Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
File: 3138392e312e3132382e302f32302d3234203d3e203238363635.roa (raw, json)
Hash identifier: 5tFgusVkffK/QTGA5FRZnvre3D2hgv/K9pv8iQv9YrI=
Subject key identifier: F7:85:BC:94:5B:83:A8:91:DD:FC:2F:28:E5:E1:B1:61:44:EB:22:46
Certificate issuer: /CN=85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0
Certificate serial: 5F0C1393B9361B2175D1FFF70CC2F0DDBEC9449E
Authority key identifier: 85:BB:5D:7E:FD:8A:A7:F5:C3:4C:B8:43:FA:EB:BB:8E:D1:14:03:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
Signing time: Fri 15 Sep 2023 22:18:09 +0000
ROA not before: Fri 15 Sep 2023 22:13:09 +0000
ROA not after: Fri 13 Sep 2024 22:18:09 +0000
asID: 28665
IP address blocks: 189.1.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0c:13:93:b9:36:1b:21:75:d1:ff:f7:0c:c2:f0:dd:be:c9:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0
Validity
Not Before: Sep 15 22:13:09 2023 GMT
Not After : Sep 13 22:18:09 2024 GMT
Subject: CN=F785BC945B83A891DDFC2F28E5E1B16144EB2246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:9a:93:17:74:68:9e:ae:cf:07:4a:4b:d8:
ea:d5:8f:87:6c:e5:32:d6:a0:37:31:89:dd:a6:92:
5f:47:fe:da:a9:ad:51:e3:47:1e:9f:1f:a4:fa:ca:
ad:9b:e3:cc:cb:a4:f9:f7:0e:74:e8:a0:32:55:38:
2d:56:e5:b8:6c:37:38:b5:a6:19:5d:06:44:56:73:
d2:24:ac:bf:3d:a0:e6:0d:2a:ef:90:dc:49:19:dd:
ed:79:cc:e7:f3:5e:f5:70:52:88:c6:66:a7:60:e9:
cc:9b:c3:0a:94:c7:0f:00:74:1a:14:cb:2a:67:52:
48:7f:c7:d3:df:b0:b5:bc:ac:fe:ed:56:9c:92:59:
13:4a:a5:17:75:ad:a8:b9:9d:29:78:42:d3:b6:ee:
3b:a2:eb:eb:a5:ad:97:cc:90:cc:27:6b:4a:7b:76:
85:51:0a:dd:3f:13:29:7d:45:36:70:91:3c:bd:dd:
23:66:b6:af:70:65:3f:16:29:ee:42:21:91:61:09:
5f:76:59:a9:38:1e:2a:9f:bd:28:12:20:37:a7:eb:
85:a0:df:e0:ce:9a:4f:e4:3e:e0:7d:c3:63:49:0d:
88:02:70:23:ab:d6:7b:14:ea:16:3a:09:ed:25:b2:
2c:9f:29:04:df:63:ec:b1:96:73:31:fd:82:d7:7c:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:BC:94:5B:83:A8:91:DD:FC:2F:28:E5:E1:B1:61:44:EB:22:46
X509v3 Authority Key Identifier:
keyid:85:BB:5D:7E:FD:8A:A7:F5:C3:4C:B8:43:FA:EB:BB:8E:D1:14:03:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.128.0/20
Signature Algorithm: sha256WithRSAEncryption
11:07:55:04:91:7e:a3:c2:fb:7f:2f:3f:70:29:8e:bb:01:b3:
e6:d9:e5:27:4d:fb:31:5c:d5:4e:0f:e3:54:4b:9a:8d:09:13:
08:c4:ed:34:60:98:7b:99:2f:a8:b9:63:28:8b:eb:1b:76:5b:
