Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e203238323730.roa
File: 3136382e3132312e35322e302f32322d3234203d3e203238323730.roa (raw, json)
Hash identifier: fbeqKF+DXhj/DcSGF89w7dWZDqZsiheaxYTjDkbR37c=
Subject key identifier: AB:CF:41:80:DE:0B:C8:B1:F9:6A:53:46:26:F3:90:56:10:B0:E3:B4
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 23B7639CC1BA1A1309FF6BE1A57701D550DA32B7
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e203238323730.roa
Signing time: Thu 22 Feb 2024 04:17:04 +0000
ROA not before: Thu 22 Feb 2024 04:12:04 +0000
ROA not after: Thu 20 Feb 2025 04:17:04 +0000
asID: 28270
IP address blocks: 168.121.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b7:63:9c:c1:ba:1a:13:09:ff:6b:e1:a5:77:01:d5:50:da:32:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Feb 22 04:12:04 2024 GMT
Not After : Feb 20 04:17:04 2025 GMT
Subject: CN=ABCF4180DE0BC8B1F96A534626F3905610B0E3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:9d:b6:d5:38:a7:97:8a:0a:7b:2e:82:19:
84:a2:16:0b:66:1d:d4:0f:47:3e:f2:7a:26:db:66:
50:40:78:7a:22:61:09:11:e7:49:ae:ca:e6:6f:72:
d8:33:98:69:0e:00:f8:3b:45:b2:c7:e3:7f:35:76:
60:3b:e1:09:4a:5e:e3:6b:85:2f:39:79:a2:59:b6:
e5:80:cf:69:77:79:fe:a4:92:3c:a4:86:f5:6a:94:
7a:40:e0:37:68:a4:d2:28:1e:d0:97:ca:73:7c:bf:
46:15:f5:eb:ef:c3:bc:99:c3:e6:28:53:26:21:9c:
f4:50:1a:b7:f7:48:4b:15:fc:48:18:04:44:4a:82:
cb:82:e3:67:28:4f:25:f1:40:af:58:58:c7:50:4e:
f8:32:ee:23:12:a2:2f:c5:03:0e:d9:8e:77:22:2d:
4e:ff:20:a9:07:0a:8b:de:33:d7:54:2a:2c:11:a4:
ae:e0:f5:8d:0f:04:9c:00:9f:d0:16:09:ad:82:a7:
0c:fa:bd:6f:2d:26:8a:09:c9:03:30:49:05:b0:8a:
98:c6:25:31:f4:e0:3b:13:6e:eb:fa:b2:d7:5e:50:
29:6f:2a:13:92:3d:37:67:c9:ed:1f:a5:fc:1b:94:
22:39:de:e7:99:f2:3b:d0:92:41:19:0e:35:87:73:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:41:80:DE:0B:C8:B1:F9:6A:53:46:26:F3:90:56:10:B0:E3:B4
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:a6:f6:f9:de:2d:61:55:81:67:3c:59:0b:f7:9e:b1:0e:05:
f6:dc:9f:63:ac:6b:e7:b5:c8:18:a7:37:b9:06:f9:bb:b6:0a:
b0:59:22:c1:64:70:dd:0f:e0:b8:3e:3b:ad:bf:a1:46:85:4f:
47:84:53:28:32:b3:de:1b:33:ef:a2:15:9a:7a:e1:54:b4:09:
be:c2:ea:f0:06:22:78:1c:c1:08:7c:92:16:90:52:67:ab:4a:
22:31:71:75:cd:b3:d3:85:8f:12:ca:6f:fd:16:65:38:72:a6:
dd:65:27:b2:e5:f6:09:3f:32:ac:b1:c0:fc:fd:07:19:cc:75:
ad:15:19:38:f2:3e:1f:c9:08:0b:00:2a:7d:fe:d3:93:06:2a:
8f:69:7a:88:4f:f6:98:0a:51:2e:e1:b2:6f:52:62:57:df:77:
da:80:02:fd:a9:9a:2b:3d:09:75:17:de:bf:ca:ed:e6:fb:bd:
9c:f8:fb:30:d9:71:f8:e6:37:80:b3:ac:09:14:30:c3:73:77:
e1:be:68:6f:c8:54:68:be:81:f3:43:41:a8:77:60:47:14:fd:
2c:79:30:dc:59:d7:3b:3a:74:b0:63:19:8f:47:bb:ff:32:71:
d3:df:69:6b:c1:eb:24:c6:37:61:cd:7b:87:75:91:d3:48:ff:
bd:0d:a1:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI7djnMG6GhMJ/2vhpXcB1VDaMrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yNDAyMjIwNDEyMDRaFw0yNTAyMjAwNDE3MDRaMDMxMTAvBgNV
BAMTKEFCQ0Y0MTgwREUwQkM4QjFGOTZBNTM0NjI2RjM5MDU2MTBCMEUzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ip221Tinl4oKey6CGYSiFgtm
HdQPRz7yeibbZlBAeHoiYQkR50muyuZvctgzmGkOAPg7RbLH4381dmA74QlKXuNr
hS85eaJZtuWAz2l3ef6kkjykhvVqlHpA4DdopNIoHtCXynN8v0YV9evvw7yZw+Yo
UyYhnPRQGrf3SEsV/EgYBERKgsuC42coTyXxQK9YWMdQTvgy7iMSoi/FAw7Zjnci
LU7/IKkHCoveM9dUKiwRpK7g9Y0PBJwAn9AWCa2Cpwz6vW8tJooJyQMwSQWwipjG
JTH04DsTbuv6stdeUClvKhOSPTdnye0fpfwblCI53ueZ8jvQkkEZDjWHc4n/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq89BgN4LyLH5alNGJvOQVhCw47QwHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNjM4MmUzMTMyMzEyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqHk0MA0GCSqGSIb3DQEBCwUAA4IBAQCjpvb53i1h
VYFnPFkL956xDgX23J9jrGvntcgYpze5Bvm7tgqwWSLBZHDdD+C4Pjutv6FGhU9H
hFMoMrPeGzPvohWaeuFUtAm+wurwBiJ4HMEIfJIWkFJnq0oiMXF1zbPThY8Sym/9
FmU4cqbdZSey5fYJPzKsscD8/QcZzHWtFRk48j4fyQgLACp9/tOTBiqPaXqIT/aY
ClEu4bJvUmJX33fagAL9qZorPQl1F96/yu3m+72c+Psw2XH45jeAs6wJFDDDc3fh
vmhvyFRovoHzQ0God2BHFP0seTDcWdc7OnSwYxmPR7v/MnHT32lrweskxjdhzXuH
dZHTSP+9DaEj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org