Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3232203d3e203631363130.roa
File: 3138372e38372e32382e302f32322d3232203d3e203631363130.roa (raw, json)
Hash identifier: QevweAD9+2LWZjxvmfXcTQrVZ4yAl5kHwBDxTrjdZvw=
Subject key identifier: A1:3A:10:5D:6F:19:FC:59:FD:5E:CE:BE:1A:14:6C:1F:51:18:CA:86
Certificate issuer: /CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Certificate serial: 2AF6C526A4A80430A5BC9647349DC6DF92CCA331
Authority key identifier: D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3232203d3e203631363130.roa
Signing time: Fri 21 Jul 2023 18:21:09 +0000
ROA not before: Fri 21 Jul 2023 18:16:09 +0000
ROA not after: Fri 19 Jul 2024 18:21:09 +0000
asID: 61610
IP address blocks: 187.87.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f6:c5:26:a4:a8:04:30:a5:bc:96:47:34:9d:c6:df:92:cc:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Validity
Not Before: Jul 21 18:16:09 2023 GMT
Not After : Jul 19 18:21:09 2024 GMT
Subject: CN=A13A105D6F19FC59FD5ECEBE1A146C1F5118CA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:e3:08:f1:0c:f2:55:e5:50:59:30:ce:6f:
02:51:3c:cd:97:1a:49:d5:aa:7b:89:88:e5:5a:a0:
cf:53:fe:61:39:9e:06:8d:0e:ac:0b:23:c1:a0:23:
70:3a:14:9a:c4:48:a5:62:6d:87:fb:06:84:c0:86:
42:b8:dc:a8:ed:a8:15:b1:bc:1c:c7:14:8e:07:8b:
1a:cb:e8:20:af:31:76:18:00:c5:cf:77:7c:5b:b9:
0a:28:e7:96:bd:1d:d2:f5:f1:36:ce:31:a7:3a:5e:
13:5c:85:b0:59:9c:ae:76:b8:9c:69:0d:cb:cb:e1:
ae:71:7d:09:93:14:4a:7b:fa:15:08:1b:5b:cf:37:
66:92:a2:8a:8c:61:29:74:a7:ca:b0:d0:50:1e:5b:
29:57:0b:f5:10:03:66:88:b4:c6:3a:c5:5e:6e:cb:
94:4c:c4:e6:ed:c8:22:a1:93:88:c3:82:56:e4:33:
9b:d0:7b:29:46:b8:1d:67:11:54:c5:0e:6b:62:b0:
56:0e:f6:5c:a4:d7:e6:9e:79:20:87:57:e6:7c:15:
f8:00:e7:3f:42:b4:d1:9a:26:73:fd:06:d7:71:74:
3e:e7:9a:ac:31:47:a4:8d:47:b2:43:e2:e6:47:d9:
ff:38:3b:9c:4f:19:e1:4d:21:70:53:e0:45:2f:c6:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:10:5D:6F:19:FC:59:FD:5E:CE:BE:1A:14:6C:1F:51:18:CA:86
X509v3 Authority Key Identifier:
keyid:D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3232203d3e203631363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:fa:54:41:dc:c2:52:3e:cb:6b:4a:b7:65:9e:a9:7b:d5:ab:
ab:41:5c:a5:d3:5f:df:a1:90:ad:ea:0b:63:44:4f:ea:17:1a:
93:b0:aa:d2:3b:ed:83:76:3e:ac:38:7a:84:d6:5c:21:ae:6c:
e9:83:c7:d3:33:84:51:30:9e:35:88:96:59:59:bf:41:c5:52:
ec:39:85:ac:e0:55:df:86:8c:85:96:e0:6b:8e:61:67:0f:68:
cb:d3:e1:39:f3:69:87:bf:ef:50:e7:e4:71:41:14:51:e2:32:
06:ec:54:9d:0c:e8:e5:66:ca:c6:0b:32:2a:52:89:35:3b:1f:
aa:91:80:2d:ea:82:cc:ee:21:a3:9a:85:b0:32:8d:04:e1:f0:
09:30:53:e3:15:32:00:87:e1:0c:22:66:09:2a:a9:a5:d5:6a:
e3:8d:85:01:9e:11:bd:84:cd:ee:95:72:38:17:00:d2:76:37:
f2:8d:09:dd:97:7c:4d:78:a7:2c:72:18:a6:39:12:71:5c:6e:
04:b3:ac:a6:8e:59:77:56:26:e1:23:fe:1a:e5:81:cc:08:ca:
25:06:49:36:ca:24:8c:ef:fa:86:a1:b3:12:64:e2:40:64:92:
4a:84:46:a7:a3:b8:2a:05:ef:cb:99:57:35:e6:f7:3a:1f:1b:
00:cc:df:c1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKvbFJqSoBDClvJZHNJ3G35LMozEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCRDZCQzNENEY3MEVDRDBCOEM5QjgwREE0MDkxRUE3
NENFM0UzNDAeFw0yMzA3MjExODE2MDlaFw0yNDA3MTkxODIxMDlaMDMxMTAvBgNV
BAMTKEExM0ExMDVENkYxOUZDNTlGRDVFQ0VCRTFBMTQ2QzFGNTExOENBODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDOMI8QzyVeVQWTDObwJRPM2X
GknVqnuJiOVaoM9T/mE5ngaNDqwLI8GgI3A6FJrESKVibYf7BoTAhkK43KjtqBWx
vBzHFI4HixrL6CCvMXYYAMXPd3xbuQoo55a9HdL18TbOMac6XhNchbBZnK52uJxp
DcvL4a5xfQmTFEp7+hUIG1vPN2aSooqMYSl0p8qw0FAeWylXC/UQA2aItMY6xV5u
y5RMxObtyCKhk4jDglbkM5vQeylGuB1nEVTFDmtisFYO9lyk1+aeeSCHV+Z8FfgA
5z9CtNGaJnP9BtdxdD7nmqwxR6SNR7JD4uZH2f84O5xPGeFNIXBT4EUvxgmVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoToQXW8Z/Fn9Xs6+GhRsH1EYyoYwHwYDVR0j
BBgwFoAU2L1rw9T3Ds0LjJuA2kCR6nTOPjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51
RlcvMC9EOEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4QkQ2QkMzRDRGNzBFQ0Qw
QjhDOUI4MERBNDA5MUVBNzRDRTNFMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAv
MzEzODM3MmUzODM3MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM2
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArtXHDANBgkqhkiG9w0BAQsFAAOCAQEAffpUQdzCUj7L
a0q3ZZ6pe9Wrq0FcpdNf36GQreoLY0RP6hcak7Cq0jvtg3Y+rDh6hNZcIa5s6YPH
0zOEUTCeNYiWWVm/QcVS7DmFrOBV34aMhZbga45hZw9oy9PhOfNph7/vUOfkcUEU
UeIyBuxUnQzo5WbKxgsyKlKJNTsfqpGALeqCzO4ho5qFsDKNBOHwCTBT4xUyAIfh
DCJmCSqppdVq442FAZ4RvYTN7pVyOBcA0nY38o0J3Zd8TXinLHIYpjkScVxuBLOs
po5Zd1Ym4SP+GuWBzAjKJQZJNsokjO/6hqGzEmTiQGSSSoRGp6O4KgXvy5lXNeb3
Oh8bAMzfwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org