Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235352e302f32342d3234203d3e20323634383932.roa
File: 3136382e3230352e3235352e302f32342d3234203d3e20323634383932.roa (raw, json)
Hash identifier: 29UqjdE8gEp0vrP8uJE3IfEqeYzlxA7bvTScKNA4hq8=
Subject key identifier: 8E:B8:97:3D:E0:85:1A:7A:80:C9:E9:98:CF:CD:1E:64:27:43:F3:B6
Certificate issuer: /CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Certificate serial: 3F9291C0B58DF291E54E889033DF7B3A00AA1F4B
Authority key identifier: 20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235352e302f32342d3234203d3e20323634383932.roa
Signing time: Wed 31 Jan 2024 20:10:14 +0000
ROA not before: Wed 31 Jan 2024 20:05:14 +0000
ROA not after: Wed 29 Jan 2025 20:10:14 +0000
asID: 264892
IP address blocks: 168.205.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:92:91:c0:b5:8d:f2:91:e5:4e:88:90:33:df:7b:3a:00:aa:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Validity
Not Before: Jan 31 20:05:14 2024 GMT
Not After : Jan 29 20:10:14 2025 GMT
Subject: CN=8EB8973DE0851A7A80C9E998CFCD1E642743F3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:e3:30:30:83:eb:48:6c:1a:32:08:e4:ad:
bc:27:c1:63:f7:4e:f6:bd:a1:10:8c:94:c6:13:a2:
60:5b:2f:d1:40:e0:06:c2:43:9f:03:1d:bf:3d:83:
4b:0d:5c:db:bb:6e:c9:23:2f:a3:c6:b6:1d:10:f6:
01:0a:31:98:21:5b:74:3a:af:fd:04:65:df:d8:ae:
a7:a1:1c:af:5d:fd:a4:31:83:c5:ea:0a:59:9c:bf:
9b:ec:c2:f2:f2:85:a4:4f:ab:bc:be:3d:87:20:8c:
d2:4c:4c:60:4b:aa:11:33:1a:f1:08:df:08:3c:36:
af:d9:6e:ed:45:04:a7:24:87:f1:f7:c6:7f:19:06:
f1:15:42:c8:87:a4:74:98:34:14:1d:20:ab:f6:a6:
de:1f:76:fb:cd:32:c8:5d:f7:41:8e:1a:3a:73:9e:
70:e6:de:52:9a:b8:d7:22:04:34:fd:21:58:25:c6:
56:9b:cd:e0:d0:1b:ed:06:ec:bb:d4:a8:25:74:bf:
53:22:02:9c:1e:e7:6d:74:fd:d9:9c:0a:f4:47:8f:
7b:90:2e:d3:d7:90:04:cd:e5:4a:21:22:86:4c:f4:
43:9d:10:8e:d0:d2:ed:95:db:1a:1e:a4:3f:23:6b:
b1:8a:27:86:ae:9e:04:fc:47:4f:07:22:9a:76:fc:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:97:3D:E0:85:1A:7A:80:C9:E9:98:CF:CD:1E:64:27:43:F3:B6
X509v3 Authority Key Identifier:
keyid:20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235352e302f32342d3234203d3e20323634383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.255.0/24
Signature Algorithm: sha256WithRSAEncryption
97:24:1c:d6:35:dd:16:ba:ad:fa:11:23:c9:af:95:5c:09:9c:
d5:27:95:b2:b4:4d:28:79:da:77:d2:e5:61:98:49:8a:4a:86:
