Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
File: 3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier: IOkw+nkh4yLMTnT4VWJnfiUXIxdLLLFgWT0x+bWNF8A=
Subject key identifier: 2A:D0:0D:9F:DB:43:B9:6F:46:15:F0:2F:63:AB:9F:9C:73:56:5A:B9
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 26E89142C15821D8BB21B731C6BB823B2CC70657
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
Signing time: Wed 01 Mar 2023 13:40:30 +0000
ROA not before: Wed 01 Mar 2023 13:35:30 +0000
ROA not after: Wed 28 Feb 2024 13:40:30 +0000
asID: 262992
IP address blocks: 168.228.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e8:91:42:c1:58:21:d8:bb:21:b7:31:c6:bb:82:3b:2c:c7:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Mar 1 13:35:30 2023 GMT
Not After : Feb 28 13:40:30 2024 GMT
Subject: CN=2AD00D9FDB43B96F4615F02F63AB9F9C73565AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:fd:c7:14:79:02:84:32:16:c9:13:39:29:
91:00:d2:8f:44:53:ad:50:75:d2:f3:cc:66:4b:88:
c9:38:b8:75:20:f9:a5:72:fa:c3:02:11:e0:0d:51:
c2:34:f2:bb:b6:8c:ba:03:10:8d:27:bd:74:b0:f2:
db:02:28:be:3f:68:16:b1:c7:0d:a1:84:b1:f7:18:
08:5b:bd:02:7a:a3:b6:78:07:93:f5:21:1f:99:8f:
17:17:03:82:4e:10:0b:2c:f8:fb:04:59:bb:97:3d:
36:84:f2:42:87:95:68:e2:78:4f:25:94:67:a5:d6:
69:cb:6b:8f:f4:52:1a:11:35:e1:8e:d7:6e:71:fa:
1a:a1:61:51:15:1b:d4:62:6c:5f:58:9c:16:a2:75:
21:01:2a:10:68:d0:22:85:31:47:cb:af:41:28:a6:
4c:31:5d:72:63:d6:ad:c9:c2:09:9f:a6:95:3a:5b:
6e:21:5c:15:a2:4d:f5:0f:6e:4d:ad:af:eb:8e:c8:
2b:d7:56:47:fb:3a:95:a4:7f:25:24:b7:5f:4f:bc:
80:d8:38:85:2c:10:6b:57:9a:7d:88:28:3d:f4:17:
3f:96:e9:9c:24:ae:f0:b3:bc:42:c7:af:2c:c6:9b:
65:4f:e2:94:29:69:b7:6a:ce:91:8e:2e:04:ed:b4:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:0D:9F:DB:43:B9:6F:46:15:F0:2F:63:AB:9F:9C:73:56:5A:B9
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
da:4c:48:a3:1c:46:9e:87:5f:eb:ed:07:14:8f:4d:c1:62:2e:
ca:00:01:3b:bc:0d:b1:b0:f7:39:f4:4c:31:a3:16:27:89:a9:
be:ff:c0:28:91:4c:96:44:69:3f:2e:3a:92:7f:0a:26:23:cd:
80:b3:fb:15:ca:37:35:db:bc:31:fc:22:3c:bb:ec:96:52:bd:
52:dc:42:67:4e:bd:c5:4a:4c:24:9b:83:61:91:ae:76:e9:64:
44:9e:2e:47:6e:4b:57:0d:ed:16:b8:cc:38:ea:75:59:e1:84:
8e:0f:39:78:92:7e:f9:9c:4f:eb:ce:55:d8:7c:d1:65:76:c5:
4a:20:88:36:1f:67:3b:e8:ee:91:5b:f6:bb:8d:a9:5f:f5:fb:
e3:c7:e4:f0:b5:cc:d6:36:b0:e6:8b:f3:c4:ee:b2:29:4f:a6:
54:3b:24:23:1e:74:27:91:6a:ef:bb:2a:95:cc:90:17:ed:9d:
37:2f:ab:e3:dd:fc:a9:b6:e8:cf:d7:ac:8b:2c:c1:5a:e0:f1:
54:52:e7:31:c0:c1:a4:15:e5:8c:f3:c4:94:f5:c4:c3:b2:45:
c2:8a:2e:e9:e7:77:5b:22:40:11:7c:d6:d3:32:ba:54:8c:49:
53:e2:f1:d5:1d:5f:18:84:91:2d:5f:06:dc:a2:91:ff:c5:ef:
d3:8e:2e:d4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJuiRQsFYIdi7IbcxxruCOyzHBlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yMzAzMDExMzM1MzBaFw0yNDAyMjgxMzQwMzBaMDMxMTAvBgNV
BAMTKDJBRDAwRDlGREI0M0I5NkY0NjE1RjAyRjYzQUI5RjlDNzM1NjVBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggP3HFHkChDIWyRM5KZEA0o9E
U61QddLzzGZLiMk4uHUg+aVy+sMCEeANUcI08ru2jLoDEI0nvXSw8tsCKL4/aBax
xw2hhLH3GAhbvQJ6o7Z4B5P1IR+ZjxcXA4JOEAss+PsEWbuXPTaE8kKHlWjieE8l
lGel1mnLa4/0UhoRNeGO125x+hqhYVEVG9RibF9YnBaidSEBKhBo0CKFMUfLr0Eo
pkwxXXJj1q3JwgmfppU6W24hXBWiTfUPbk2tr+uOyCvXVkf7OpWkfyUkt19PvIDY
OIUsEGtXmn2IKD30Fz+W6ZwkrvCzvELHryzGm2VP4pQpabdqzpGOLgTttAexAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKtANn9tDuW9GFfAvY6ufnHNWWrkwHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNjM4MmUzMjMyMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjkgDANBgkqhkiG9w0BAQsFAAOCAQEA2kxI
oxxGnodf6+0HFI9NwWIuygABO7wNsbD3OfRMMaMWJ4mpvv/AKJFMlkRpPy46kn8K
JiPNgLP7Fco3Ndu8MfwiPLvsllK9UtxCZ069xUpMJJuDYZGudulkRJ4uR25LVw3t
FrjMOOp1WeGEjg85eJJ++ZxP685V2HzRZXbFSiCINh9nO+jukVv2u42pX/X748fk
8LXM1jaw5ovzxO6yKU+mVDskIx50J5Fq77sqlcyQF+2dNy+r4938qbboz9esiyzB
WuDxVFLnMcDBpBXljPPElPXEw7JFwoou6ed3WyJAEXzW0zK6VIxJU+Lx1R1fGISR
LV8G3KKR/8Xv044u1A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:02 2025 by rpki-client