Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e2033323233.roa
File: 32342e3135322e33382e302f32342d3234203d3e2033323233.roa (raw, json)
Hash identifier: SkdHB6eERljtJEkgrZi8/oOVhGgwAnQrHxOSpTmd70U=
Subject key identifier: 1B:DA:DD:10:FD:58:81:5D:40:B8:30:74:66:DB:31:A2:23:1B:F9:B0
Certificate issuer: /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial: 58F99C7751267BAF9D8DEF6BBB8E2B82B7BF9215
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e2033323233.roa
Signing time: Sun 05 Jan 2025 05:07:38 +0000
ROA not before: Sun 05 Jan 2025 05:02:38 +0000
ROA not after: Sun 04 Jan 2026 05:07:38 +0000
asID: 3223
IP address blocks: 24.152.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f9:9c:77:51:26:7b:af:9d:8d:ef:6b:bb:8e:2b:82:b7:bf:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
Validity
Not Before: Jan 5 05:02:38 2025 GMT
Not After : Jan 4 05:07:38 2026 GMT
Subject: CN=1BDADD10FD58815D40B8307466DB31A2231BF9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:2f:84:f2:2d:71:bf:1d:7a:1d:bd:4a:88:
c0:66:3c:27:13:ef:b8:1e:ee:9e:39:29:76:23:4d:
6f:fb:ee:63:8e:3c:94:1e:f3:0c:15:95:35:d5:37:
e8:dd:ed:8a:5f:e0:9f:88:00:fd:3b:75:53:6b:fb:
eb:9f:dd:55:90:75:a8:23:07:f3:30:f0:47:22:f5:
af:2a:f8:c6:70:6a:8a:b3:a5:8e:df:80:10:27:bd:
a5:22:ce:ec:ed:47:9b:b7:a5:e0:00:76:ef:cb:a3:
b6:78:a0:60:6f:49:46:be:2a:64:9d:53:25:80:23:
5f:92:27:c3:57:6d:92:9e:97:7b:d7:c2:c8:13:fa:
20:08:68:7a:81:9b:cc:20:6f:53:9d:81:19:8e:e6:
cc:c8:70:cc:f8:67:38:c9:07:c5:9b:94:05:54:11:
c3:15:19:97:cf:64:3e:b5:bc:6b:35:40:71:e6:42:
96:d0:2a:98:bc:f2:ff:12:9a:bb:ae:25:db:f0:47:
d2:59:bf:d6:e9:56:97:ff:e4:f6:95:97:38:ed:8e:
51:a2:92:85:c4:5d:12:0a:56:5d:48:b7:fc:3b:45:
a4:9a:f7:b0:3e:5a:56:37:d7:41:f4:4b:ef:a0:e0:
54:36:2f:e8:07:8b:ea:5f:d4:12:e6:91:8e:2b:c5:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:DD:10:FD:58:81:5D:40:B8:30:74:66:DB:31:A2:23:1B:F9:B0
X509v3 Authority Key Identifier:
keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e2033323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:66:5d:13:1b:7a:ac:f1:85:82:b3:1f:bd:09:9f:81:6d:e6:
d0:09:9e:a8:0f:3f:fd:88:7f:78:8f:95:3d:d0:61:e8:9e:30:
4c:1f:41:d5:9d:d4:2d:f5:4e:3a:c0:f5:94:81:4e:89:82:1a:
32:33:e7:f8:43:45:fa:a9:34:b1:e6:62:d8:ae:21:34:af:3e:
69:48:6b:e6:7f:2f:04:2c:bf:5c:24:e7:b4:eb:e5:27:72:80:
b1:c0:5c:65:51:ae:fa:50:32:f3:93:e0:e9:6c:f9:02:14:91:
fe:be:5b:1e:90:4e:06:ff:44:fd:96:be:6a:bc:a0:1b:3a:63:
07:eb:ae:72:9b:9a:7c:c6:db:c7:7c:89:13:29:e1:42:10:d5:
e7:a6:87:09:3b:06:2e:25:f8:3c:3b:15:a5:c7:30:7c:ed:24:
10:f2:9a:69:53:b9:7e:a7:d9:e6:06:ba:b2:76:d9:dd:2c:1c:
1c:ab:73:f3:ef:43:39:c0:2b:28:df:d1:fb:73:58:18:90:b9:
d4:e1:4b:4e:1a:c3:bd:ae:36:74:87:4a:1e:d5:1f:fb:90:a1:
05:e9:ee:6d:b5:41:58:05:2f:8d:43:17:b4:28:ac:2f:d6:44:
65:54:84:5e:48:58:a3:c4:e0:fa:57:9c:a3:e4:b2:b4:29:ee:
3c:78:ea:39
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWPmcd1Eme6+dje9ru44rgre/khUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBMTM1MTBEQkRDMjBEODc4NTYwRDMyODg3RjI0RjRC
ODU3QzA4MDAeFw0yNTAxMDUwNTAyMzhaFw0yNjAxMDQwNTA3MzhaMDMxMTAvBgNV
BAMTKDFCREFERDEwRkQ1ODgxNUQ0MEI4MzA3NDY2REIzMUEyMjMxQkY5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOC+E8i1xvx16Hb1KiMBmPCcT
77ge7p45KXYjTW/77mOOPJQe8wwVlTXVN+jd7Ypf4J+IAP07dVNr++uf3VWQdagj
B/Mw8Eci9a8q+MZwaoqzpY7fgBAnvaUizuztR5u3peAAdu/Lo7Z4oGBvSUa+KmSd
UyWAI1+SJ8NXbZKel3vXwsgT+iAIaHqBm8wgb1OdgRmO5szIcMz4ZzjJB8WblAVU
EcMVGZfPZD61vGs1QHHmQpbQKpi88v8SmruuJdvwR9JZv9bpVpf/5PaVlzjtjlGi
koXEXRIKVl1It/w7RaSa97A+WlY310H0S++g4FQ2L+gHi+pf1BLmkY4rxSblAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUG9rdEP1YgV1AuDB0ZtsxoiMb+bAwHwYDVR0j
BBgwFoAUtaE1ENvcINh4Vg0yiH8k9LhXwIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx
VTEvMC9CNUExMzUxMERCREMyMEQ4Nzg1NjBEMzI4ODdGMjRGNEI4NTdDMDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1QTEzNTEwREJEQzIwRDg3
ODU2MEQzMjg4N0YyNEY0Qjg1N0MwODAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxaUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAv
MzIzNDJlMzEzNTMyMmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMjMy
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAYmCYwDQYJKoZIhvcNAQELBQADggEBACtmXRMbeqzxhYKz
H70Jn4Ft5tAJnqgPP/2If3iPlT3QYeieMEwfQdWd1C31TjrA9ZSBTomCGjIz5/hD
RfqpNLHmYtiuITSvPmlIa+Z/LwQsv1wk57Tr5SdygLHAXGVRrvpQMvOT4Ols+QIU
kf6+Wx6QTgb/RP2Wvmq8oBs6YwfrrnKbmnzG28d8iRMp4UIQ1eemhwk7Bi4l+Dw7
FaXHMHztJBDymmlTuX6n2eYGurJ22d0sHByrc/PvQznAKyjf0ftzWBiQudThS04a
w72uNnSHSh7VH/uQoQXp7m21QVgFL41DF7QorC/WRGVUhF5IWKPE4PpXnKPksrQp
7jx46jk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:34 2025 by rpki-client