Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/3132382e3230312e3133362e302f32322d3234203d3e20323636363330.roa
File: 3132382e3230312e3133362e302f32322d3234203d3e20323636363330.roa (raw, json)
Hash identifier: IzvLsoI5DhwCC0+hT7aOYFTuCNhcT62jlGz3B5V5Skk=
Subject key identifier: BF:DD:F0:D0:39:5A:EC:E7:AB:75:67:DB:EA:28:A3:75:7E:FA:4A:07
Certificate issuer: /CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
Certificate serial: 3F6A10F2277CA1583882B06B1D59035422ECC02B
Authority key identifier: C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/3132382e3230312e3133362e302f32322d3234203d3e20323636363330.roa
Signing time: Sun 22 Oct 2023 20:48:52 +0000
ROA not before: Sun 22 Oct 2023 20:43:52 +0000
ROA not after: Sun 20 Oct 2024 20:48:52 +0000
asID: 266630
IP address blocks: 128.201.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6a:10:f2:27:7c:a1:58:38:82:b0:6b:1d:59:03:54:22:ec:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
Validity
Not Before: Oct 22 20:43:52 2023 GMT
Not After : Oct 20 20:48:52 2024 GMT
Subject: CN=BFDDF0D0395AECE7AB7567DBEA28A3757EFA4A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:cd:0f:89:6c:47:0f:52:5b:e6:10:23:1d:
bb:c8:5f:a2:fb:cb:9e:25:a3:ca:c8:6d:83:35:08:
ea:52:13:07:dc:f9:03:1c:dd:d1:33:72:d4:3d:70:
4d:c9:25:96:67:ab:f1:56:ac:2f:74:b0:b7:09:69:
72:fd:08:19:49:a8:89:2b:15:28:4d:be:f8:80:23:
c3:ab:3b:ed:41:99:25:bc:50:11:75:a1:6a:51:09:
a8:3c:ef:2a:cc:8c:b0:75:b8:c8:3c:b3:cc:ab:6d:
3e:0a:dc:eb:ac:7d:41:60:05:1b:27:7b:8e:5b:52:
5f:f4:73:d0:12:ed:c8:1f:17:2d:aa:54:81:8f:37:
d9:ae:03:43:0d:d3:e9:d1:91:a2:f9:6e:11:53:89:
6e:ce:2c:07:0a:8f:1c:12:c5:60:01:b6:c9:7c:c2:
3a:08:4f:d3:28:34:02:20:06:a6:14:19:63:13:06:
fa:55:ae:5b:16:4d:89:0b:22:9a:74:2a:41:47:d9:
8f:62:c1:c0:29:0c:c0:f7:46:ed:5b:e8:c5:0b:58:
11:c2:81:44:5a:87:f8:e3:42:16:de:49:b6:ff:f1:
c3:27:7c:5c:a7:43:9e:2c:9c:2e:f1:f5:7e:b9:8e:
32:02:99:24:05:87:de:8d:6f:e5:b4:3a:2c:fa:46:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:F0:D0:39:5A:EC:E7:AB:75:67:DB:EA:28:A3:75:7E:FA:4A:07
X509v3 Authority Key Identifier:
keyid:C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/3132382e3230312e3133362e302f32322d3234203d3e20323636363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.136.0/22
Signature Algorithm: sha256WithRSAEncryption
75:fc:0d:60:f5:4f:08:5c:ec:1a:ae:2f:18:98:46:48:aa:90:
35:40:66:77:0a:27:66:ba:45:0b:d3:e7:2f:63:29:f6:97:5d:
