Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32312d3231203d3e20323632393031.roa
File: 3137372e32322e3230302e302f32312d3231203d3e20323632393031.roa (raw, json)
Hash identifier: JZKL5M7z2s4OakYMpCpLHDzJsfd+N/AMGwa5e4tp4T0=
Subject key identifier: 4E:3B:DD:75:34:2C:FB:79:A0:B6:50:59:D1:28:7E:67:5C:A5:16:51
Certificate issuer: /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial: 5E2D47E46D1A9309CAC34078BD9028F080CB2345
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32312d3231203d3e20323632393031.roa
Signing time: Mon 04 Dec 2023 19:44:25 +0000
ROA not before: Mon 04 Dec 2023 19:39:25 +0000
ROA not after: Mon 02 Dec 2024 19:44:25 +0000
asID: 262901
IP address blocks: 177.22.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2d:47:e4:6d:1a:93:09:ca:c3:40:78:bd:90:28:f0:80:cb:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Validity
Not Before: Dec 4 19:39:25 2023 GMT
Not After : Dec 2 19:44:25 2024 GMT
Subject: CN=4E3BDD75342CFB79A0B65059D1287E675CA51651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:83:70:d6:7d:24:5c:0f:54:ea:2a:7b:81:
e0:eb:4c:f3:13:c1:b0:25:e0:ac:45:d4:37:ab:9f:
24:32:68:e6:84:ed:7a:e2:aa:62:32:02:9a:ce:e9:
66:4c:13:fb:c3:8c:0f:7f:af:25:17:92:eb:f3:f8:
1c:77:71:54:9e:43:1e:1d:4f:dc:20:a4:4c:5f:63:
09:5a:61:8e:7f:90:6c:6e:0b:b4:d0:c6:3e:1f:6c:
48:da:92:bf:67:1a:83:55:67:02:34:0a:c5:a7:37:
c8:36:a6:cb:0a:cf:a9:92:8b:df:61:f6:44:a4:06:
87:dc:98:41:d9:97:41:97:ed:e1:e7:c0:52:e0:0f:
f6:72:b7:f4:13:72:52:de:5b:a5:d5:47:74:c2:a0:
ba:b3:0a:28:93:8d:03:a4:b3:ae:17:80:16:c1:49:
6d:31:4d:98:56:62:11:8b:d2:c7:02:7d:df:dc:52:
48:fe:45:05:75:b5:fb:cd:23:89:c7:c3:3a:23:76:
a7:eb:d5:d1:96:d8:70:82:75:ef:ec:47:c8:00:39:
d1:66:9a:67:15:ac:59:fc:0f:f2:c6:26:34:1f:5f:
7d:03:33:80:6b:7a:01:06:91:c1:8d:56:bb:b1:8f:
36:75:c6:94:0e:48:19:de:dd:0f:14:14:62:88:85:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:DD:75:34:2C:FB:79:A0:B6:50:59:D1:28:7E:67:5C:A5:16:51
X509v3 Authority Key Identifier:
keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32312d3231203d3e20323632393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.22.200.0/21
Signature Algorithm: sha256WithRSAEncryption
24:37:cd:5e:bc:09:39:2b:f9:83:9f:09:e4:f4:8b:8e:c8:22:
a1:cf:71:c1:5e:3e:5d:3f:99:d2:87:96:40:aa:27:14:ca:fa:
88:cc:b1:aa:e1:41:96:21:5e:db:d1:16:08:c0:45:3e:1a:be:
a5:b8:6d:c7:77:1d:8a:fa:37:5f:e3:ec:55:1d:9c:29:44:7e:
0e:39:64:59:37:af:89:b9:93:7a:78:76:fb:64:76:40:36:c4:
33:4a:af:0d:6b:ef:f8:3e:31:7c:3b:60:7c:60:cb:d5:dd:2b:
49:d9:9b:08:01:e3:05:f8:ad:b0:7d:a8:0b:24:dc:9f:12:de:
b2:29:f6:77:95:18:f0:22:6e:78:7c:25:f9:1d:73:81:c9:81:
1c:6a:b8:e4:f6:9d:2e:af:2d:b2:18:30:be:84:cd:c2:21:32:
03:d3:5a:9a:22:58:0a:60:b8:06:9d:5d:2d:a5:92:03:ca:09:
92:ec:31:54:1f:c3:f3:dd:73:81:4f:2c:58:04:49:bf:a3:f0:
44:2b:a5:2f:aa:6f:c0:f8:e9:7a:3d:ed:64:04:26:04:c0:a4:
ee:75:f6:fa:f2:09:34:21:68:01:2d:80:b4:bf:8d:e9:5b:13:
61:54:3f:e2:6b:f2:c8:4b:9e:8a:53:d0:dc:9b:87:0b:ed:6a:
8d:74:5a:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXi1H5G0akwnKw0B4vZAo8IDLI0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MjVaFw0yNDEyMDIxOTQ0MjVaMDMxMTAvBgNV
BAMTKDRFM0JERDc1MzQyQ0ZCNzlBMEI2NTA1OUQxMjg3RTY3NUNBNTE2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpoNw1n0kXA9U6ip7geDrTPMT
wbAl4KxF1DernyQyaOaE7XriqmIyAprO6WZME/vDjA9/ryUXkuvz+Bx3cVSeQx4d
T9wgpExfYwlaYY5/kGxuC7TQxj4fbEjakr9nGoNVZwI0CsWnN8g2pssKz6mSi99h
9kSkBofcmEHZl0GX7eHnwFLgD/Zyt/QTclLeW6XVR3TCoLqzCiiTjQOks64XgBbB
SW0xTZhWYhGL0scCfd/cUkj+RQV1tfvNI4nHwzojdqfr1dGW2HCCde/sR8gAOdFm
mmcVrFn8D/LGJjQfX30DM4BregEGkcGNVruxjzZ1xpQOSBne3Q8UFGKIhQ2ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTjvddTQs+3mgtlBZ0Sh+Z1ylFlEwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzNzM3MmUzMjMyMmUzMjMwMzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxFsgwDQYJKoZIhvcNAQELBQADggEBACQ3zV68
CTkr+YOfCeT0i47IIqHPccFePl0/mdKHlkCqJxTK+ojMsarhQZYhXtvRFgjART4a
vqW4bcd3HYr6N1/j7FUdnClEfg45ZFk3r4m5k3p4dvtkdkA2xDNKrw1r7/g+MXw7
YHxgy9XdK0nZmwgB4wX4rbB9qAsk3J8S3rIp9neVGPAibnh8Jfkdc4HJgRxquOT2
nS6vLbIYML6EzcIhMgPTWpoiWApguAadXS2lkgPKCZLsMVQfw/Pdc4FPLFgESb+j
8EQrpS+qb8D46Xo97WQEJgTApO519vryCTQhaAEtgLS/jelbE2FUP+Jr8shLnopT
0Nybhwvtao10Wj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org