Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3232203d3e203631373531.roa
File: 3136382e3232382e34302e302f32322d3232203d3e203631373531.roa (raw, json)
Hash identifier: dmGjOe7o9y+wCR7dGGFDSr+a/Gsm2xK/UWalZpSk7Vw=
Subject key identifier: FF:45:41:BC:68:BE:D3:94:C8:2F:31:67:3F:B1:C7:DF:E7:5D:F0:FD
Certificate issuer: /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial: 5D5EF70EF2BD7A5CE1B8F1D7782B33D88BF3AFDF
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3232203d3e203631373531.roa
Signing time: Fri 15 Sep 2023 20:39:08 +0000
ROA not before: Fri 15 Sep 2023 20:34:08 +0000
ROA not after: Fri 13 Sep 2024 20:39:08 +0000
asID: 61751
IP address blocks: 168.228.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5e:f7:0e:f2:bd:7a:5c:e1:b8:f1:d7:78:2b:33:d8:8b:f3:af:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Validity
Not Before: Sep 15 20:34:08 2023 GMT
Not After : Sep 13 20:39:08 2024 GMT
Subject: CN=FF4541BC68BED394C82F31673FB1C7DFE75DF0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:07:9d:dc:96:25:d2:c1:6c:18:ba:77:af:
75:49:5b:2c:4e:52:7e:2e:5b:a1:bd:e8:80:aa:34:
7f:3c:ee:3a:c1:d5:df:02:39:b9:a1:aa:ac:2d:88:
15:04:39:89:30:38:cc:af:81:8f:b1:e4:e9:24:cd:
6e:fd:17:af:11:85:07:b4:a3:69:3d:f5:cd:5a:64:
74:1c:0d:a3:ab:7c:84:f1:de:2a:26:43:ac:b1:8c:
c8:38:bc:1a:c9:df:a0:22:07:28:16:3a:eb:e7:dc:
0a:62:ad:31:07:d7:28:cb:24:18:4c:b3:6f:0a:3e:
25:26:4d:8c:08:64:01:5d:f0:a7:cd:d9:62:b1:c8:
0a:a4:63:35:9c:fe:55:18:46:c6:d7:dc:f7:6a:ae:
1a:3d:3c:80:a4:f6:b7:42:6f:48:cb:c2:8c:ed:86:
1c:04:00:d6:44:83:43:fe:48:65:77:5a:55:64:33:
2d:e3:77:1e:d2:bf:ed:2d:f5:d9:fc:5b:3e:0a:f3:
e1:08:97:98:e6:92:0a:25:79:dc:1b:d1:9a:9f:fe:
09:69:1e:46:58:83:c7:2c:e9:b5:96:6f:13:d1:69:
e6:9e:ca:af:31:2e:e6:4e:3a:7b:8a:05:b3:ed:31:
9b:53:fe:cf:60:ae:30:0d:ab:c3:1a:ae:89:24:cc:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:41:BC:68:BE:D3:94:C8:2F:31:67:3F:B1:C7:DF:E7:5D:F0:FD
X509v3 Authority Key Identifier:
keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3232203d3e203631373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.40.0/22
Signature Algorithm: sha256WithRSAEncryption
86:93:0d:f5:a5:be:d3:34:5c:44:78:c5:2e:e4:3f:f3:62:3e:
77:93:9d:1e:45:82:7d:fd:b5:ae:aa:47:7e:e4:89:40:d5:c6:
bf:a0:50:09:be:ca:ba:2d:1b:bd:95:de:82:d7:dd:83:02:9a:
c8:3f:ed:04:e5:3c:25:69:b5:c0:97:49:04:d8:81:dd:65:b2:
1d:f8:45:cd:d5:c2:49:d7:93:e3:de:9b:e4:7d:91:d7:ce:e4:
6a:e2:e9:f3:d5:cf:49:d2:f5:03:11:3e:78:9d:ee:3f:9d:2c:
ab:07:6b:ba:22:91:be:b7:d6:00:02:82:da:fc:a1:36:67:25:
62:71:19:1b:44:17:0e:07:dc:b8:8c:80:9b:74:6d:25:26:a4:
65:c4:f9:cf:6a:04:ce:9e:32:ff:59:39:17:6a:1f:f5:3e:f4:
0b:d4:37:91:54:c8:00:45:36:c5:20:4c:05:04:77:6a:0d:85:
12:2d:a7:44:c5:93:eb:fd:12:37:7a:b8:2f:00:78:01:28:b2:
78:66:2d:7b:50:5d:7c:e1:62:9b:35:90:dd:d8:37:a7:2b:ca:
4e:b7:d0:92:4e:59:13:f0:5f:9a:71:aa:1e:b1:1b:21:86:fd:
0a:47:f6:07:29:1e:ef:92:30:de:c7:fc:69:37:85:4c:ff:c9:
f4:6e:fe:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXV73DvK9elzhuPHXeCsz2Ivzr98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IyRDg3MEQ0RDkwODgzNkUzNzhFRDdCMUYyQ0M2RTJG
RUZFNTAzMjAeFw0yMzA5MTUyMDM0MDhaFw0yNDA5MTMyMDM5MDhaMDMxMTAvBgNV
BAMTKEZGNDU0MUJDNjhCRUQzOTRDODJGMzE2NzNGQjFDN0RGRTc1REYwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEAed3JYl0sFsGLp3r3VJWyxO
Un4uW6G96ICqNH887jrB1d8CObmhqqwtiBUEOYkwOMyvgY+x5OkkzW79F68RhQe0
o2k99c1aZHQcDaOrfITx3iomQ6yxjMg4vBrJ36AiBygWOuvn3ApirTEH1yjLJBhM
s28KPiUmTYwIZAFd8KfN2WKxyAqkYzWc/lUYRsbX3Pdqrho9PICk9rdCb0jLwozt
hhwEANZEg0P+SGV3WlVkMy3jdx7Sv+0t9dn8Wz4K8+EIl5jmkgoledwb0Zqf/glp
HkZYg8cs6bWWbxPRaeaeyq8xLuZOOnuKBbPtMZtT/s9grjANq8MarokkzPxdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/0VBvGi+05TILzFnP7HH3+dd8P0wHwYDVR0j
BBgwFoAUyy2HDU2QiDbjeO17HyzG4v7+UDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa
UFMvMC9DQjJEODcwRDREOTA4ODM2RTM3OEVEN0IxRjJDQzZFMkZFRkU1MDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCMkQ4NzBENEQ5MDg4MzZF
Mzc4RUQ3QjFGMkNDNkUyRkVGRTUwMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqOQoMA0GCSqGSIb3DQEBCwUAA4IBAQCGkw31pb7T
NFxEeMUu5D/zYj53k50eRYJ9/bWuqkd+5IlA1ca/oFAJvsq6LRu9ld6C192DAprI
P+0E5TwlabXAl0kE2IHdZbId+EXN1cJJ15Pj3pvkfZHXzuRq4unz1c9J0vUDET54
ne4/nSyrB2u6IpG+t9YAAoLa/KE2ZyVicRkbRBcOB9y4jICbdG0lJqRlxPnPagTO
njL/WTkXah/1PvQL1DeRVMgARTbFIEwFBHdqDYUSLadExZPr/RI3ergvAHgBKLJ4
Zi17UF184WKbNZDd2DenK8pOt9CSTlkT8F+acaoesRshhv0KR/YHKR7vkjDex/xp
N4VM/8n0bv59
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:59 2025 by rpki-client