fa:84:f2:72:e3:01:21:f1:d3:b3:4d:5c:13:68:96:42:67:b1:
f4:df:e0:09:38:f1:0b:96:30:aa:1d:18:27:8b:92:da:9c:ab:
e8:c1:2b:26:83:4a:48:45:56:c9:70:d2:d8:96:ef:a4:82:32:
ac:13:45:15:ea:d1:ec:e9:f3:4c:68:a2:2d:2c:a5:51:ba:8a:
95:93:4e:1d:e7:a3:81:bd:c4:ce:de:37:74:f7:54:69:d7:0c:
f2:b8:0c:0c:2c:6e:ad:d9:32:5e:a3:19:3b:af:d0:4e:7d:12:
27:a0:c7:52:95:eb:a6:c8:c1:d6:31:cc:e9:6f:73:fe:c5:2c:
d8:4a:4a:06:db:88:73:5b:c0:46:38:97:6b:08:9a:ba:8e:8f:
d3:b0:2f:f8:f9:30:c8:5f:79:f9:ce:a0:af:bc:bb:2e:ec:f6:
b1:5a:84:e0:87:07:fe:8d:52:e2:b5:ee:10:1e:3d:02:54:b1:
bf:f8:36:b9:81:d2:2c:c4:b4:42:50:d5:d9:50:b9:80:18:8f:
d6:63:9e:5a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXwwTk7k2GyF10f/3DMLw3b7JRJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCQjVEN0VGRDhBQTdGNUMzNENCODQzRkFFQkJCOEVE
MTE0MDNGMDAeFw0yMzA5MTUyMjEzMDlaFw0yNDA5MTMyMjE4MDlaMDMxMTAvBgNV
BAMTKEY3ODVCQzk0NUI4M0E4OTFEREZDMkYyOEU1RTFCMTYxNDRFQjIyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjn5qTF3Ronq7PB0pL2OrVj4ds
5TLWoDcxid2mkl9H/tqprVHjRx6fH6T6yq2b48zLpPn3DnTooDJVOC1W5bhsNzi1
phldBkRWc9IkrL89oOYNKu+Q3EkZ3e15zOfzXvVwUojGZqdg6cybwwqUxw8AdBoU
yypnUkh/x9PfsLW8rP7tVpySWRNKpRd1rai5nSl4QtO27jui6+ulrZfMkMwna0p7
doVRCt0/Eyl9RTZwkTy93SNmtq9wZT8WKe5CIZFhCV92Wak4HiqfvSgSIDen64Wg
3+DOmk/kPuB9w2NJDYgCcCOr1nsU6hY6Ce0lsiyfKQTfY+yxlnMx/YLXfLZhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU94W8lFuDqJHd/C8o5eGxYUTrIkYwHwYDVR0j
BBgwFoAUhbtdfv2Kp/XDTLhD+uu7jtEUA/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fk
b3YvMS84NUJCNUQ3RUZEOEFBN0Y1QzM0Q0I4NDNGQUVCQkI4RUQxMTQwM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1QkI1RDdFRkQ4QUE3RjVD
MzRDQjg0M0ZBRUJCQjhFRDExNDAzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3QkZ2ZmZ0ZUxtUkZOclRkZzNQTWtwc21WMVBkckFudHd3dE1DRkdxZG92LzEv
MzEzODM5MmUzMTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0BgDANBgkqhkiG9w0BAQsFAAOCAQEAEQdVBJF+o8L7
fy8/cCmOuwGz5tnlJ037MVzVTg/jVEuajQkTCMTtNGCYe5kvqLljKIvrG3Zb+oTy
cuMBIfHTs01cE2iWQmex9N/gCTjxC5Ywqh0YJ4uS2pyr6MErJoNKSEVWyXDS2Jbv
pIIyrBNFFerR7OnzTGiiLSylUbqKlZNOHeejgb3Ezt43dPdUadcM8rgMDCxurdky
XqMZO6/QTn0SJ6DHUpXrpsjB1jHM6W9z/sUs2EpKBtuIc1vARjiXawiauo6P07Av
+PkwyF95+c6gr7y7Luz2sVqE4IcH/o1S4rXuEB49AlSxv/g2uYHSLMS0QlDV2VC5
gBiP1mOeWg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:15 2025 by rpki-client