Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa
File: 3138372e34392e3232342e302f32302d3234203d3e2037303438.roa (raw, json)
Hash identifier: DR2A7KrABtq2MF5tdV/QV4U8xjjPeiwkn8h/k42pDVU=
Subject key identifier: 89:6D:57:38:17:48:9F:FD:09:60:01:10:0B:75:B7:95:8B:30:D9:66
Certificate issuer: /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial: 151F3A0CD0CF38ACE4E135DAE4217E745513E921
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa
Signing time: Fri 08 Nov 2024 18:26:42 +0000
ROA not before: Fri 08 Nov 2024 18:21:42 +0000
ROA not after: Fri 07 Nov 2025 18:26:42 +0000
asID: 7048
IP address blocks: 187.49.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1f:3a:0c:d0:cf:38:ac:e4:e1:35:da:e4:21:7e:74:55:13:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Validity
Not Before: Nov 8 18:21:42 2024 GMT
Not After : Nov 7 18:26:42 2025 GMT
Subject: CN=896D573817489FFD096001100B75B7958B30D966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:e6:a2:17:f0:ec:4b:13:18:8e:84:f7:97:
13:bd:9c:ef:4b:e3:9a:f1:43:8f:5e:c5:f7:ee:56:
73:82:36:60:c8:60:f6:8b:74:29:51:c0:c7:51:56:
00:52:49:8d:df:23:4b:e8:c7:8f:4a:ef:73:1d:ec:
1d:32:6b:23:06:a6:10:b7:4e:1d:4a:64:84:d3:1d:
52:9e:e8:c6:f9:c5:96:67:a9:3a:9d:6f:e6:84:c7:
45:f3:74:04:b9:5d:bf:9a:fe:91:b8:5b:cc:eb:62:
e4:21:dc:30:a3:cb:2c:98:fe:3a:a3:87:bb:a0:8d:
75:90:c6:a5:b4:ed:1d:90:60:e1:29:7a:8a:95:d1:
da:2f:91:36:49:72:f5:70:27:aa:fc:17:1e:e1:6c:
d6:11:66:b0:8f:9e:98:6a:ad:6d:4d:b0:e9:90:4d:
03:fc:61:69:04:99:c6:bc:0d:53:31:9c:10:a7:38:
33:01:e9:2c:6a:ab:7c:7f:80:8f:e1:d0:93:b9:7b:
2e:52:30:8f:f3:e8:79:cc:e4:35:fa:84:01:64:35:
d4:f9:7a:e0:89:ab:6c:79:2d:b2:e2:8b:63:2e:98:
ae:36:39:4b:56:04:e8:bb:c6:18:af:58:9b:2c:f3:
7b:d3:8e:86:ab:a1:b7:f5:f1:a1:d2:25:b2:ff:6a:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:57:38:17:48:9F:FD:09:60:01:10:0B:75:B7:95:8B:30:D9:66
X509v3 Authority Key Identifier:
keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:f9:c5:16:ec:c2:e0:3a:df:18:33:ab:b9:9a:6b:41:e0:49:
3e:e1:08:ee:df:47:c1:4e:54:d6:dd:ac:20:7b:8d:eb:49:e3:
ff:d8:d0:90:88:68:a1:47:bb:53:b4:e3:68:74:02:02:0d:21:
cc:8b:d4:af:23:dc:ff:d2:1b:d1:27:5c:d2:72:03:9a:52:81:
0c:7b:cd:3b:a5:ab:ef:2a:cf:e4:ea:85:07:00:34:84:a9:cf:
b2:9b:8d:d1:c5:8b:c5:30:3b:b9:bf:59:ae:54:8e:7f:4a:21:
86:71:90:18:9b:de:a3:3d:ad:d6:2e:87:ad:76:78:af:de:07:
e7:ae:65:a6:87:05:8e:cc:df:bf:ee:d7:14:e6:ef:fc:19:75:
d6:17:aa:17:4f:92:8b:90:16:cc:f9:96:a4:4b:90:db:69:de:
66:52:44:25:bd:63:48:e0:c0:26:9f:3f:f3:58:98:a8:74:1f:
93:8d:55:24:1d:96:23:09:f0:82:7f:39:2f:9c:5c:b9:11:31:
75:3a:24:a0:30:00:5f:d4:ad:6d:c0:29:fe:7c:e6:09:0c:83:
91:74:0e:2c:89:3b:95:57:b5:0f:6a:c6:6f:16:43:6b:8e:4e:
6f:49:aa:d3:4a:ff:38:08:b0:4b:20:67:8a:42:6f:f8:b9:8c:
bf:a4:a7:8d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFR86DNDPOKzk4TXa5CF+dFUT6SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzQTVEREM3NTRCRDE2NTU1RkUxMzJBN0VFMEYwNThD
MkZGN0I1NjAeFw0yNDExMDgxODIxNDJaFw0yNTExMDcxODI2NDJaMDMxMTAvBgNV
BAMTKDg5NkQ1NzM4MTc0ODlGRkQwOTYwMDExMDBCNzVCNzk1OEIzMEQ5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AeaiF/DsSxMYjoT3lxO9nO9L
45rxQ49exffuVnOCNmDIYPaLdClRwMdRVgBSSY3fI0vox49K73Md7B0yayMGphC3
Th1KZITTHVKe6Mb5xZZnqTqdb+aEx0XzdAS5Xb+a/pG4W8zrYuQh3DCjyyyY/jqj
h7ugjXWQxqW07R2QYOEpeoqV0dovkTZJcvVwJ6r8Fx7hbNYRZrCPnphqrW1NsOmQ
TQP8YWkEmca8DVMxnBCnODMB6Sxqq3x/gI/h0JO5ey5SMI/z6HnM5DX6hAFkNdT5
euCJq2x5LbLii2MumK42OUtWBOi7xhivWJss83vTjoarobf18aHSJbL/atmTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiW1XOBdIn/0JYAEQC3W3lYsw2WYwHwYDVR0j
BBgwFoAUwzpd3HVL0WVV/hMqfuDwWML/e1YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC9DMzNBNUREQzc1NEJEMTY1NTVGRTEzMkE3RUUwRjA1OEMyRkY3QjU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzM0E1RERDNzU0QkQxNjU1
NUZFMTMyQTdFRTBGMDU4QzJGRjdCNTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzODM3MmUzNDM5MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNzMw
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsx4DANBgkqhkiG9w0BAQsFAAOCAQEAoPnFFuzC4Drf
GDOruZprQeBJPuEI7t9HwU5U1t2sIHuN60nj/9jQkIhooUe7U7TjaHQCAg0hzIvU
ryPc/9Ib0Sdc0nIDmlKBDHvNO6Wr7yrP5OqFBwA0hKnPspuN0cWLxTA7ub9ZrlSO
f0ohhnGQGJveoz2t1i6HrXZ4r94H565lpocFjszfv+7XFObv/Bl11heqF0+Si5AW
zPmWpEuQ22neZlJEJb1jSODAJp8/81iYqHQfk41VJB2WIwnwgn85L5xcuRExdTok
oDAAX9StbcAp/nzmCQyDkXQOLIk7lVe1D2rGbxZDa45Ob0mq00r/OAiwSyBnikJv
+LmMv6SnjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:18 2025 by rpki-client