNUEwOTA2MkZBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmw1e+xvsRPjIkKJTR9gBueUY/
v4UfDL7Z0Ei9BjeLu+CqcsMi6dIs8FHxQzfFsDcFT8DpRZ5gGXHpinR1hu38XQdt
FCJPhsKD1jgWc+4+eBYSekFgE8DaVr2eF1w2hq02BJfj8jiukawA62xicp8+bgsW
5ok3fXx8WWf0qJPDBZTbET2MtKtERIwN0p8S7pHIxiQVIrW3LeV6OKRZWfqUR2hi
CFXe0bwDuIAgsRPMN8702KdaL8/n0gbuM55s/YC6wzYTkrL+Z1ALCSbvNHv9uB8Y
jNZdYqk3qeqhx/+GJtvmWW2T63Bl2dw72/en99TQnzvNi3LhoJGjlrtKiXknAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTvBLDo8lW//XWjPwUpoFoJBi+gUwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1fDANBgkqhkiG9w0BAQsFAAOCAQEAmrk0
tTxpYMKHodX0EQ60LJeIKuLuqPPPFw4yoAtulzDgzX7Wqn/UrteqwrPV06JqQ69m
riyTGO0dW3ApKTdj5k5fglXbSPOYN2iADR09+vD+A7SLVvzaCaYhDwJdYzH5Rs4Q
ipmwY9mQwrT1OqjdbmTii5RnKhjj+FuDdVlAQ77KYvhkHpmHW9w5elzeGnqKaKLx
ETWYpozo9FCAmRPdF/txnLwtV39sLmgAoxz9iOBEVPR1OkndqV4OXWAHdaVb4J0A
N1yGZMcQBUQult+xnm3RRzm6NXVwCDb5LWGTMul6HORoVAJq+439UUrYxPM1MYog
ZOGlzCdJsMg8olYryg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org