Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3234203d3e20323635343835.roa
File: 3136382e3139372e3135362e302f32322d3234203d3e20323635343835.roa (raw, json)
Hash identifier: /UkwCTrVuFdXqNfMIZwP/JqzNzxVCX1Af2Tt3JSVZUE=
Subject key identifier: 46:30:52:BD:F4:3F:83:FA:4D:8E:22:82:80:48:73:B3:95:C2:8E:87
Certificate issuer: /CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
Certificate serial: 3848D312D228BE61A0476F187510CD45244C2BA5
Authority key identifier: 9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3234203d3e20323635343835.roa
Signing time: Tue 05 Dec 2023 17:44:45 +0000
ROA not before: Tue 05 Dec 2023 17:39:45 +0000
ROA not after: Tue 03 Dec 2024 17:44:45 +0000
asID: 265485
IP address blocks: 168.197.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:48:d3:12:d2:28:be:61:a0:47:6f:18:75:10:cd:45:24:4c:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
Validity
Not Before: Dec 5 17:39:45 2023 GMT
Not After : Dec 3 17:44:45 2024 GMT
Subject: CN=463052BDF43F83FA4D8E2282804873B395C28E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:84:1f:70:1a:03:9d:1f:0a:5d:86:ea:15:
e5:b2:a5:59:94:3b:35:02:03:29:e1:d2:72:45:9e:
7c:47:69:29:b4:6e:53:86:23:90:c1:b2:f4:63:b9:
64:f0:31:97:2a:da:bd:4f:19:bc:86:b5:e8:89:eb:
fe:d6:12:ec:8a:ae:56:ee:4d:75:59:7f:d1:67:20:
e8:c0:d4:17:7d:b7:f5:fe:a9:e9:15:a1:73:03:b8:
01:9b:0c:12:37:99:21:dc:da:4c:d5:13:28:5c:e6:
a9:2c:ad:75:df:95:c6:7f:a6:de:3b:b4:e2:a7:8e:
34:88:98:28:1c:d9:73:08:c7:36:fd:01:37:99:27:
03:1d:d3:8e:23:94:e5:5c:ef:06:4f:70:97:a4:13:
9d:97:5c:e8:b9:8b:95:0c:ff:6d:34:2f:e1:ac:86:
69:70:2f:68:3c:eb:bd:53:9e:96:7c:9f:aa:8a:3a:
41:ad:e3:99:6e:c8:08:b5:6e:70:36:21:ea:fb:f9:
56:8a:b3:ce:8a:20:f4:70:8a:26:2a:24:4e:41:15:
30:7e:79:6e:1b:6f:42:4c:f1:f6:85:a2:aa:9f:3e:
f5:de:23:4e:9e:d0:0a:bb:5b:b4:8c:e4:56:2b:4d:
d9:de:f8:60:1e:62:f1:68:9e:f0:f1:d1:62:ac:50:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:52:BD:F4:3F:83:FA:4D:8E:22:82:80:48:73:B3:95:C2:8E:87
X509v3 Authority Key Identifier:
keyid:9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32322d3234203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.156.0/22
Signature Algorithm: sha256WithRSAEncryption
50:11:22:d3:34:a6:3f:09:d5:56:28:f4:5a:6c:e0:13:90:2d:
54:6a:12:76:da:f1:d7:6f:1b:99:82:e5:b1:35:45:c0:11:9e:
f3:77:a8:c7:82:f4:79:24:f9:3e:a4:d8:c9:c8:a0:fa:a1:b4:
1d:7f:9d:3b:01:10:61:e2:9b:ae:4e:30:b2:81:01:23:4a:a1:
fa:e5:ed:52:30:3a:53:fb:b7:37:69:d5:b3:22:66:f2:9f:e5:
02:4a:68:ae:e3:21:8f:c2:0b:89:19:98:7b:5c:5e:6a:65:87:
05:bd:e3:38:16:76:cd:46:54:ab:bb:e6:04:30:dd:6b:84:22:
82:4d:2e:89:ff:1f:e0:c5:b8:59:c0:17:77:bf:58:f5:da:46:
8e:54:a6:6e:f2:02:c3:4d:d2:50:78:55:88:a1:05:3b:2b:46:
1b:cb:54:26:3a:ca:43:51:02:58:06:c6:ab:8b:3c:e7:4d:aa:
49:e7:9f:dd:59:f2:6d:f1:ff:da:d4:9e:f3:1c:84:f6:27:61:
3a:59:80:8b:3c:5d:a2:21:76:1d:ce:04:43:8f:a4:63:36:99:
98:c8:a9:b2:b4:19:7a:0c:4c:bd:d7:18:4b:a1:69:78:e6:f6:
35:90:f5:a7:0e:73:88:70:db:e6:bd:3a:83:9f:77:dc:fd:d3:
f0:61:4b:fe
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOEjTEtIovmGgR28YdRDNRSRMK6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQTEwQkIxMDk3NkFDNzMxQjg2Njc1MDJCQ0ZBMUU0
NUJENUNDRTAeFw0yMzEyMDUxNzM5NDVaFw0yNDEyMDMxNzQ0NDVaMDMxMTAvBgNV
BAMTKDQ2MzA1MkJERjQzRjgzRkE0RDhFMjI4MjgwNDg3M0IzOTVDMjhFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDknoQfcBoDnR8KXYbqFeWypVmU
OzUCAynh0nJFnnxHaSm0blOGI5DBsvRjuWTwMZcq2r1PGbyGteiJ6/7WEuyKrlbu
TXVZf9FnIOjA1Bd9t/X+qekVoXMDuAGbDBI3mSHc2kzVEyhc5qksrXXflcZ/pt47
tOKnjjSImCgc2XMIxzb9ATeZJwMd044jlOVc7wZPcJekE52XXOi5i5UM/200L+Gs
hmlwL2g8671TnpZ8n6qKOkGt45luyAi1bnA2Ier7+VaKs86KIPRwiiYqJE5BFTB+
eW4bb0JM8faFoqqfPvXeI06e0Aq7W7SM5FYrTdne+GAeYvFonvDx0WKsUEhBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURjBSvfQ/g/pNjiKCgEhzs5XCjocwHwYDVR0j
BBgwFoAUnaoQuxCXascxuGZ1Arz6HkW9XM4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvOURBQTEwQkIxMDk3NkFDNzMxQjg2Njc1MDJCQ0ZBMUU0NUJENUNDRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85REFBMTBCQjEwOTc2QUM3MzFC
ODY2NzUwMkJDRkExRTQ1QkQ1Q0NFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqjFnDANBgkqhkiG9w0BAQsFAAOCAQEAUBEi0zSm
PwnVVij0WmzgE5AtVGoSdtrx128bmYLlsTVFwBGe83eox4L0eST5PqTYycig+qG0
HX+dOwEQYeKbrk4wsoEBI0qh+uXtUjA6U/u3N2nVsyJm8p/lAkporuMhj8ILiRmY
e1xeamWHBb3jOBZ2zUZUq7vmBDDda4Qigk0uif8f4MW4WcAXd79Y9dpGjlSmbvIC
w03SUHhViKEFOytGG8tUJjrKQ1ECWAbGq4s8502qSeef3VnybfH/2tSe8xyE9idh
OlmAizxdoiF2Hc4EQ4+kYzaZmMipsrQZegxMvdcYS6FpeOb2NZD1pw5ziHDb5r06
g5933P3T8GFL/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org