Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa
File: AS28638.roa (raw, json)
Hash identifier: Had80vKTy4bmueQNT3ikeqmr/P2zt1KeEJv6k0oc6aE=
Subject key identifier: A9:E2:AE:8B:C9:08:74:A1:FE:69:43:15:4E:2C:61:E9:E6:68:34:0C
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 156E289F3A5F0117691F6E7031ED8C844385BF5D
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa
Signing time: Tue 31 Dec 2024 22:56:47 +0000
ROA not before: Tue 31 Dec 2024 22:51:47 +0000
ROA not after: Tue 30 Dec 2025 22:56:47 +0000
asID: 28638
IP address blocks: 138.118.160.0/22 maxlen: 24
186.209.216.0/22 maxlen: 24
2804:dcc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6e:28:9f:3a:5f:01:17:69:1f:6e:70:31:ed:8c:84:43:85:bf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Dec 31 22:51:47 2024 GMT
Not After : Dec 30 22:56:47 2025 GMT
Subject: CN=A9E2AE8BC90874A1FE6943154E2C61E9E668340C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:99:f7:e7:47:5d:28:5b:60:47:b9:e2:7f:
de:4b:c4:20:e5:fb:be:4d:a6:eb:ba:fd:f2:ae:a4:
ab:3a:d2:be:c2:4b:b8:a7:f0:f3:3f:19:3f:44:60:
a6:a4:0c:1d:03:24:32:34:23:44:e1:f6:26:57:b3:
46:f9:30:d7:4e:a9:c1:01:93:16:7b:94:6b:bd:c5:
31:80:0a:ca:88:d2:f0:32:4c:2e:24:db:93:48:ae:
12:cd:4c:ef:06:aa:65:06:f6:3a:34:40:28:1d:d3:
34:dd:d6:eb:a5:38:8f:ca:96:1e:d9:ff:a7:ea:81:
10:f3:2c:75:17:8e:42:83:2e:91:91:9c:1a:95:9f:
de:f0:89:8d:e7:4f:15:54:84:30:ec:ac:be:24:c6:
97:dc:8d:a4:a1:05:1c:ac:12:e8:a4:99:97:75:96:
24:87:28:2e:a1:7a:f4:cc:53:e0:42:0d:b3:f2:f8:
bb:2d:3e:ef:e3:66:0e:c4:b6:c8:b0:5b:6d:a7:82:
b6:00:9c:97:24:40:52:86:da:98:23:d3:85:7f:c6:
b4:14:98:0e:c6:3d:91:9e:04:d0:29:7c:92:94:45:
83:a4:5d:6f:15:a2:5a:da:e8:c9:94:1a:e8:4a:5d:
70:64:59:38:bc:91:71:b1:10:a1:68:e0:16:4e:cc:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:AE:8B:C9:08:74:A1:FE:69:43:15:4E:2C:61:E9:E6:68:34:0C
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.160.0/22
186.209.216.0/22
IPv6:
2804:dcc::/32
Signature Algorithm: sha256WithRSAEncryption
50:93:dc:5a:6a:59:47:76:31:92:a6:f5:a1:96:47:17:1c:d2:
79:c8:73:73:c4:16:39:73:2d:31:bb:a1:46:09:b2:1d:77:0c:
26:3e:0d:ce:5e:61:ae:5a:1f:0d:4b:a5:12:6b:39:e6:63:cf:
c1:2e:b6:3f:85:c0:d3:c3:65:ca:81:9f:37:5d:10:89:7b:e5:
fb:87:d6:88:bc:00:29:c2:79:67:76:b3:65:88:60:65:22:b6:
ad:9e:af:d2:81:27:72:2b:ef:67:5f:70:f1:8c:97:02:65:df:
ee:3e:21:e9:bf:de:fb:93:fd:4d:6c:25:46:5a:4e:be:d5:42:
5a:e0:b3:42:e5:81:f2:64:1a:a9:14:30:d1:d1:dd:b2:3f:24:
22:03:8c:30:f5:96:af:ee:44:94:b0:54:48:56:dd:b8:2d:e3:
54:70:9a:3f:60:6d:58:e3:88:06:c7:83:2d:32:be:60:ca:6a:
53:05:cd:aa:5d:9f:53:44:43:d0:8e:c9:dc:00:ca:57:c1:88:
50:77:43:44:cd:f6:09:05:2f:90:9b:f6:5c:e9:3d:fa:ab:d5:
cd:ab:54:b3:05:25:ec:ff:d3:45:73:00:1b:61:2b:e8:ff:04:
cc:81:91:9d:2f:fb:d8:9c:50:d8:b2:be:82:9e:36:de:94:81:
d0:08:de:06
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFW4onzpfARdpH25wMe2MhEOFv10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNDEyMzEyMjUxNDdaFw0yNTEyMzAyMjU2NDdaMDMxMTAvBgNV
BAMTKEE5RTJBRThCQzkwODc0QTFGRTY5NDMxNTRFMkM2MUU5RTY2ODM0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejpn350ddKFtgR7nif95LxCDl
+75Npuu6/fKupKs60r7CS7in8PM/GT9EYKakDB0DJDI0I0Th9iZXs0b5MNdOqcEB
kxZ7lGu9xTGACsqI0vAyTC4k25NIrhLNTO8GqmUG9jo0QCgd0zTd1uulOI/Klh7Z
/6fqgRDzLHUXjkKDLpGRnBqVn97wiY3nTxVUhDDsrL4kxpfcjaShBRysEuikmZd1
liSHKC6hevTMU+BCDbPy+LstPu/jZg7EtsiwW22ngrYAnJckQFKG2pgj04V/xrQU
mA7GPZGeBNApfJKURYOkXW8Volra6MmUGuhKXXBkWTi8kXGxEKFo4BZOzBa5AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUqeKui8kIdKH+aUMVTixh6eZoNAwwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjg2
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAKKdqADBAK60dgwDQQCAAIwBwMFACgEDcwwDQYJKoZIhvcN
AQELBQADggEBAFCT3FpqWUd2MZKm9aGWRxcc0nnIc3PEFjlzLTG7oUYJsh13DCY+
Dc5eYa5aHw1LpRJrOeZjz8Eutj+FwNPDZcqBnzddEIl75fuH1oi8ACnCeWd2s2WI
YGUitq2er9KBJ3Ir72dfcPGMlwJl3+4+Iem/3vuT/U1sJUZaTr7VQlrgs0LlgfJk
GqkUMNHR3bI/JCIDjDD1lq/uRJSwVEhW3bgt41Rwmj9gbVjjiAbHgy0yvmDKalMF
zapdn1NEQ9COydwAylfBiFB3Q0TN9gkFL5Cb9lzpPfqr1c2rVLMFJez/00VzABth
K+j/BMyBkZ0v+9icUNiyvoKeNt6UgdAI3gY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:27 2025 by rpki-client