Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
File: 3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa (raw, json)
Hash identifier: g5EGG6n/GiTkL5XS3EuC1ecGn1VCROOqrjgKf+fSg7k=
Subject key identifier: 8D:CE:0A:09:83:5A:2B:FA:A4:F8:67:E0:F0:51:A4:D2:62:B5:2B:C9
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 569ABAD95CD7ECADA3999AA2C0839A82E5D3E359
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:59 +0000
ROA not before: Fri 23 Feb 2024 23:35:59 +0000
ROA not after: Fri 21 Feb 2025 23:40:59 +0000
asID: 265485
IP address blocks: 168.197.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9a:ba:d9:5c:d7:ec:ad:a3:99:9a:a2:c0:83:9a:82:e5:d3:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:59 2024 GMT
Not After : Feb 21 23:40:59 2025 GMT
Subject: CN=8DCE0A09835A2BFAA4F867E0F051A4D262B52BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:c6:74:9b:35:5a:32:b6:0c:25:f2:a0:25:
99:8f:82:ce:49:08:e4:9b:82:5c:66:ce:d3:00:4b:
39:e8:e1:de:8a:55:e0:0e:d0:56:1c:49:ba:f7:49:
db:5d:c4:1b:fc:ff:5b:f1:df:08:e2:db:32:fb:d6:
06:54:7b:e1:43:77:4e:dd:c3:bb:65:71:a3:ac:fd:
c8:7f:18:24:28:f3:84:b4:d8:56:05:93:5d:7c:4b:
c2:8f:80:65:64:c3:1f:f5:be:5b:ba:50:e1:c0:28:
bf:b1:43:e9:a7:02:f6:82:1a:a4:27:cf:c7:c4:40:
46:e5:2d:74:6e:f9:53:aa:7b:47:a1:70:52:bf:94:
a3:3d:90:aa:54:d1:57:15:8d:9d:d7:f3:28:ef:34:
fa:21:f8:40:d2:22:0a:8e:85:43:c4:a0:01:35:35:
6d:c5:24:7b:70:cb:5a:b0:37:c4:4b:3f:6a:95:3c:
27:4a:ec:b7:d7:c2:0b:94:b0:17:39:84:93:a1:2f:
5a:96:77:0a:7a:d0:b9:63:b1:4d:de:2c:fb:7c:62:
28:39:c8:94:f2:99:53:c5:3f:43:20:be:a8:b5:11:
c7:4c:9b:8a:86:00:49:7f:03:48:c9:f0:39:3e:4a:
50:6e:fd:b4:41:11:af:c0:4b:49:6b:d6:5a:83:dc:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CE:0A:09:83:5A:2B:FA:A4:F8:67:E0:F0:51:A4:D2:62:B5:2B:C9
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.156.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ba:da:f9:59:8c:d5:1e:94:86:2c:7f:92:80:17:1d:bb:8e:
d0:44:1e:76:f6:80:86:b5:e6:b7:9f:03:cd:01:08:de:f1:07:
ba:bd:27:65:8f:b4:b0:90:a1:99:6f:23:af:20:62:4e:8b:f2:
fa:44:98:1d:0c:90:1d:82:3c:80:d2:b8:e3:47:70:c0:73:99:
d9:5d:11:e7:34:f8:60:ca:51:92:41:31:cc:15:03:0e:58:27:
29:06:5c:e1:58:74:cb:f8:35:e8:0c:ed:74:80:81:66:6e:cd:
23:a0:d9:a6:cb:50:18:b6:84:31:22:33:18:81:a2:57:d5:97:
61:cc:47:b4:83:a1:15:18:2b:79:ca:3c:be:50:0c:6a:5d:6e:
12:f4:fb:b5:43:e2:06:42:a5:f0:27:c9:0e:12:d3:7a:f8:ab:
76:c9:23:e0:9a:b6:6a:c4:bd:c1:8a:16:25:a6:98:d7:da:34:
ae:2e:9c:a3:35:ac:12:53:01:ce:c7:b0:46:a6:e3:45:3d:4f:
8c:51:1f:68:9a:b7:66:ad:53:f5:4b:7f:93:0f:37:67:82:59:
34:4e:50:54:1c:83:78:05:c6:cf:5e:d6:4c:dd:44:e9:4e:50:
59:b0:e1:79:3e:80:f7:08:46:52:fa:89:77:ec:0a:3d:cf:c8:
f8:58:2d:c0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVpq62VzX7K2jmZqiwIOaguXT41kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM1NTlaFw0yNTAyMjEyMzQwNTlaMDMxMTAvBgNV
BAMTKDhEQ0UwQTA5ODM1QTJCRkFBNEY4NjdFMEYwNTFBNEQyNjJCNTJCQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuMZ0mzVaMrYMJfKgJZmPgs5J
COSbglxmztMASzno4d6KVeAO0FYcSbr3SdtdxBv8/1vx3wji2zL71gZUe+FDd07d
w7tlcaOs/ch/GCQo84S02FYFk118S8KPgGVkwx/1vlu6UOHAKL+xQ+mnAvaCGqQn
z8fEQEblLXRu+VOqe0ehcFK/lKM9kKpU0VcVjZ3X8yjvNPoh+EDSIgqOhUPEoAE1
NW3FJHtwy1qwN8RLP2qVPCdK7LfXwguUsBc5hJOhL1qWdwp60LljsU3eLPt8Yig5
yJTymVPFP0Mgvqi1EcdMm4qGAEl/A0jJ8Dk+SlBu/bRBEa/AS0lr1lqD3LMxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjc4KCYNaK/qk+Gfg8FGk0mK1K8kwHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqjFnDANBgkqhkiG9w0BAQsFAAOCAQEAULra+VmM
1R6Uhix/koAXHbuO0EQedvaAhrXmt58DzQEI3vEHur0nZY+0sJChmW8jryBiTovy
+kSYHQyQHYI8gNK440dwwHOZ2V0R5zT4YMpRkkExzBUDDlgnKQZc4Vh0y/g16Azt
dICBZm7NI6DZpstQGLaEMSIzGIGiV9WXYcxHtIOhFRgreco8vlAMal1uEvT7tUPi
BkKl8CfJDhLTevirdskj4Jq2asS9wYoWJaaY19o0ri6cozWsElMBzsewRqbjRT1P
jFEfaJq3Zq1T9Ut/kw83Z4JZNE5QVByDeAXGz17WTN1E6U5QWbDheT6A9whGUvqJ
d+wKPc/I+FgtwA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:35 2025 by rpki-client