Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa
File: 3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier: qTirOmRRCIQoGMi/CSQ4UYmvqrdiek4UNIekDgd30fs=
Subject key identifier: 9A:18:FD:9E:3A:07:41:C0:EF:17:39:AA:46:BB:EF:A2:67:4B:94:EB
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 380AD35D07601D88CDC9FE4FD472855FB401222F
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:44:48 +0000
ROA not before: Tue 24 Oct 2023 12:39:48 +0000
ROA not after: Tue 22 Oct 2024 12:44:48 +0000
asID: 61678
IP address blocks: 131.108.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:0a:d3:5d:07:60:1d:88:cd:c9:fe:4f:d4:72:85:5f:b4:01:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:39:48 2023 GMT
Not After : Oct 22 12:44:48 2024 GMT
Subject: CN=9A18FD9E3A0741C0EF1739AA46BBEFA2674B94EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:a6:b3:98:cf:ed:3b:9e:f5:bf:35:76:c7:
f1:3d:86:bd:b7:ab:66:61:73:4d:47:31:37:41:b6:
23:68:a7:94:3e:5c:41:19:50:88:2a:52:b3:0d:c6:
d8:2d:11:f6:0a:a7:bb:be:25:5a:da:54:95:1b:df:
6c:99:a9:43:a3:61:c4:50:af:34:3b:ef:f3:71:0c:
17:84:bd:f0:fa:4f:69:5c:10:8f:cb:b1:4e:75:e6:
e3:b3:6a:5a:9e:4e:fe:50:f5:71:08:e0:84:e2:1c:
02:7d:d9:17:19:19:dc:3b:a5:f4:53:90:d7:3c:6c:
8d:04:d9:28:31:be:b9:6e:73:f1:32:a2:64:46:56:
21:e8:9b:84:09:37:95:a1:81:59:a8:c7:66:6d:0e:
6a:62:5c:6c:b8:7d:9e:68:81:16:23:1e:0b:b7:79:
4a:67:c4:23:87:db:12:cf:23:b0:79:50:69:1b:c3:
ac:ec:ca:8a:ac:f0:df:51:94:7f:af:e0:bd:7e:e9:
b8:bf:bb:fa:22:ef:08:01:e5:ec:b1:46:60:f6:08:
76:fa:70:c9:a4:b0:c7:09:7c:96:ba:0f:74:17:64:
78:f7:70:e2:27:8e:7f:8c:07:b5:b4:e2:31:b9:85:
03:dd:6c:29:d8:89:bc:da:4e:18:8a:10:3d:48:b3:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:FD:9E:3A:07:41:C0:EF:17:39:AA:46:BB:EF:A2:67:4B:94:EB
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.166.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a3:4f:be:82:ac:7a:60:1d:76:05:f7:2c:1b:75:42:f9:68:
67:79:15:0e:15:02:e5:2d:50:0b:96:23:a6:82:3e:b2:44:92:
34:f1:37:56:df:f6:31:bf:5f:60:6c:b2:40:59:0b:63:59:a8:
0a:d8:9a:66:c3:36:67:e1:cf:7b:70:ea:cd:f5:52:e7:1b:de:
c4:09:e0:d0:d1:1c:8c:13:85:aa:db:d9:c6:7d:d7:11:13:6c:
d9:e9:3f:15:99:3f:7a:73:05:c9:5f:c1:83:4f:fd:6c:80:ba:
3a:e3:43:07:3a:a2:95:c5:a6:97:3c:dd:e4:d2:cb:5a:66:be:
8d:f2:b4:76:8f:09:2b:28:bf:f7:96:6f:f6:1b:37:a3:3b:d7:
30:f8:12:be:d1:d4:d7:09:b7:b6:97:2d:e4:8e:b1:bd:b2:76:
7d:3f:df:dd:8c:6c:6e:0a:73:0f:0a:09:7d:13:9d:23:bf:7a:
08:bd:fd:65:87:1d:93:bd:4f:7e:9c:4f:9b:7a:96:ad:8d:16:
2b:ba:84:b5:6d:dd:51:92:f1:b8:ed:6f:d3:96:21:d8:50:d9:
1c:05:cc:7b:48:13:44:21:a4:0f:59:7e:68:a9:e2:51:08:48:
e5:96:d0:62:f7:fe:b2:c9:37:3f:2e:4f:78:03:7d:6b:a4:42:
70:f3:a5:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOArTXQdgHYjNyf5P1HKFX7QBIi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjM5NDhaFw0yNDEwMjIxMjQ0NDhaMDMxMTAvBgNV
BAMTKDlBMThGRDlFM0EwNzQxQzBFRjE3MzlBQTQ2QkJFRkEyNjc0Qjk0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqqazmM/tO571vzV2x/E9hr23
q2Zhc01HMTdBtiNop5Q+XEEZUIgqUrMNxtgtEfYKp7u+JVraVJUb32yZqUOjYcRQ
rzQ77/NxDBeEvfD6T2lcEI/LsU515uOzalqeTv5Q9XEI4ITiHAJ92RcZGdw7pfRT
kNc8bI0E2Sgxvrluc/EyomRGViHom4QJN5WhgVmox2ZtDmpiXGy4fZ5ogRYjHgu3
eUpnxCOH2xLPI7B5UGkbw6zsyoqs8N9RlH+v4L1+6bi/u/oi7wgB5eyxRmD2CHb6
cMmksMcJfJa6D3QXZHj3cOInjn+MB7W04jG5hQPdbCnYibzaThiKED1Is3URAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmhj9njoHQcDvFzmqRrvvomdLlOswHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbKYwDQYJKoZIhvcNAQELBQADggEBAGijT76C
rHpgHXYF9ywbdUL5aGd5FQ4VAuUtUAuWI6aCPrJEkjTxN1bf9jG/X2BsskBZC2NZ
qArYmmbDNmfhz3tw6s31Uucb3sQJ4NDRHIwTharb2cZ91xETbNnpPxWZP3pzBclf
wYNP/WyAujrjQwc6opXFppc83eTSy1pmvo3ytHaPCSsov/eWb/YbN6M71zD4Er7R
1NcJt7aXLeSOsb2ydn0/392MbG4Kcw8KCX0TnSO/egi9/WWHHZO9T36cT5t6lq2N
Fiu6hLVt3VGS8bjtb9OWIdhQ2RwFzHtIE0QhpA9Zfmip4lEISOWW0GL3/rLJNz8u
T3gDfWukQnDzpY8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:50 2025 by rpki-client