Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: KPQ2z/FGVR23FHqFMMz8mQio5Z/Q2cWKZ4gyhoGRteo=
Subject key identifier: DE:B3:07:D4:A1:FA:2B:7E:EB:1C:85:F0:EE:53:8B:69:E7:E1:C9:70
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 6B53833082D238CCEDAA532CA402BB924F8D00EA
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:59 +0000
ROA not before: Mon 08 Apr 2024 20:01:59 +0000
ROA not after: Mon 07 Apr 2025 20:06:59 +0000
asID: 28270
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:53:83:30:82:d2:38:cc:ed:aa:53:2c:a4:02:bb:92:4f:8d:00:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:59 2024 GMT
Not After : Apr 7 20:06:59 2025 GMT
Subject: CN=DEB307D4A1FA2B7EEB1C85F0EE538B69E7E1C970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:67:2f:23:4e:3a:ac:00:ef:74:31:ab:05:
54:86:e1:55:c3:e8:6b:53:7e:e8:d9:2a:39:07:31:
4a:4a:2b:9b:8f:cd:e7:9a:cc:03:40:60:c9:ab:5e:
c6:d4:b9:80:b2:82:67:4d:e5:be:10:84:71:f9:eb:
64:4d:e9:7a:7e:de:21:51:da:b2:a5:f6:fc:13:28:
6c:81:be:18:5d:fa:a0:59:5a:e4:cd:d9:34:59:81:
fa:a1:7f:df:be:f0:6a:03:7b:92:db:47:cd:0a:5d:
4a:0b:d0:9b:49:58:4f:b7:93:04:7b:3e:45:34:87:
1e:31:5c:d3:f4:d6:cc:03:b4:ec:4c:fa:92:17:d1:
71:eb:37:c4:c3:bc:f2:7e:7b:49:d3:6a:71:aa:a9:
f0:1c:e8:7a:52:b0:d0:7e:95:11:35:c1:2a:15:f1:
2e:12:d9:09:d6:ec:ee:f3:fa:86:de:90:26:c5:6a:
d4:20:41:49:68:58:52:eb:4e:2e:2d:f2:54:ae:6b:
13:b4:2d:30:ae:75:7e:cf:a0:60:c9:52:99:4e:42:
1d:7b:e4:fc:bc:69:4d:9e:84:48:9f:91:83:e3:2e:
86:b8:37:81:35:2b:20:e9:70:be:64:aa:3a:ac:23:
e3:1d:d6:76:3f:0f:e3:bd:2b:89:87:94:61:3f:4a:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:07:D4:A1:FA:2B:7E:EB:1C:85:F0:EE:53:8B:69:E7:E1:C9:70
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a9:33:cb:9f:fa:a5:29:d8:55:35:e2:c3:12:da:a4:c9:cb:
88:5e:86:7f:9a:1e:ab:7f:4f:72:70:c3:ab:1d:9e:7a:d2:eb:
c1:21:f9:70:f1:94:ba:c0:94:74:86:0f:c4:a9:c7:d9:ad:a3:
53:ef:3e:27:4e:7f:16:51:b9:43:e4:9a:e1:46:80:16:65:87:
f8:f0:ba:1a:7c:38:8e:14:b2:46:0b:ac:46:8b:d5:74:c5:bb:
19:56:7b:ff:44:3f:d2:4f:c0:c2:f6:db:95:29:5b:a4:0a:48:
a1:14:94:f7:cf:84:73:87:a8:6c:0d:0a:0d:15:8c:4e:3d:ed:
91:5e:0e:1a:2b:16:01:97:66:6d:70:32:a0:ba:e4:27:f1:b6:
98:f7:78:67:88:0e:17:d0:1a:d5:23:cf:96:1c:ec:67:5d:44:
d7:68:b3:3c:3c:32:0e:de:6d:9d:d7:6a:d4:25:0f:02:96:4b:
18:74:d8:1d:23:76:08:73:b8:0e:b0:98:0a:60:59:06:b9:61:
6d:47:73:c8:e3:d6:8e:2f:bd:b1:02:e7:50:bd:d1:8f:e0:73:
9d:ea:29:28:b5:e4:32:ec:10:ae:0e:b1:14:e5:83:ef:f3:26:
65:a0:76:46:0d:9b:10:49:d8:4c:0d:c6:8e:bb:df:46:42:a8:
ac:a7:b6:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa1ODMILSOMztqlMspAK7kk+NAOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTlaFw0yNTA0MDcyMDA2NTlaMDMxMTAvBgNV
BAMTKERFQjMwN0Q0QTFGQTJCN0VFQjFDODVGMEVFNTM4QjY5RTdFMUM5NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgGcvI046rADvdDGrBVSG4VXD
6GtTfujZKjkHMUpKK5uPzeeazANAYMmrXsbUuYCygmdN5b4QhHH562RN6Xp+3iFR
2rKl9vwTKGyBvhhd+qBZWuTN2TRZgfqhf9++8GoDe5LbR80KXUoL0JtJWE+3kwR7
PkU0hx4xXNP01swDtOxM+pIX0XHrN8TDvPJ+e0nTanGqqfAc6HpSsNB+lRE1wSoV
8S4S2QnW7O7z+obekCbFatQgQUloWFLrTi4t8lSuaxO0LTCudX7PoGDJUplOQh17
5Py8aU2ehEifkYPjLoa4N4E1KyDpcL5kqjqsI+Md1nY/D+O9K4mHlGE/SukNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3rMH1KH6K37rHIXw7lOLaefhyXAwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdXwwDQYJKoZIhvcNAQELBQADggEBACOpM8uf
+qUp2FU14sMS2qTJy4hehn+aHqt/T3Jww6sdnnrS68Eh+XDxlLrAlHSGD8Spx9mt
o1PvPidOfxZRuUPkmuFGgBZlh/jwuhp8OI4UskYLrEaL1XTFuxlWe/9EP9JPwML2
25UpW6QKSKEUlPfPhHOHqGwNCg0VjE497ZFeDhorFgGXZm1wMqC65Cfxtpj3eGeI
DhfQGtUjz5Yc7GddRNdoszw8Mg7ebZ3XatQlDwKWSxh02B0jdghzuA6wmApgWQa5
YW1Hc8jj1o4vvbEC51C90Y/gc53qKSi15DLsEK4OsRTlg+/zJmWgdkYNmxBJ2EwN
xo6730ZCqKyntqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org