Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
File: 3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: rzEKvTx57ic5+/NJcOknrT+CMkOxu+pYcJvQDP54wIY=
Subject key identifier: FF:21:33:62:6E:C9:94:E8:4B:75:87:BA:67:39:7B:88:5A:42:AF:C1
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 5FB9A3553F0C4713DC8D9055AB586AAED5A92F3F
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:52 +0000
ROA not before: Mon 08 Apr 2024 20:01:52 +0000
ROA not after: Mon 07 Apr 2025 20:06:52 +0000
asID: 28270
IP address blocks: 201.149.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:a3:55:3f:0c:47:13:dc:8d:90:55:ab:58:6a:ae:d5:a9:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:52 2024 GMT
Not After : Apr 7 20:06:52 2025 GMT
Subject: CN=FF2133626EC994E84B7587BA67397B885A42AFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:69:06:f8:6a:c0:25:7f:ca:c6:80:31:58:
aa:de:37:e4:e6:e6:c7:75:0b:03:9b:6c:5c:74:5c:
1a:fe:d6:95:3b:bb:89:aa:65:9b:07:6a:38:d9:71:
d9:e5:85:d8:0b:14:23:5f:bb:01:96:77:fd:e9:9f:
89:16:f0:32:d8:5d:88:d5:ad:54:5c:e6:f1:67:60:
a2:a7:64:85:f2:ed:1b:39:76:d2:16:23:48:be:82:
4b:df:a5:ce:11:e6:1b:24:d0:57:e4:5e:f6:bc:c2:
be:77:b7:21:b4:85:c0:63:b7:70:52:c1:29:3e:b4:
17:cb:5e:e4:ea:b1:af:82:2e:62:48:29:81:2a:e8:
79:aa:1b:03:53:b1:f2:92:ce:a3:80:27:df:6c:a4:
80:f2:91:85:54:34:ef:4e:bd:0c:f7:a6:6f:84:7d:
7e:36:c1:1a:02:ab:69:ad:e1:8d:ef:40:53:8d:06:
9d:51:54:2f:81:0c:fa:61:19:34:b5:5f:fa:f6:81:
86:3a:c5:b2:04:85:ab:5d:68:fd:57:81:dc:85:83:
dc:fd:ad:6e:07:98:cb:45:45:b8:4d:ef:a8:15:10:
28:ac:5d:0b:e3:3b:20:9c:f6:4c:03:d7:63:cf:d0:
b9:f4:16:49:35:87:da:a1:f4:31:f6:55:f1:29:b6:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:33:62:6E:C9:94:E8:4B:75:87:BA:67:39:7B:88:5A:42:AF:C1
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.149.120.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d3:28:12:41:4a:e7:4a:c6:b5:78:8c:2d:5f:92:f2:f0:c7:
c4:7c:0e:23:43:3d:ef:8e:85:5b:35:89:69:d1:2d:0d:3b:e9:
b0:76:cc:ec:e1:03:43:0d:b0:6c:68:c5:49:d1:d0:64:9a:e9:
28:9e:ef:39:e0:1d:d6:24:d8:90:b8:30:28:20:c6:a1:e4:b0:
46:22:b6:f0:16:8c:17:1d:3e:39:b0:f5:26:4a:52:41:74:26:
bb:31:58:88:96:d3:2e:9d:98:98:b0:aa:99:36:73:92:41:08:
fd:97:57:6a:7c:5e:d6:dc:05:d1:b5:7e:a9:a5:cd:a2:d9:aa:
52:60:e4:f9:b1:a7:58:5b:eb:ae:14:e0:16:fd:25:f3:d2:c6:
9b:fc:0f:d3:47:9a:9f:49:dc:f4:a8:39:59:32:fa:8a:00:b8:
8f:cd:6f:2c:2b:e6:8c:76:74:83:31:46:f6:00:ad:82:bf:b4:
fa:ba:04:95:08:6d:f7:9f:ad:ba:62:0f:ba:b4:22:42:9d:6b:
92:8c:70:14:fd:91:32:cc:13:da:7e:b7:5c:00:5f:9e:65:b0:
58:e1:8b:9a:4c:6c:aa:2b:54:07:55:2b:04:cc:ef:01:cc:cd:
f8:d3:30:b5:4c:22:ad:d6:7f:4a:69:da:87:17:70:f5:a5:d8:
d8:18:20:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX7mjVT8MRxPcjZBVq1hqrtWpLz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTJaFw0yNTA0MDcyMDA2NTJaMDMxMTAvBgNV
BAMTKEZGMjEzMzYyNkVDOTk0RTg0Qjc1ODdCQTY3Mzk3Qjg4NUE0MkFGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32mkG+GrAJX/KxoAxWKreN+Tm
5sd1CwObbFx0XBr+1pU7u4mqZZsHajjZcdnlhdgLFCNfuwGWd/3pn4kW8DLYXYjV
rVRc5vFnYKKnZIXy7Rs5dtIWI0i+gkvfpc4R5hsk0FfkXva8wr53tyG0hcBjt3BS
wSk+tBfLXuTqsa+CLmJIKYEq6HmqGwNTsfKSzqOAJ99spIDykYVUNO9OvQz3pm+E
fX42wRoCq2mt4Y3vQFONBp1RVC+BDPphGTS1X/r2gYY6xbIEhatdaP1XgdyFg9z9
rW4HmMtFRbhN76gVECisXQvjOyCc9kwD12PP0Ln0Fkk1h9qh9DH2VfEptvUhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/yEzYm7JlOhLdYe6Zzl7iFpCr8EwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzIzMDMxMmUzMTM0MzkyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlXgwDQYJKoZIhvcNAQELBQADggEBAIXTKBJB
SudKxrV4jC1fkvLwx8R8DiNDPe+OhVs1iWnRLQ076bB2zOzhA0MNsGxoxUnR0GSa
6Sie7zngHdYk2JC4MCggxqHksEYitvAWjBcdPjmw9SZKUkF0JrsxWIiW0y6dmJiw
qpk2c5JBCP2XV2p8XtbcBdG1fqmlzaLZqlJg5Pmxp1hb664U4Bb9JfPSxpv8D9NH
mp9J3PSoOVky+ooAuI/Nbywr5ox2dIMxRvYArYK/tPq6BJUIbfefrbpiD7q0IkKd
a5KMcBT9kTLME9p+t1wAX55lsFjhi5pMbKorVAdVKwTM7wHMzfjTMLVMIq3Wf0pp
2ocXcPWl2NgYIPY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org