Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
File: 3230302e39342e3234302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: BoEin6jSYhY4QsnxLR9N9rBFg5EeflLoFkBsv5EVOB4=
Subject key identifier: E1:B6:60:96:86:83:51:0B:7D:B3:0A:65:F9:E8:B3:9D:1D:CB:41:0E
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 0372B3EABB3DC12C21D165D1A2E2B2C36EE814AE
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:03 +0000
ROA not before: Mon 08 Apr 2024 20:02:03 +0000
ROA not after: Mon 07 Apr 2025 20:07:03 +0000
asID: 28270
IP address blocks: 200.94.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:72:b3:ea:bb:3d:c1:2c:21:d1:65:d1:a2:e2:b2:c3:6e:e8:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:03 2024 GMT
Not After : Apr 7 20:07:03 2025 GMT
Subject: CN=E1B660968683510B7DB30A65F9E8B39D1DCB410E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:1d:3e:0e:8a:a0:e7:78:5e:d7:66:40:cc:
a7:f2:e9:37:3f:03:11:51:b7:2e:22:20:49:f9:89:
0f:c5:1c:c7:02:4d:b2:a2:77:5c:a8:8f:0e:df:1c:
46:55:3e:56:96:62:d5:a5:0a:0a:95:9e:f6:91:bf:
9e:d2:f5:ad:26:bf:d4:5f:80:f5:8f:4a:93:22:f6:
89:7b:88:23:bb:ed:7e:ef:0d:99:3b:ca:b1:3c:12:
96:7d:c5:85:35:a0:48:c0:75:5d:56:81:ee:fa:d4:
95:3e:46:4c:96:fb:1c:2b:10:5e:4b:57:12:5e:4b:
21:0f:e4:e7:7d:0e:f4:0d:31:9d:11:2d:11:c7:e1:
ac:89:a6:c6:1d:40:55:90:f0:f7:23:c6:6c:26:3a:
84:64:48:94:ff:50:a0:57:38:e9:e3:4d:51:17:74:
ea:c8:1b:e1:0c:97:dd:3a:8e:65:68:56:e1:46:66:
40:44:fc:55:f3:23:56:e6:98:2e:ec:45:5d:82:93:
e0:e4:e4:1f:06:ba:05:1e:ec:c7:b4:94:34:ec:c4:
50:81:15:aa:e4:1c:22:94:8e:d5:82:d0:d9:65:d7:
b8:e8:87:51:1c:92:34:64:51:0b:8c:00:97:97:1f:
80:20:b5:63:3f:d7:d7:c8:cf:fc:2b:01:50:4e:8d:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B6:60:96:86:83:51:0B:7D:B3:0A:65:F9:E8:B3:9D:1D:CB:41:0E
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.94.240.0/22
Signature Algorithm: sha256WithRSAEncryption
41:91:cc:02:57:46:b0:7f:22:ac:b5:a1:35:a2:77:56:2e:a1:
47:31:4a:78:35:61:d3:74:8f:08:85:b6:58:61:ed:36:2b:77:
4e:51:32:9a:6b:00:b9:58:07:18:35:13:2a:42:92:8d:83:bf:
58:03:33:b5:3d:7c:57:b8:fe:97:09:18:3c:96:75:b0:91:07:
6f:e7:01:50:e1:47:db:d3:a8:8f:b4:b8:99:8e:9b:a6:c1:c6:
3b:60:28:0b:c4:37:50:6f:09:34:a5:38:d6:f0:09:34:9d:6e:
25:da:75:71:39:6e:cf:cb:78:41:7b:12:66:46:5a:41:a4:a0:
be:76:4e:4c:ea:1b:0f:ef:21:7c:dd:c2:6a:0e:ac:b1:de:1a:
59:2e:45:5e:3e:17:78:23:68:92:8d:fb:b4:ab:c8:2e:83:9d:
85:dc:66:98:f1:7b:51:31:fe:1d:dd:e7:44:37:8f:f2:a0:b8:
79:95:3c:45:7a:af:14:1e:25:08:17:53:ef:68:1a:7d:60:32:
63:84:24:47:81:5e:a9:f7:dd:ba:2c:a6:47:ae:d7:c8:ad:39:
4e:e6:83:e5:ad:0a:ca:d8:75:e0:88:53:c1:6c:cb:6c:e5:92:
1b:12:cf:b7:bc:e2:db:d9:20:79:a2:5e:3d:6e:dd:20:89:44:
78:4b:53:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA3Kz6rs9wSwh0WXRouKyw27oFK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAyMDNaFw0yNTA0MDcyMDA3MDNaMDMxMTAvBgNV
BAMTKEUxQjY2MDk2ODY4MzUxMEI3REIzMEE2NUY5RThCMzlEMURDQjQxMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqx0+Doqg53he12ZAzKfy6Tc/
AxFRty4iIEn5iQ/FHMcCTbKid1yojw7fHEZVPlaWYtWlCgqVnvaRv57S9a0mv9Rf
gPWPSpMi9ol7iCO77X7vDZk7yrE8EpZ9xYU1oEjAdV1Wge761JU+RkyW+xwrEF5L
VxJeSyEP5Od9DvQNMZ0RLRHH4ayJpsYdQFWQ8PcjxmwmOoRkSJT/UKBXOOnjTVEX
dOrIG+EMl906jmVoVuFGZkBE/FXzI1bmmC7sRV2Ck+Dk5B8GugUe7Me0lDTsxFCB
FarkHCKUjtWC0Nll17joh1EckjRkUQuMAJeXH4AgtWM/19fIz/wrAVBOjTAVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4bZgloaDUQt9swpl+eiznR3LQQ4wHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzIzMDMwMmUzOTM0MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyF7wMA0GCSqGSIb3DQEBCwUAA4IBAQBBkcwCV0aw
fyKstaE1ondWLqFHMUp4NWHTdI8IhbZYYe02K3dOUTKaawC5WAcYNRMqQpKNg79Y
AzO1PXxXuP6XCRg8lnWwkQdv5wFQ4Ufb06iPtLiZjpumwcY7YCgLxDdQbwk0pTjW
8Ak0nW4l2nVxOW7Py3hBexJmRlpBpKC+dk5M6hsP7yF83cJqDqyx3hpZLkVePhd4
I2iSjfu0q8gug52F3GaY8XtRMf4d3edEN4/yoLh5lTxFeq8UHiUIF1PvaBp9YDJj
hCRHgV6p9926LKZHrtfIrTlO5oPlrQrK2HXgiFPBbMts5ZIbEs+3vOLb2SB5ol49
bt0giUR4S1P8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org