Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
File: 3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: CYCbXFehw7wjYSLIoicAiDK4xMSXGi+mdxSYcfQT0KY=
Subject key identifier: 49:91:D2:CD:19:54:23:F4:EF:21:B4:CA:AB:9F:F5:FB:DA:4E:F5:5B
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 37C0D051641EE1981E6238F5FCBD6B9C5E47274B
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 08 Apr 2024 20:07:02 +0000
ROA not before: Mon 08 Apr 2024 20:02:02 +0000
ROA not after: Mon 07 Apr 2025 20:07:02 +0000
asID: 271724
IP address blocks: 170.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c0:d0:51:64:1e:e1:98:1e:62:38:f5:fc:bd:6b:9c:5e:47:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:02 2024 GMT
Not After : Apr 7 20:07:02 2025 GMT
Subject: CN=4991D2CD195423F4EF21B4CAAB9FF5FBDA4EF55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:6e:b1:84:a5:4e:1a:8c:e1:b4:2a:89:a0:
15:ec:2a:bb:fc:bf:d1:d8:e2:64:36:6c:c3:a7:b4:
a7:ee:14:cc:23:29:aa:2f:73:e8:a7:74:7c:31:22:
6c:44:10:c6:e4:a1:56:fe:6d:8d:f6:fd:27:2b:96:
6a:cb:66:af:24:97:a3:bc:30:03:4e:1d:a0:10:78:
1b:8d:ce:87:af:ae:2b:70:e4:5a:d1:70:e0:4d:ec:
c9:94:28:43:81:e1:93:82:81:8d:79:12:34:90:43:
40:17:ec:9f:db:1e:dd:2f:f1:21:40:68:42:76:b7:
70:10:29:41:c6:ac:ff:49:0e:47:bf:41:29:f6:16:
0f:30:05:ee:57:f5:5b:98:7a:c7:09:a4:fc:a8:24:
d0:e4:7e:41:09:c5:f6:be:96:bb:45:28:95:eb:6e:
10:6e:02:db:91:65:44:65:57:4d:d0:a2:7f:76:34:
01:4e:c8:c6:42:6c:75:6f:61:9a:52:ea:41:8d:29:
a9:b5:a8:77:4d:ff:b4:8a:f6:b4:82:38:b7:63:ca:
89:01:63:9d:0b:14:61:db:e0:05:d0:86:6d:7b:39:
7f:17:ba:50:83:b4:dc:86:43:1a:2e:7a:2b:bd:f5:
0a:f9:1c:77:9a:69:82:bc:e4:57:2a:26:0e:73:17:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:D2:CD:19:54:23:F4:EF:21:B4:CA:AB:9F:F5:FB:DA:4E:F5:5B
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1d:5b:57:fa:b8:38:a2:fe:a2:47:a2:7e:e2:c0:8d:5e:45:
34:13:b9:b9:a6:f5:6c:ed:ac:04:58:29:a4:e1:2f:eb:55:71:
b1:2a:c6:f9:9a:2f:f4:02:e8:fb:ac:02:a7:93:40:2c:66:34:
85:c7:c8:57:3e:fc:f4:33:69:0a:f8:90:bd:46:c1:a9:c7:c1:
0d:0c:13:58:fc:27:d3:0a:85:7c:c8:9f:ba:e5:93:e6:3d:a4:
b5:3e:7c:af:ba:90:47:9b:60:36:d2:33:32:61:4a:1b:bc:1b:
46:fc:61:32:93:03:3a:1b:63:1a:7b:50:48:67:e6:3d:a1:86:
68:6a:75:99:5d:87:0e:3e:51:9b:ab:89:4e:87:74:ad:50:57:
88:0a:ca:24:48:96:27:1c:95:d1:6d:53:2e:98:ee:48:9a:fc:
bc:d0:e4:9b:81:62:53:43:8f:07:d2:56:dc:d9:63:a1:c5:59:
39:e1:a7:b6:22:5a:63:8b:bc:cb:64:0c:4f:d2:f5:ca:59:63:
b2:d3:f8:c0:e3:d9:46:cf:19:07:0f:fa:0a:24:84:70:c2:9c:
af:c0:5d:65:e9:01:5c:1f:4c:9d:69:57:3a:15:0b:1b:1d:31:
5e:c8:c4:3d:1b:3e:15:59:5b:e0:ea:f5:b6:63:c7:de:82:41:
3a:0b:87:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN8DQUWQe4ZgeYjj1/L1rnF5HJ0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAyMDJaFw0yNTA0MDcyMDA3MDJaMDMxMTAvBgNV
BAMTKDQ5OTFEMkNEMTk1NDIzRjRFRjIxQjRDQUFCOUZGNUZCREE0RUY1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/526xhKVOGozhtCqJoBXsKrv8
v9HY4mQ2bMOntKfuFMwjKaovc+indHwxImxEEMbkoVb+bY32/ScrlmrLZq8kl6O8
MANOHaAQeBuNzoevritw5FrRcOBN7MmUKEOB4ZOCgY15EjSQQ0AX7J/bHt0v8SFA
aEJ2t3AQKUHGrP9JDke/QSn2Fg8wBe5X9VuYescJpPyoJNDkfkEJxfa+lrtFKJXr
bhBuAtuRZURlV03Qon92NAFOyMZCbHVvYZpS6kGNKam1qHdN/7SK9rSCOLdjyokB
Y50LFGHb4AXQhm17OX8XulCDtNyGQxoueiu99Qr5HHeaaYK85FcqJg5zF7sDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSZHSzRlUI/TvIbTKq5/1+9pO9VswHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzMwMmUzMjM0MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr1ZDANBgkqhkiG9w0BAQsFAAOCAQEAqR1b
V/q4OKL+okeifuLAjV5FNBO5uab1bO2sBFgppOEv61VxsSrG+Zov9ALo+6wCp5NA
LGY0hcfIVz789DNpCviQvUbBqcfBDQwTWPwn0wqFfMifuuWT5j2ktT58r7qQR5tg
NtIzMmFKG7wbRvxhMpMDOhtjGntQSGfmPaGGaGp1mV2HDj5Rm6uJTod0rVBXiArK
JEiWJxyV0W1TLpjuSJr8vNDkm4FiU0OPB9JW3NljocVZOeGntiJaY4u8y2QMT9L1
ylljstP4wOPZRs8ZBw/6CiSEcMKcr8BdZekBXB9MnWlXOhULGx0xXsjEPRs+FVlb
4Or1tmPH3oJBOguHaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org