16:89:7d:6c:27:a8:3c:58:d9:c4:44:96:a6:e9:a6:c5:cc:6d:
ed:6d:6c:6e:6c:a8:82:47:f3:3e:5b:1a:cc:5b:fb:b7:03:45:
56:99:7b:a8:e4:1b:8d:47:d1:d4:7b:14:a6:6a:bc:84:a3:fe:
5f:45:ed:20:ed:3e:d5:6d:fd:12:f7:3f:63:b9:37:8a:6b:d4:
8f:18:92:88:38:26:af:39:3b:62:95:80:50:5b:0a:f1:ae:43:
cf:74:a9:57:c1:f6:d1:ee:e7:32:ad:33:9e:85:cd:d1:cc:19:
6b:a5:f7:8b:0a:4d:2d:c2:f1:2e:d7:1f:2d:32:e6:e3:13:99:
95:17:84:24:e2:2e:a3:74:8e:f8:4b:14:6b:0b:f1:d2:e9:58:
47:e7:1c:67:5b:68:bc:08:b7:52:0f:4c:63:45:bb:f0:f3:ff:
41:fd:61:a7:c2:7a:e4:98:91:0a:f0:81:72:28:09:50:50:23:
fd:3e:8e:de:b0:e8:ee:9b:a0:cc:1f:73:52:ec:b9:40:b5:12:
11:03:d8:4f:7a:33:09:23:1e:81:96:f9:c9:16:5b:37:1c:62:
43:9a:93:09
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP5KRwLWN8pHlToiQM997OgCqH0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBENzA5QUYyMDA2MjNCNzhCMjMzQUY0NTUxNEU2QUI5
RTdDQ0JCQzAeFw0yNDAxMzEyMDA1MTRaFw0yNTAxMjkyMDEwMTRaMDMxMTAvBgNV
BAMTKDhFQjg5NzNERTA4NTFBN0E4MEM5RTk5OENGQ0QxRTY0Mjc0M0YzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94uMwMIPrSGwaMgjkrbwnwWP3
Tva9oRCMlMYTomBbL9FA4AbCQ58DHb89g0sNXNu7bskjL6PGth0Q9gEKMZghW3Q6
r/0EZd/YrqehHK9d/aQxg8XqClmcv5vswvLyhaRPq7y+PYcgjNJMTGBLqhEzGvEI
3wg8Nq/Zbu1FBKckh/H3xn8ZBvEVQsiHpHSYNBQdIKv2pt4fdvvNMshd90GOGjpz
nnDm3lKauNciBDT9IVglxlabzeDQG+0G7LvUqCV0v1MiApwe5210/dmcCvRHj3uQ
LtPXkATN5UohIoZM9EOdEI7Q0u2V2xoepD8ja7GKJ4aungT8R08HIpp2/N8hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjriXPeCFGnqAyemYz80eZCdD87YwHwYDVR0j
BBgwFoAUINcJryAGI7eLIzr0VRTmq558y7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFLa2NBZ3prd1ZrZW9UWFNMbVYydDJYTVdMbTNRc2tYNnBSVFFhZVNh
SEgvMC8yMEQ3MDlBRjIwMDYyM0I3OEIyMzNBRjQ1NTE0RTZBQjlFN0NDQkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwRDcwOUFGMjAwNjIzQjc4
QjIzM0FGNDU1MTRFNkFCOUU3Q0NCQkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBS2tjQWd6a3dWa2VvVFhTTG1WMnQyWE1XTG0zUXNrWDZwUlRRYWVTYUhILzAv
MzEzNjM4MmUzMjMwMzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjN/zANBgkqhkiG9w0BAQsFAAOCAQEAlyQc
1jXdFrqt+hEjya+VXAmc1SeVsrRNKHnad9LlYZhJikqGFol9bCeoPFjZxESWpumm
xcxt7W1sbmyogkfzPlsazFv7twNFVpl7qOQbjUfR1HsUpmq8hKP+X0XtIO0+1W39
Evc/Y7k3imvUjxiSiDgmrzk7YpWAUFsK8a5Dz3SpV8H20e7nMq0znoXN0cwZa6X3
iwpNLcLxLtcfLTLm4xOZlReEJOIuo3SO+EsUawvx0ulYR+ccZ1tovAi3Ug9MY0W7
8PP/Qf1hp8J65JiRCvCBcigJUFAj/T6O3rDo7pugzB9zUuy5QLUSEQPYT3ozCSMe
gZb5yRZbNxxiQ5qTCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org