84:93:17:60:c4:23:e9:d8:6b:93:84:36:a4:05:24:39:15:66:
fb:9b:89:11:cb:48:12:b8:49:95:14:8d:29:24:6d:c0:57:ba:
5d:5e:a5:8e:7f:83:36:b2:d8:1f:6f:34:4b:73:75:ce:c5:a9:
d1:c3:d8:a6:a7:03:44:da:7b:f2:cc:62:ce:00:51:80:26:7b:
f1:a5:bc:2a:74:05:33:9d:10:5a:cc:a0:fc:71:fd:10:0f:12:
50:6d:1c:86:f2:ee:b8:04:0d:a4:d5:a4:ef:b8:d8:12:fb:53:
ae:e4:14:97:2b:fd:bb:c4:88:62:f1:a9:ec:84:f2:c3:71:5e:
9f:d5:43:16:eb:b4:02:fe:91:87:37:0d:20:bc:1b:57:27:25:
f3:74:48:00:d4:95:71:48:5c:22:3d:0b:45:cf:12:73:41:89:
1c:97:3a:00:c4:fa:00:8d:fd:d5:d9:5b:3e:d6:c2:bd:de:f1:
45:a7:db:f8:78:b8:d8:ab:22:78:a9:53:58:3e:e3:b1:ae:42:
63:50:11:28:0e:2a:fb:38:d5:ce:9c:d9:d9:89:7c:2b:cb:da:
17:42:d6:1e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP2oQ8id8oVg4grBrHVkDVCLswCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1OUZGN0Q1RTlCN0M3NTcyMDY4RjM4QUI2RUFBNzAx
MDVGQTI5RDAeFw0yMzEwMjIyMDQzNTJaFw0yNDEwMjAyMDQ4NTJaMDMxMTAvBgNV
BAMTKEJGRERGMEQwMzk1QUVDRTdBQjc1NjdEQkVBMjhBMzc1N0VGQTRBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIc0PiWxHD1Jb5hAjHbvIX6L7
y54lo8rIbYM1COpSEwfc+QMc3dEzctQ9cE3JJZZnq/FWrC90sLcJaXL9CBlJqIkr
FShNvviAI8OrO+1BmSW8UBF1oWpRCag87yrMjLB1uMg8s8yrbT4K3OusfUFgBRsn
e45bUl/0c9AS7cgfFy2qVIGPN9muA0MN0+nRkaL5bhFTiW7OLAcKjxwSxWABtsl8
wjoIT9MoNAIgBqYUGWMTBvpVrlsWTYkLIpp0KkFH2Y9iwcApDMD3Ru1b6MULWBHC
gURah/jjQhbeSbb/8cMnfFynQ54snC7x9X65jjICmSQFh96Nb+W0Oiz6RiozAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUv93w0Dla7OerdWfb6iijdX76SgcwHwYDVR0j
BBgwFoAUwln/fV6bfHVyBo84q26qcBBfop0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3dRWkRoZVBNbzE1eFNTVUh0dmhnUDdQNWQxUmM1Tm9wYnN6Tm11NHha
M0UvMS9DMjU5RkY3RDVFOUI3Qzc1NzIwNjhGMzhBQjZFQUE3MDEwNUZBMjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyNTlGRjdENUU5QjdDNzU3
MjA2OEYzOEFCNkVBQTcwMTA1RkEyOUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN3UVpEaGVQTW8xNXhTU1VIdHZoZ1A3UDVkMVJjNU5vcGJzek5tdTR4WjNFLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjM2MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJiDANBgkqhkiG9w0BAQsFAAOCAQEAdfwN
YPVPCFzsGq4vGJhGSKqQNUBmdwonZrpFC9PnL2Mp9pddhJMXYMQj6dhrk4Q2pAUk
ORVm+5uJEctIErhJlRSNKSRtwFe6XV6ljn+DNrLYH280S3N1zsWp0cPYpqcDRNp7
8sxizgBRgCZ78aW8KnQFM50QWsyg/HH9EA8SUG0chvLuuAQNpNWk77jYEvtTruQU
lyv9u8SIYvGp7ITyw3Fen9VDFuu0Av6RhzcNILwbVycl83RIANSVcUhcIj0LRc8S
c0GJHJc6AMT6AI391dlbPtbCvd7xRafb+Hi42KsieKlTWD7jsa5CY1ARKA4q+zjV
zpzZ2Yl8K8vaF0LWHg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:05 2025 by rpki-client