Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa
File: 3133382e39372e33322e302f32322d3234203d3e203631393030.roa (raw, json)
Hash identifier: NNvncUmCZgzxFqpZoW1kmBA7t2nycV63ck9xGC2MH1A=
Subject key identifier: 39:2B:51:92:F9:A8:15:27:A0:77:AC:A9:64:56:32:8F:59:36:1B:F1
Certificate issuer: /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial: 6F05FFABCB87B4C42CE8D8F4C855FB1649E73EAF
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa
Signing time: Mon 07 Oct 2024 19:21:59 +0000
ROA not before: Mon 07 Oct 2024 19:16:59 +0000
ROA not after: Mon 06 Oct 2025 19:21:59 +0000
asID: 61900
IP address blocks: 138.97.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:ff:ab:cb:87:b4:c4:2c:e8:d8:f4:c8:55:fb:16:49:e7:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Validity
Not Before: Oct 7 19:16:59 2024 GMT
Not After : Oct 6 19:21:59 2025 GMT
Subject: CN=392B5192F9A81527A077ACA96456328F59361BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:f2:24:0d:fc:f6:1e:3e:e3:58:04:4d:e8:
00:5d:2a:10:14:44:4c:96:ed:33:96:4a:b2:6f:2e:
81:16:2d:63:a2:ca:e5:5d:76:1e:8f:cb:5d:4c:8a:
7e:3c:f7:a1:2f:27:c9:fc:4b:c9:08:10:e8:05:3e:
b1:12:0a:10:8d:a2:55:b6:4a:30:16:65:be:bb:ff:
8c:fb:9f:99:b2:06:eb:06:b2:fa:70:ac:11:11:e2:
39:81:0d:37:b9:a8:83:bc:53:26:e4:76:45:f3:04:
fd:09:e8:b8:ff:61:a4:b6:71:b5:10:f4:7c:ff:4b:
0a:74:0c:60:52:0e:93:96:ce:8c:01:49:fb:ac:ec:
c3:52:2e:1e:57:d9:06:39:e1:a1:f4:6e:db:c2:5c:
46:bc:af:a0:3e:b0:ad:a5:82:03:eb:c8:07:9c:05:
e7:7f:35:e1:ac:e8:7c:ae:c3:9f:47:61:a1:14:d2:
d3:e6:57:66:12:84:24:d2:1f:b3:1d:fa:27:26:95:
10:5e:1a:68:de:63:03:e3:11:68:8a:bd:f1:89:f8:
32:1b:8f:27:d8:9c:2f:33:1d:d6:da:b3:93:fe:cf:
77:7c:d3:86:ed:5f:24:eb:6d:5a:19:4b:42:37:d1:
33:81:b4:e0:6d:70:85:e9:03:be:07:2b:5c:f5:90:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:51:92:F9:A8:15:27:A0:77:AC:A9:64:56:32:8F:59:36:1B:F1
X509v3 Authority Key Identifier:
keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:32:2b:8d:4d:9a:7a:9a:08:ad:06:08:a9:76:71:41:b7:76:
ab:f7:a5:b0:36:ef:ff:e8:4f:0b:ba:73:5b:66:46:38:0b:19:
36:75:86:f4:0c:bc:71:fa:3a:58:8d:d1:d4:a9:5d:71:44:7d:
7d:24:34:c8:30:2e:51:12:45:6c:c9:ca:6e:96:f9:83:fb:ce:
2f:22:b4:f9:88:fa:f0:19:6e:93:2e:b3:02:ca:d9:66:93:5a:
3d:d8:8b:44:4b:c3:03:9b:46:79:d0:b2:03:78:50:d7:22:e2:
ff:a1:10:35:08:fa:75:27:f8:43:a0:36:85:21:78:8f:77:09:
3c:37:a7:c8:e1:d9:76:7d:88:bc:fa:17:64:7b:4d:d1:2d:25:
84:8f:ea:3d:e6:55:08:19:31:5a:32:86:8a:d8:76:fa:5d:71:
4d:e7:8d:c0:b8:7a:84:b6:1f:a7:2c:e8:ab:4f:73:b8:a6:9d:
6b:a1:3b:d5:cf:de:1b:ce:7b:19:53:7d:3c:95:06:db:5a:31:
cd:b5:59:0b:f1:fa:0d:3c:b6:fb:ed:c6:10:c5:a2:d7:b4:a3:
c2:29:85:8e:6f:7c:fb:ea:da:ce:2c:f6:2d:2c:09:7f:54:5d:
3d:60:e4:52:e6:04:17:22:86:07:d4:2d:cc:b5:3e:bc:8e:09:
f1:98:c0:b7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbwX/q8uHtMQs6Nj0yFX7FknnPq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0NEY1NDY2MjFGMUVCRjdDQkY4NDlGNEZFREE4RThD
MTZEMUU5QTAeFw0yNDEwMDcxOTE2NTlaFw0yNTEwMDYxOTIxNTlaMDMxMTAvBgNV
BAMTKDM5MkI1MTkyRjlBODE1MjdBMDc3QUNBOTY0NTYzMjhGNTkzNjFCRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RvIkDfz2Hj7jWARN6ABdKhAU
REyW7TOWSrJvLoEWLWOiyuVddh6Py11Min4896EvJ8n8S8kIEOgFPrESChCNolW2
SjAWZb67/4z7n5myBusGsvpwrBER4jmBDTe5qIO8UybkdkXzBP0J6Lj/YaS2cbUQ
9Hz/Swp0DGBSDpOWzowBSfus7MNSLh5X2QY54aH0btvCXEa8r6A+sK2lggPryAec
Bed/NeGs6Hyuw59HYaEU0tPmV2YShCTSH7Md+icmlRBeGmjeYwPjEWiKvfGJ+DIb
jyfYnC8zHdbas5P+z3d804btXyTrbVoZS0I30TOBtOBtcIXpA74HK1z1kGw7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOStRkvmoFSegd6ypZFYyj1k2G/EwHwYDVR0j
BBgwFoAUAET1RmIfHr98v4SfT+2o6MFtHpowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC8wMDQ0RjU0NjYyMUYxRUJGN0NCRjg0OUY0RkVEQThFOEMxNkQxRTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNDRGNTQ2NjIxRjFFQkY3
Q0JGODQ5RjRGRURBOEU4QzE2RDFFOUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzMzM4MmUzOTM3MmUzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAophIDANBgkqhkiG9w0BAQsFAAOCAQEAHzIrjU2aepoI
rQYIqXZxQbd2q/elsDbv/+hPC7pzW2ZGOAsZNnWG9Ay8cfo6WI3R1KldcUR9fSQ0
yDAuURJFbMnKbpb5g/vOLyK0+Yj68Bluky6zAsrZZpNaPdiLREvDA5tGedCyA3hQ
1yLi/6EQNQj6dSf4Q6A2hSF4j3cJPDenyOHZdn2IvPoXZHtN0S0lhI/qPeZVCBkx
WjKGith2+l1xTeeNwLh6hLYfpyzoq09zuKada6E71c/eG857GVN9PJUG21oxzbVZ
C/H6DTy2++3GEMWi17SjwimFjm98++raziz2LSwJf1RdPWDkUuYEFyKGB9QtzLU+
vI4J8ZjAtw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:00 2025 by rpki-client