Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36362e36342e302f32312d3231203d3e203238323730.roa
File: 3137372e36362e36342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: roY5depHDUeQ28I/yCue4Lq1mNfvqZxdimfthpKsHTg=
Subject key identifier: 33:38:39:E0:E6:03:A9:F5:AC:28:C6:3D:96:BC:FA:E0:88:67:40:F1
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 393D72717B571FBEBD5ECF828AFA8302470513CE
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36362e36342e302f32312d3231203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:07 +0000
ROA not before: Mon 08 Apr 2024 20:02:07 +0000
ROA not after: Mon 07 Apr 2025 20:07:07 +0000
asID: 28270
IP address blocks: 177.66.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3d:72:71:7b:57:1f:be:bd:5e:cf:82:8a:fa:83:02:47:05:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:07 2024 GMT
Not After : Apr 7 20:07:07 2025 GMT
Subject: CN=333839E0E603A9F5AC28C63D96BCFAE0886740F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:5b:de:49:8b:d8:9d:d7:b2:5a:f2:82:68:
12:8b:e8:00:99:39:47:73:eb:3c:9d:fa:c7:83:ab:
02:4e:9b:96:92:25:cc:70:6b:5a:92:80:74:a8:30:
eb:30:80:c0:cd:8f:fc:19:b0:4e:be:ec:20:16:f6:
d5:85:7b:d6:3e:02:04:b1:f7:4d:94:4f:5f:9e:84:
56:6c:e8:3e:09:45:17:9c:82:a9:01:74:ea:df:32:
e6:29:78:26:b6:f2:06:cc:14:0b:2f:b0:ad:f0:47:
b4:10:1e:df:9e:e8:88:e9:ba:da:21:a0:7e:c4:12:
91:2e:63:78:62:2e:01:f7:f9:b6:b1:55:ad:33:d0:
3f:95:9e:cf:8c:ee:6b:41:7d:94:18:55:28:6a:6d:
5c:97:7c:2f:dc:5f:1b:98:ff:a5:cc:a5:5a:19:08:
8c:ad:d0:c1:b0:e2:7d:65:6e:6d:0d:82:09:8a:f1:
c5:a7:86:a5:21:e0:98:76:b0:8a:a8:4f:3f:08:55:
e9:89:73:0c:89:b9:cb:5f:18:35:36:d7:77:98:c6:
fb:9f:81:d8:c7:a1:f8:e9:38:1c:d3:95:c4:86:bf:
d7:71:7d:a6:dc:a2:a8:eb:aa:cd:21:0e:94:8d:9a:
be:bc:48:44:3a:af:93:80:e9:09:a1:ba:c3:e3:54:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:39:E0:E6:03:A9:F5:AC:28:C6:3D:96:BC:FA:E0:88:67:40:F1
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36362e36342e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.64.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:ae:a7:50:7f:45:b6:21:c8:d7:99:bd:c1:24:16:3a:95:65:
7e:b1:7e:4c:2a:77:da:0a:2e:cd:d5:22:27:fe:7b:c6:78:63:
cb:89:01:fe:4f:41:18:28:90:ff:fa:15:af:08:df:22:c8:ee:
be:41:a4:88:21:32:a3:6c:8a:0b:5c:1d:c3:41:53:60:ec:78:
78:a9:8d:52:79:c7:14:05:5f:24:ca:97:4a:68:a3:9a:aa:6e:
67:a5:4b:e7:06:96:c8:7c:5f:8c:a8:e3:6c:0c:6a:99:e6:8e:
d6:ca:5a:04:2b:1d:5b:f3:7c:a0:94:1f:12:45:80:f2:8f:10:
39:61:dd:47:01:f6:90:14:33:13:bb:10:79:84:9c:e8:bc:52:
4a:b2:e6:9f:11:9a:f8:df:53:1e:48:4c:6a:87:22:f0:87:88:
49:ca:af:a7:c3:81:d6:3f:cb:ab:69:07:d7:5f:47:1a:dc:aa:
47:0b:fe:22:b1:8f:30:6f:7e:65:08:2d:0d:3e:ab:16:18:26:
72:46:bc:e6:65:47:5a:e1:df:60:26:bb:6a:52:f8:6e:34:02:
3f:77:85:3d:87:f7:32:48:f3:1f:30:6b:e6:26:a8:a6:8c:b1:
cc:da:c7:eb:4c:50:60:38:e3:15:68:cd:31:7f:a8:da:69:b6:
0a:b2:3f:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOT1ycXtXH769Xs+CivqDAkcFE84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAyMDdaFw0yNTA0MDcyMDA3MDdaMDMxMTAvBgNV
BAMTKDMzMzgzOUUwRTYwM0E5RjVBQzI4QzYzRDk2QkNGQUUwODg2NzQwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJFveSYvYndeyWvKCaBKL6ACZ
OUdz6zyd+seDqwJOm5aSJcxwa1qSgHSoMOswgMDNj/wZsE6+7CAW9tWFe9Y+AgSx
902UT1+ehFZs6D4JRRecgqkBdOrfMuYpeCa28gbMFAsvsK3wR7QQHt+e6Ijputoh
oH7EEpEuY3hiLgH3+baxVa0z0D+Vns+M7mtBfZQYVShqbVyXfC/cXxuY/6XMpVoZ
CIyt0MGw4n1lbm0NggmK8cWnhqUh4Jh2sIqoTz8IVemJcwyJuctfGDU213eYxvuf
gdjHofjpOBzTlcSGv9dxfabcoqjrqs0hDpSNmr68SEQ6r5OA6QmhusPjVFUHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMzg54OYDqfWsKMY9lrz64IhnQPEwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNjM2MmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMy
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FCQDANBgkqhkiG9w0BAQsFAAOCAQEAq66nUH9FtiHI
15m9wSQWOpVlfrF+TCp32gouzdUiJ/57xnhjy4kB/k9BGCiQ//oVrwjfIsjuvkGk
iCEyo2yKC1wdw0FTYOx4eKmNUnnHFAVfJMqXSmijmqpuZ6VL5waWyHxfjKjjbAxq
meaO1spaBCsdW/N8oJQfEkWA8o8QOWHdRwH2kBQzE7sQeYSc6LxSSrLmnxGa+N9T
HkhMaoci8IeIScqvp8OB1j/Lq2kH119HGtyqRwv+IrGPMG9+ZQgtDT6rFhgmcka8
5mVHWuHfYCa7alL4bjQCP3eFPYf3MkjzHzBr5iaopoyxzNrH60xQYDjjFWjNMX+o
2mm2CrI/6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org