Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32342d3234203d3e203631373531.roa
File: 3136382e3232382e34302e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier: KxpU0ijJ7a70dzdfAv1ZEtFNWOOfoa7346LfFE5WI0c=
Subject key identifier: 53:5A:A6:44:1C:26:F1:CE:10:1F:8A:0C:CC:03:D3:20:27:9E:68:54
Certificate issuer: /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial: 08BB3A0F97D57DC628E9502661741430B49F296E
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32342d3234203d3e203631373531.roa
Signing time: Fri 15 Sep 2023 20:39:13 +0000
ROA not before: Fri 15 Sep 2023 20:34:13 +0000
ROA not after: Fri 13 Sep 2024 20:39:13 +0000
asID: 61751
IP address blocks: 168.228.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bb:3a:0f:97:d5:7d:c6:28:e9:50:26:61:74:14:30:b4:9f:29:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Validity
Not Before: Sep 15 20:34:13 2023 GMT
Not After : Sep 13 20:39:13 2024 GMT
Subject: CN=535AA6441C26F1CE101F8A0CCC03D320279E6854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:d5:6a:fd:61:b5:ed:41:e5:63:fd:05:a8:
69:93:ac:14:cf:09:b6:64:fe:81:a0:18:93:23:b0:
14:c9:83:b7:90:9d:e1:54:db:83:0c:ef:8e:9b:05:
b5:c3:0d:04:70:8c:1c:4f:db:e3:8f:dc:fe:22:87:
ef:d5:1a:7b:22:20:97:ae:70:3c:45:65:9d:5a:dc:
41:e6:70:6b:38:ba:e9:95:86:d2:aa:0d:24:c3:e1:
41:1d:70:c9:2c:ed:0c:04:b1:c7:ab:f7:45:ea:da:
2c:3f:0a:84:d2:7e:4a:c1:61:fc:01:28:14:be:20:
21:12:3f:ec:4f:ea:74:b8:cf:e5:c3:87:e8:a7:55:
a0:21:60:ff:89:16:70:6d:e7:9d:9e:76:31:16:44:
c8:a0:78:70:3a:6a:1c:cc:d7:a9:9b:01:a8:1f:b9:
d6:e8:19:51:c4:fb:ac:85:8d:e0:00:6a:31:97:32:
bd:93:35:5e:91:04:bb:b5:96:ba:81:0e:9b:4a:c0:
b7:57:1b:13:84:78:31:5b:69:fa:15:ad:66:a3:e6:
ec:3f:95:ca:70:5b:b4:ab:e3:fc:63:30:e3:ae:bf:
33:11:47:b1:82:c1:13:28:64:93:0b:92:15:13:1f:
38:24:88:7d:3b:26:2e:f2:2b:f0:9a:4b:35:6a:7c:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:A6:44:1C:26:F1:CE:10:1F:8A:0C:CC:03:D3:20:27:9E:68:54
X509v3 Authority Key Identifier:
keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32342d3234203d3e203631373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:87:c5:0f:a3:2a:82:5c:90:42:5c:94:25:c4:76:c6:6e:69:
b4:65:3c:c0:26:5b:3c:63:aa:af:ab:2e:4a:a3:2f:2d:4d:c4:
dc:8c:2a:f4:97:ee:2e:70:aa:4f:68:f2:80:78:6a:d9:a6:1a:
41:33:83:1b:5d:5d:d6:0a:f5:e7:59:fd:c9:0e:78:45:c9:91:
47:e5:92:29:1e:27:29:f0:9f:55:6d:03:fb:83:3f:11:25:50:
81:e9:c3:06:e9:75:b0:2a:e5:a3:6d:10:ae:b5:16:6f:fd:20:
33:e3:1f:38:47:46:d1:02:94:23:f4:00:12:a3:59:a1:e4:43:
78:ac:fe:cd:4e:16:d7:08:5f:aa:60:cb:83:98:ef:ee:fd:e2:
7d:18:80:a8:c4:41:90:f1:a3:fb:80:fa:b4:a6:2d:50:62:05:
dd:b7:b0:3b:5b:a8:31:3a:5f:69:bd:8c:ec:8c:3f:55:6b:ea:
30:f5:5a:6e:af:fb:f6:1c:34:5f:9c:92:c2:3a:89:c8:f5:ae:
ab:4c:cc:b1:3c:42:66:58:8d:92:25:96:2a:73:40:ed:2a:7c:
fc:02:ab:2c:88:fc:d4:e7:1d:45:56:54:b3:6b:97:d4:f4:e8:
f3:d9:dd:0e:44:3b:16:33:eb:1a:94:d8:60:c1:d7:28:46:da:
0c:39:73:36
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCLs6D5fVfcYo6VAmYXQUMLSfKW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IyRDg3MEQ0RDkwODgzNkUzNzhFRDdCMUYyQ0M2RTJG
RUZFNTAzMjAeFw0yMzA5MTUyMDM0MTNaFw0yNDA5MTMyMDM5MTNaMDMxMTAvBgNV
BAMTKDUzNUFBNjQ0MUMyNkYxQ0UxMDFGOEEwQ0NDMDNEMzIwMjc5RTY4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDng9Vq/WG17UHlY/0FqGmTrBTP
CbZk/oGgGJMjsBTJg7eQneFU24MM746bBbXDDQRwjBxP2+OP3P4ih+/VGnsiIJeu
cDxFZZ1a3EHmcGs4uumVhtKqDSTD4UEdcMks7QwEscer90Xq2iw/CoTSfkrBYfwB
KBS+ICESP+xP6nS4z+XDh+inVaAhYP+JFnBt552edjEWRMigeHA6ahzM16mbAagf
udboGVHE+6yFjeAAajGXMr2TNV6RBLu1lrqBDptKwLdXGxOEeDFbafoVrWaj5uw/
lcpwW7Sr4/xjMOOuvzMRR7GCwRMoZJMLkhUTHzgkiH07Ji7yK/CaSzVqfEffAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUU1qmRBwm8c4QH4oMzAPTICeeaFQwHwYDVR0j
BBgwFoAUyy2HDU2QiDbjeO17HyzG4v7+UDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa
UFMvMC9DQjJEODcwRDREOTA4ODM2RTM3OEVEN0IxRjJDQzZFMkZFRkU1MDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCMkQ4NzBENEQ5MDg4MzZF
Mzc4RUQ3QjFGMkNDNkUyRkVGRTUwMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqOQoMA0GCSqGSIb3DQEBCwUAA4IBAQBMh8UPoyqC
XJBCXJQlxHbGbmm0ZTzAJls8Y6qvqy5Koy8tTcTcjCr0l+4ucKpPaPKAeGrZphpB
M4MbXV3WCvXnWf3JDnhFyZFH5ZIpHicp8J9VbQP7gz8RJVCB6cMG6XWwKuWjbRCu
tRZv/SAz4x84R0bRApQj9AASo1mh5EN4rP7NThbXCF+qYMuDmO/u/eJ9GICoxEGQ
8aP7gPq0pi1QYgXdt7A7W6gxOl9pvYzsjD9Va+ow9Vpur/v2HDRfnJLCOonI9a6r
TMyxPEJmWI2SJZYqc0DtKnz8AqssiPzU5x1FVlSza5fU9Ojz2d0ORDsWM+salNhg
wdcoRtoMOXM2
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:48 2025 by rpki-client