Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa
File: 3137392e34382e34382e302f32322d3234203d3e20323731323430.roa (raw, json)
Hash identifier: YnJtZY5P2Z0dQARFIrEW97qhmY2+01euLH83S5orFvk=
Subject key identifier: 90:FF:63:60:CC:1F:38:7B:5B:1F:8B:BD:22:1A:0C:A8:D1:B9:BD:F7
Certificate issuer: /CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
Certificate serial: 7F27CA8943EF97729C9E601DC4C33B03CFDE834F
Authority key identifier: 2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa
Signing time: Tue 02 Apr 2024 18:21:31 +0000
ROA not before: Tue 02 Apr 2024 18:16:31 +0000
ROA not after: Tue 01 Apr 2025 18:21:31 +0000
asID: 271240
IP address blocks: 179.48.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:ca:89:43:ef:97:72:9c:9e:60:1d:c4:c3:3b:03:cf:de:83:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
Validity
Not Before: Apr 2 18:16:31 2024 GMT
Not After : Apr 1 18:21:31 2025 GMT
Subject: CN=90FF6360CC1F387B5B1F8BBD221A0CA8D1B9BDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:02:b0:b4:98:c7:ba:2b:b9:46:10:e1:83:
bf:5b:de:61:70:ff:0b:d0:4b:09:26:03:6c:11:43:
26:41:f4:cf:2f:ce:34:27:99:3d:c3:30:01:b1:f4:
af:cb:b8:5c:84:11:21:b5:e7:33:59:05:0c:0a:80:
54:56:c8:2c:18:1c:17:1d:35:8e:15:6d:d9:67:fd:
41:f9:88:c0:5c:35:d9:c9:e4:2a:5c:ab:62:7e:83:
ab:8e:55:97:ae:4e:4c:61:8a:0f:87:d1:a7:98:ee:
36:94:17:c1:2d:80:74:4e:5a:70:e3:6f:b7:b3:d3:
64:0b:b5:fa:0d:90:01:fc:e5:0d:6f:50:ac:dc:8a:
68:82:4d:27:2f:5d:d8:36:a8:2b:f0:69:bf:ac:a6:
40:ec:3a:eb:d9:e9:9a:e9:ca:6a:b5:5b:d9:79:b8:
d2:88:16:68:41:31:3d:61:1e:2c:39:29:e8:b6:d4:
0e:fa:8e:81:0e:47:80:74:10:2c:0d:8a:b2:e2:e0:
14:a2:09:1c:be:38:65:b0:a5:e5:2f:33:19:51:f8:
10:14:29:0f:7c:cd:ec:21:94:e1:96:08:f0:49:68:
b1:df:c7:72:67:77:94:44:18:56:99:63:f9:df:27:
cf:56:28:03:32:d8:dd:89:39:3e:c7:af:cc:37:69:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:63:60:CC:1F:38:7B:5B:1F:8B:BD:22:1A:0C:A8:D1:B9:BD:F7
X509v3 Authority Key Identifier:
keyid:2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.48.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:05:bb:9b:ad:1b:0b:ec:11:14:92:90:9a:03:07:79:95:4a:
d4:94:64:a5:05:2e:7e:9a:99:0b:9d:66:07:fe:b0:c0:dc:19:
0a:4d:b9:33:6e:de:32:45:53:13:18:2b:d8:e1:a5:90:46:0d:
cf:ca:b4:a5:c8:dc:59:04:69:20:f9:52:ae:9e:f3:6f:ed:87:
5c:5e:43:24:c0:9c:86:c2:d7:12:5b:59:23:3a:a5:fe:f1:5e:
9a:24:dd:a6:c0:cb:58:9e:c6:7c:2f:02:67:c5:ca:48:ac:80:
d7:c1:d8:93:f3:62:b8:94:d3:78:f5:8f:80:61:06:c3:a9:78:
84:e7:5b:2a:17:d7:63:a9:7d:aa:3f:38:3b:37:d1:1e:84:f0:
dd:e5:01:0c:3f:24:ef:8e:6f:b3:3a:b2:f9:b1:06:0b:9f:2b:
23:9c:ac:be:b4:09:b9:df:4e:46:67:f8:55:7b:ea:ad:5b:e6:
13:7a:2a:89:0d:b6:23:66:8d:60:25:85:a3:13:25:98:b8:2e:
05:94:54:1c:e9:66:a8:30:e4:31:1c:17:95:52:d7:d4:7c:66:
b6:53:b1:7a:04:16:f8:d7:b8:ce:15:d2:67:c2:57:c2:ac:b2:
0e:30:f0:d3:e1:53:4d:80:01:e9:09:67:0d:a4:51:c4:0d:34:
3a:a1:23:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfyfKiUPvl3KcnmAdxMM7A8/eg08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY3MEFCMUFBQzVCQkY5NUMwQjNEMDYwOUVCQThGQjY2
NjhGQjNCMzAeFw0yNDA0MDIxODE2MzFaFw0yNTA0MDExODIxMzFaMDMxMTAvBgNV
BAMTKDkwRkY2MzYwQ0MxRjM4N0I1QjFGOEJCRDIyMUEwQ0E4RDFCOUJERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IAKwtJjHuiu5RhDhg79b3mFw
/wvQSwkmA2wRQyZB9M8vzjQnmT3DMAGx9K/LuFyEESG15zNZBQwKgFRWyCwYHBcd
NY4Vbdln/UH5iMBcNdnJ5Cpcq2J+g6uOVZeuTkxhig+H0aeY7jaUF8EtgHROWnDj
b7ez02QLtfoNkAH85Q1vUKzcimiCTScvXdg2qCvwab+spkDsOuvZ6Zrpymq1W9l5
uNKIFmhBMT1hHiw5Kei21A76joEOR4B0ECwNirLi4BSiCRy+OGWwpeUvMxlR+BAU
KQ98zewhlOGWCPBJaLHfx3Jnd5REGFaZY/nfJ89WKAMy2N2JOT7Hr8w3aZk3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkP9jYMwfOHtbH4u9IhoMqNG5vfcwHwYDVR0j
BBgwFoAUL3CrGqxbv5XAs9BgnrqPtmaPs7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1Q3VaVjNEVTho
b1QvMC8yRjcwQUIxQUFDNUJCRjk1QzBCM0QwNjA5RUJBOEZCNjY2OEZCM0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGNzBBQjFBQUM1QkJGOTVD
MEIzRDA2MDlFQkE4RkI2NjY4RkIzQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmTENYcmlHb0g1M3B2U1o0OEZMUDJrZVJ4aHBnVW9ZNUN1WlYzRFU4aG9ULzAv
MzEzNzM5MmUzNDM4MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszAwMA0GCSqGSIb3DQEBCwUAA4IBAQBeBbubrRsL
7BEUkpCaAwd5lUrUlGSlBS5+mpkLnWYH/rDA3BkKTbkzbt4yRVMTGCvY4aWQRg3P
yrSlyNxZBGkg+VKunvNv7YdcXkMkwJyGwtcSW1kjOqX+8V6aJN2mwMtYnsZ8LwJn
xcpIrIDXwdiT82K4lNN49Y+AYQbDqXiE51sqF9djqX2qPzg7N9EehPDd5QEMPyTv
jm+zOrL5sQYLnysjnKy+tAm5305GZ/hVe+qtW+YTeiqJDbYjZo1gJYWjEyWYuC4F
lFQc6WaoMOQxHBeVUtfUfGa2U7F6BBb417jOFdJnwlfCrLIOMPDT4VNNgAHpCWcN
pFHEDTQ6oSNA
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:00 2024 by rpki-client on console-ams.rpki-client.org