Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
File: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier: YtnJiaBroZBsQWx4/34PhQ75qvjxojR8PUwdj3x9/Bs=
Subject key identifier: 1C:73:D3:3A:2C:ED:03:F5:0C:28:8D:C2:79:32:E8:5B:BE:16:EC:A7
Certificate issuer: /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial: 1466AFEBB69BEBC34218EE9723F52E4386273F3F
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
Signing time: Mon 16 Oct 2023 20:44:54 +0000
ROA not before: Mon 16 Oct 2023 20:39:54 +0000
ROA not after: Mon 14 Oct 2024 20:44:54 +0000
asID: 28131
IP address blocks: 138.0.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:66:af:eb:b6:9b:eb:c3:42:18:ee:97:23:f5:2e:43:86:27:3f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Validity
Not Before: Oct 16 20:39:54 2023 GMT
Not After : Oct 14 20:44:54 2024 GMT
Subject: CN=1C73D33A2CED03F50C288DC27932E85BBE16ECA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:72:82:fd:f0:34:04:bb:aa:15:0e:6d:7f:
37:c2:67:7d:5d:2c:27:c7:6c:b6:9b:d1:c2:eb:f8:
3c:b2:c4:a6:67:88:ef:d7:dd:49:03:cf:82:d4:bc:
03:40:fd:80:e9:2f:e7:b9:53:0b:a8:e3:23:5b:8d:
34:26:95:1d:9c:03:73:23:ec:c6:bc:10:4c:37:02:
20:cd:eb:79:a7:4a:0a:97:3b:e2:52:c1:9b:88:cd:
db:6c:c4:14:e8:dc:e9:13:03:d1:29:e2:d2:11:9e:
75:85:c9:e6:66:98:b7:84:71:9e:10:2f:46:01:fe:
ce:89:6a:0c:a7:60:c2:0b:63:63:6d:4e:bc:6f:4a:
67:aa:d2:72:a9:7c:b2:e3:51:57:78:85:6f:16:13:
1b:8d:2e:0f:8c:3f:dd:64:c8:79:8d:f7:6c:99:22:
6e:93:72:c0:f3:bd:5e:53:ad:3a:11:56:64:86:55:
64:3c:6c:c7:86:0a:b9:26:a7:ee:d4:6c:33:4b:2a:
00:d3:88:ac:14:c7:5f:31:30:b9:a1:85:07:95:a9:
89:69:46:3a:1c:85:c4:d2:d4:0b:a1:25:e4:fa:07:
7c:cf:09:38:81:2a:b7:f4:7a:8b:ec:c5:73:d9:52:
88:f9:8a:d6:3a:fb:ee:da:0e:ab:d7:7f:9d:4b:33:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:D3:3A:2C:ED:03:F5:0C:28:8D:C2:79:32:E8:5B:BE:16:EC:A7
X509v3 Authority Key Identifier:
keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.192.0/22
Signature Algorithm: sha256WithRSAEncryption
73:86:13:a4:06:00:dd:53:fc:64:44:bd:eb:fb:f5:c7:06:21:
58:e3:c4:0c:45:ff:cb:26:aa:68:61:16:36:fb:f8:6e:15:1e:
9f:cc:54:39:26:34:f9:d3:67:1c:be:49:13:84:9b:b5:ba:8a:
44:b9:72:c0:2f:48:8e:ad:f6:3a:e5:fd:2c:9a:4e:bd:1f:7d:
3e:ae:96:f5:d1:15:78:bb:15:46:24:ef:e7:61:51:f3:cd:0b:
40:e4:20:43:80:ce:fa:7b:e0:55:04:7a:3a:48:89:0e:64:9d:
0e:99:ec:69:65:4c:fc:66:e2:64:28:a3:cd:b2:32:9c:d9:f6:
b1:70:2d:b0:76:cc:cd:9e:4d:85:35:8e:9a:57:8e:0f:7d:0e:
62:87:8d:37:f3:d9:c1:ef:fe:d3:d5:fe:10:f1:5c:c7:7f:19:
71:0a:be:33:ec:68:ad:d1:b2:24:bd:47:b2:b1:0a:13:71:45:
f6:fb:c6:0e:60:cb:b6:fe:e0:32:2d:75:4c:15:ae:f5:b9:7f:
75:24:6e:a9:ea:2d:6e:0a:97:a3:2c:a7:bf:15:37:a9:f6:5a:
7b:26:81:29:36:21:ff:8e:31:b8:fb:b5:56:3d:f3:b2:94:9a:
3e:0e:d1:c7:46:39:83:d5:31:a4:67:5f:3d:45:86:90:09:cc:
37:fa:26:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFGav67ab68NCGO6XI/UuQ4YnPz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDNUM0RTYzMkI3QTc2QjRFMTM3RjJCM0U2NDU4MDk1
MEIzQTE2RDAeFw0yMzEwMTYyMDM5NTRaFw0yNDEwMTQyMDQ0NTRaMDMxMTAvBgNV
BAMTKDFDNzNEMzNBMkNFRDAzRjUwQzI4OERDMjc5MzJFODVCQkUxNkVDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEHKC/fA0BLuqFQ5tfzfCZ31d
LCfHbLab0cLr+DyyxKZniO/X3UkDz4LUvANA/YDpL+e5Uwuo4yNbjTQmlR2cA3Mj
7Ma8EEw3AiDN63mnSgqXO+JSwZuIzdtsxBTo3OkTA9Ep4tIRnnWFyeZmmLeEcZ4Q
L0YB/s6JagynYMILY2NtTrxvSmeq0nKpfLLjUVd4hW8WExuNLg+MP91kyHmN92yZ
Im6TcsDzvV5TrToRVmSGVWQ8bMeGCrkmp+7UbDNLKgDTiKwUx18xMLmhhQeVqYlp
RjochcTS1AuhJeT6B3zPCTiBKrf0eovsxXPZUoj5itY6++7aDqvXf51LM8yZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHHPTOiztA/UMKI3CeTLoW74W7KcwHwYDVR0j
BBgwFoAUccXE5jK3p2tOE38rPmRYCVCzoW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDJrRVF0OEdXR1laa1pKcktEZFpDNmdQemtOOUU4RnRjVGJEOTNnem1Q
RFgvMC83MUM1QzRFNjMyQjdBNzZCNEUxMzdGMkIzRTY0NTgwOTUwQjNBMTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxQzVDNEU2MzJCN0E3NkI0
RTEzN0YyQjNFNjQ1ODA5NTBCM0ExNkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQya0VRdDhHV0dZWmtaSnJLRGRaQzZnUHprTjlFOEZ0Y1RiRDkzZ3ptUERYLzAv
MzEzMzM4MmUzMDJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAwDANBgkqhkiG9w0BAQsFAAOCAQEAc4YTpAYA3VP8
ZES96/v1xwYhWOPEDEX/yyaqaGEWNvv4bhUen8xUOSY0+dNnHL5JE4SbtbqKRLly
wC9Ijq32OuX9LJpOvR99Pq6W9dEVeLsVRiTv52FR880LQOQgQ4DO+nvgVQR6OkiJ
DmSdDpnsaWVM/GbiZCijzbIynNn2sXAtsHbMzZ5NhTWOmleOD30OYoeNN/PZwe/+
09X+EPFcx38ZcQq+M+xordGyJL1HsrEKE3FF9vvGDmDLtv7gMi11TBWu9bl/dSRu
qeotbgqXoyynvxU3qfZaeyaBKTYh/44xuPu1Vj3zspSaPg7Rx0Y5g9UxpGdfPUWG
kAnMN/om4w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org