Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
File: 3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier: bCUwMArwnBqsL2eh++Eb61BOkl2etggCFuukVsNR+hk=
Subject key identifier: 69:B7:6D:95:C8:7A:3A:5C:A0:E7:2B:DA:02:B2:88:35:D6:8B:24:10
Certificate issuer: /CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
Certificate serial: 71AB3E39E291A7ED3C3DB21DB0E6578CBC0E4F49
Authority key identifier: 58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
Signing time: Fri 01 Mar 2024 10:59:46 +0000
ROA not before: Fri 01 Mar 2024 10:54:46 +0000
ROA not after: Fri 28 Feb 2025 10:59:46 +0000
asID: 264117
IP address blocks: 138.97.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ab:3e:39:e2:91:a7:ed:3c:3d:b2:1d:b0:e6:57:8c:bc:0e:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
Validity
Not Before: Mar 1 10:54:46 2024 GMT
Not After : Feb 28 10:59:46 2025 GMT
Subject: CN=69B76D95C87A3A5CA0E72BDA02B28835D68B2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:65:f9:68:83:90:69:69:f9:0d:2e:d0:8c:
76:f2:e3:25:c3:48:be:04:14:f4:de:04:26:9f:9c:
8a:06:49:e9:3d:da:d9:c0:66:8c:77:e6:47:7b:3e:
89:b2:c2:a2:81:a9:4d:25:80:80:68:b1:b6:16:0e:
17:0d:56:64:17:e1:12:a9:e0:71:6e:e4:0e:ce:7f:
ba:90:3c:43:1d:3f:bc:64:c7:c7:04:a0:2d:8f:82:
ea:f9:ef:a4:47:d0:0b:79:9d:e1:a8:11:d2:c7:2d:
f4:da:ee:89:e2:81:b3:fb:d1:77:07:1c:4a:77:dd:
ea:3b:53:2f:22:c9:46:cf:7e:83:57:cb:32:a0:aa:
cf:4d:4e:ab:8d:72:bd:41:43:48:f4:52:9f:c2:73:
c2:a7:cc:93:75:b7:d6:9b:f3:da:73:66:5b:d5:38:
e4:59:42:4f:cf:32:3a:79:cf:49:1a:3f:1f:c5:fc:
b7:f4:9b:68:88:93:23:6c:2f:8f:be:99:b1:97:05:
ac:12:ae:4e:0c:38:1d:57:76:aa:89:12:39:15:1b:
ba:ee:26:7d:15:8d:3e:28:aa:ac:b5:08:97:95:c5:
fd:95:36:1f:ee:b4:04:3c:d3:f5:cb:a4:35:82:1c:
88:8a:2c:dc:98:bd:61:db:1f:c7:28:e8:91:fe:dc:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:6D:95:C8:7A:3A:5C:A0:E7:2B:DA:02:B2:88:35:D6:8B:24:10
X509v3 Authority Key Identifier:
keyid:58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:5e:43:66:53:98:57:da:18:ac:07:8a:3f:27:e5:33:52:6f:
47:0b:84:9d:b0:2a:58:cd:b1:f2:f1:9e:e6:14:2c:6b:07:59:
0c:a7:09:cc:88:5b:21:e2:a2:9e:20:66:da:55:98:99:16:43:
f0:0e:92:e8:0a:b3:2c:ba:36:03:71:32:b4:19:ef:e2:75:35:
3a:bc:9e:fe:c7:42:cc:b5:2c:ac:c8:1b:8a:16:9e:ef:a3:5e:
a8:35:1f:ec:24:11:51:19:75:54:00:89:f4:7d:30:40:ba:22:
76:59:d7:84:ec:45:69:b6:ef:e4:08:69:24:74:0c:a6:58:c2:
3a:81:ba:e2:56:89:e0:97:3e:2e:1a:88:e8:a8:67:8b:e4:37:
61:37:c9:dc:05:8e:0f:07:8d:4c:fe:72:af:cc:de:21:98:b5:
cb:b9:3e:0b:ff:1d:c1:09:13:d5:1f:f5:3f:d4:94:c8:61:53:
9d:87:99:e0:ab:4a:aa:26:0e:5e:a3:3d:35:dd:81:60:8c:b0:
a8:1b:f3:0b:b0:6e:e2:78:06:4b:18:19:3e:90:bd:bf:38:05:
83:c5:4e:c1:1e:31:e3:fb:61:43:6f:54:fb:ae:f8:d7:c6:f4:
60:e7:e3:f0:26:cb:98:64:96:bd:f4:9d:88:e2:8f:e9:5a:5c:
1a:36:6e:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcas+OeKRp+08PbIdsOZXjLwOT0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNUQyRkQzRkI5MENERDE4MTA4RDNCN0I3NTk4NUIy
RjlEOEExODAeFw0yNDAzMDExMDU0NDZaFw0yNTAyMjgxMDU5NDZaMDMxMTAvBgNV
BAMTKDY5Qjc2RDk1Qzg3QTNBNUNBMEU3MkJEQTAyQjI4ODM1RDY4QjI0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcmX5aIOQaWn5DS7QjHby4yXD
SL4EFPTeBCafnIoGSek92tnAZox35kd7PomywqKBqU0lgIBosbYWDhcNVmQX4RKp
4HFu5A7Of7qQPEMdP7xkx8cEoC2Pgur576RH0At5neGoEdLHLfTa7onigbP70XcH
HEp33eo7Uy8iyUbPfoNXyzKgqs9NTquNcr1BQ0j0Up/Cc8KnzJN1t9ab89pzZlvV
OORZQk/PMjp5z0kaPx/F/Lf0m2iIkyNsL4++mbGXBawSrk4MOB1XdqqJEjkVG7ru
Jn0VjT4oqqy1CJeVxf2VNh/utAQ80/XLpDWCHIiKLNyYvWHbH8co6JH+3AMTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUabdtlch6Olyg5yvaArKINdaLJBAwHwYDVR0j
BBgwFoAUWAXS/T+5DN0YEI07e3WYWy+dihgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJiSFVIVXVLQk42WmZ4R0VSSnRDR3Rvb0drZkxLRkJTMWhRczI5WlVX
b0gvMC81ODA1RDJGRDNGQjkwQ0REMTgxMDhEM0I3Qjc1OTg1QjJGOUQ4QTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4MDVEMkZEM0ZCOTBDREQx
ODEwOEQzQjdCNzU5ODVCMkY5RDhBMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCYkhVSFV1S0JONlpmeEdFUkp0Q0d0b29Ha2ZMS0ZCUzFoUXMyOVpVV29ILzAv
MzEzMzM4MmUzOTM3MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimEcMA0GCSqGSIb3DQEBCwUAA4IBAQArXkNmU5hX
2hisB4o/J+UzUm9HC4SdsCpYzbHy8Z7mFCxrB1kMpwnMiFsh4qKeIGbaVZiZFkPw
DpLoCrMsujYDcTK0Ge/idTU6vJ7+x0LMtSysyBuKFp7vo16oNR/sJBFRGXVUAIn0
fTBAuiJ2WdeE7EVptu/kCGkkdAymWMI6gbriVonglz4uGojoqGeL5DdhN8ncBY4P
B41M/nKvzN4hmLXLuT4L/x3BCRPVH/U/1JTIYVOdh5ngq0qqJg5eoz013YFgjLCo
G/MLsG7ieAZLGBk+kL2/OAWDxU7BHjHj+2FDb1T7rvjXxvRg5+PwJsuYZJa99J2I
4o/pWlwaNm75
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:22:03 2025 by rpki-client