Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa
File: 3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa (raw, json)
Hash identifier: kV9H7UK9b7AI39aIMR7+iaWAMvLAW9HiDgpcZj7C2Cw=
Subject key identifier: DA:75:E2:82:ED:E4:86:95:13:94:DC:0A:BE:C8:E3:13:C7:12:0D:8B
Certificate issuer: /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial: 2D3F5FE6B8B2489AE3028C60C1086D86424D2BE7
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa
Signing time: Wed 23 Aug 2023 00:04:06 +0000
ROA not before: Tue 22 Aug 2023 23:59:06 +0000
ROA not after: Wed 21 Aug 2024 00:04:06 +0000
asID: 265041
IP address blocks: 170.150.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3f:5f:e6:b8:b2:48:9a:e3:02:8c:60:c1:08:6d:86:42:4d:2b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
Validity
Not Before: Aug 22 23:59:06 2023 GMT
Not After : Aug 21 00:04:06 2024 GMT
Subject: CN=DA75E282EDE486951394DC0ABEC8E313C7120D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:12:70:b0:26:42:8b:d0:2f:14:48:06:d9:
71:93:e3:a2:9b:43:a4:33:73:2f:2f:37:83:1a:3a:
3e:8d:d3:65:64:87:79:43:9b:59:cd:0c:f8:d0:f0:
c6:d2:63:c6:7e:36:6a:97:f6:f1:66:8a:2e:b8:18:
f8:69:10:b9:1a:3f:27:f8:77:74:79:3a:10:a1:45:
d2:2a:d7:62:37:5b:0b:01:6b:4d:20:2a:86:ed:02:
a2:ab:ac:63:15:5e:29:c4:dc:ec:5e:e7:1f:52:f4:
2c:79:15:c5:a2:b2:24:aa:17:ae:20:70:d5:36:27:
a9:e9:de:05:2f:13:ce:24:d9:a0:a1:fd:92:fe:4d:
61:a2:97:80:40:68:6f:33:82:c4:e3:bb:23:55:02:
9f:08:bf:84:08:88:21:bd:08:08:41:40:05:e2:48:
f0:77:d2:d9:f2:33:36:a1:b5:a3:fb:2a:9a:8f:7b:
b2:d1:4f:40:b5:40:09:a6:bc:3c:0c:40:08:39:37:
ec:c4:89:1a:b0:4a:c7:c7:9e:38:d2:67:5f:16:58:
19:21:1f:8c:07:88:3a:27:db:60:d5:ec:e7:f1:be:
e8:b9:15:1a:be:fb:37:df:51:95:75:c7:b7:96:b0:
3a:8d:27:a3:73:89:62:9e:85:58:42:68:48:ea:03:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:75:E2:82:ED:E4:86:95:13:94:DC:0A:BE:C8:E3:13:C7:12:0D:8B
X509v3 Authority Key Identifier:
keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.136.0/22
Signature Algorithm: sha256WithRSAEncryption
32:62:57:66:53:93:57:90:6e:c7:a6:82:5a:8c:7f:e3:be:2c:
2e:de:65:09:6d:6e:94:2d:38:8e:82:10:11:9f:84:55:0d:1e:
58:88:b0:5d:f3:e4:68:e2:74:f1:05:56:55:14:48:51:d2:eb:
26:f8:e1:30:c9:77:fe:f1:39:74:e1:b2:73:a5:2a:45:47:99:
eb:1f:d0:22:4b:56:bd:01:39:0c:56:a2:b1:9e:8d:c6:a9:24:
19:ac:6c:5d:4c:0c:4f:a4:6c:10:39:ef:b5:cb:b1:b5:1b:12:
51:e0:69:40:ca:0b:78:53:de:a0:4e:09:89:22:11:bb:65:cf:
4a:26:cf:4b:dc:79:56:96:0a:bc:ce:df:aa:ba:1a:2f:f3:6c:
35:dc:c4:3b:e3:76:98:22:19:64:88:02:fa:9a:04:a7:18:78:
76:ba:5b:06:32:55:70:3b:c2:92:04:19:af:d7:09:e0:5e:9e:
02:85:41:5c:07:73:54:56:f4:f3:5d:91:eb:79:cc:8a:a3:a4:
d3:e2:b8:0e:84:72:a4:b1:0c:82:6b:c1:e2:16:68:d5:f6:b2:
be:3e:98:e3:ef:8c:32:b0:d7:e5:b4:3f:f9:51:57:dc:1b:5d:
82:1f:9c:55:88:ac:1a:7e:88:d6:53:9b:e0:53:46:33:4d:d3:
31:36:8c:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULT9f5riySJrjAoxgwQhthkJNK+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4MzQ1NDVBMzg4OTJDM0ZGMUI3MTQxMTI2MDg0NzMw
QTEyQjdBQzAeFw0yMzA4MjIyMzU5MDZaFw0yNDA4MjEwMDA0MDZaMDMxMTAvBgNV
BAMTKERBNzVFMjgyRURFNDg2OTUxMzk0REMwQUJFQzhFMzEzQzcxMjBEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDouxJwsCZCi9AvFEgG2XGT46Kb
Q6Qzcy8vN4MaOj6N02Vkh3lDm1nNDPjQ8MbSY8Z+NmqX9vFmii64GPhpELkaPyf4
d3R5OhChRdIq12I3WwsBa00gKobtAqKrrGMVXinE3Oxe5x9S9Cx5FcWisiSqF64g
cNU2J6np3gUvE84k2aCh/ZL+TWGil4BAaG8zgsTjuyNVAp8Iv4QIiCG9CAhBQAXi
SPB30tnyMzahtaP7KpqPe7LRT0C1QAmmvDwMQAg5N+zEiRqwSsfHnjjSZ18WWBkh
H4wHiDon22DV7Ofxvui5FRq++zffUZV1x7eWsDqNJ6NziWKehVhCaEjqA3ohAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2nXigu3khpUTlNwKvsjjE8cSDYswHwYDVR0j
BBgwFoAUN4NFRaOIksP/G3FBEmCEcwoSt6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMC8zNzgzNDU0NUEzODg5MkMzRkYxQjcxNDExMjYwODQ3MzBBMTJCN0FDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3ODM0NTQ1QTM4ODkyQzNG
RjFCNzE0MTEyNjA4NDczMEExMkI3QUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzAv
MzEzNzMwMmUzMTM1MzAyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMwMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWiDANBgkqhkiG9w0BAQsFAAOCAQEAMmJX
ZlOTV5Bux6aCWox/474sLt5lCW1ulC04joIQEZ+EVQ0eWIiwXfPkaOJ08QVWVRRI
UdLrJvjhMMl3/vE5dOGyc6UqRUeZ6x/QIktWvQE5DFaisZ6NxqkkGaxsXUwMT6Rs
EDnvtcuxtRsSUeBpQMoLeFPeoE4JiSIRu2XPSibPS9x5VpYKvM7fqroaL/NsNdzE
O+N2mCIZZIgC+poEpxh4drpbBjJVcDvCkgQZr9cJ4F6eAoVBXAdzVFb0812R63nM
iqOk0+K4DoRypLEMgmvB4hZo1fayvj6Y4++MMrDX5bQ/+VFX3Btdgh+cVYisGn6I
1lOb4FNGM03TMTaMzw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:27 2025 by rpki-client