Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
File: 3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa (raw, json)
Hash identifier: R5O/xpHgAniGMyVvJF9U/igFa/tD+Y4RY+awcSvr1qI=
Subject key identifier: C3:F5:80:64:5F:B1:7B:2B:D5:89:E8:EA:F6:D6:EF:FB:09:70:B8:11
Certificate issuer: /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial: 36A0F7F1D089A820EBF327F617CC2784E252140D
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
Signing time: Mon 11 Mar 2024 12:33:08 +0000
ROA not before: Mon 11 Mar 2024 12:28:08 +0000
ROA not after: Mon 10 Mar 2025 12:33:08 +0000
asID: 264025
IP address blocks: 143.137.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a0:f7:f1:d0:89:a8:20:eb:f3:27:f6:17:cc:27:84:e2:52:14:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Validity
Not Before: Mar 11 12:28:08 2024 GMT
Not After : Mar 10 12:33:08 2025 GMT
Subject: CN=C3F580645FB17B2BD589E8EAF6D6EFFB0970B811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:ff:48:0a:1e:3a:da:c8:98:42:3e:1d:24:
5e:ef:7e:fb:f1:3a:54:2f:31:b0:ad:8c:a5:18:a0:
00:60:0e:da:fe:15:1f:53:07:ee:ff:f0:ba:41:63:
37:0a:bc:be:ae:ea:49:7a:82:5d:b0:af:98:2f:c0:
22:5b:3d:42:9f:d7:53:d1:15:30:fd:08:8c:d9:a3:
2c:83:cc:69:8a:ca:38:76:d0:65:b0:2a:05:b4:c8:
02:c9:0d:92:bd:75:04:1a:e0:6d:3b:b1:6c:bf:47:
38:98:94:9e:72:80:29:54:28:ab:74:4c:10:93:0d:
25:34:49:a1:ae:6a:26:3a:93:3b:7f:38:4d:92:5a:
5f:92:22:5a:91:8f:33:59:c5:7b:f7:59:d6:86:ba:
87:1c:86:fe:2a:7e:2a:f2:c6:ae:e5:0e:61:91:01:
cc:9c:83:76:4e:57:24:4c:49:6d:74:ff:a2:b2:2a:
3e:6d:00:e3:88:47:1d:91:ff:bd:68:0d:ab:fe:94:
67:5f:52:3f:56:cf:47:bd:31:39:8d:cf:61:f3:a8:
b5:4a:d1:2a:2e:ea:97:ee:17:98:13:51:c0:10:7c:
24:22:5b:7c:52:e6:98:ff:31:95:65:93:91:da:b5:
76:fd:77:bd:09:cf:41:73:41:b6:45:27:bc:57:62:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:80:64:5F:B1:7B:2B:D5:89:E8:EA:F6:D6:EF:FB:09:70:B8:11
X509v3 Authority Key Identifier:
keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a2:01:32:3b:d1:4b:22:5f:6d:8f:3a:b7:b8:d9:70:85:20:
08:25:5d:a1:0c:84:3d:ea:dc:c2:d3:1d:12:30:b6:00:75:e4:
e6:5a:d0:a9:0a:35:bc:3d:4c:2c:5d:42:5e:5d:d6:4d:07:38:
52:c5:06:b4:45:e8:86:5f:92:6b:aa:0e:e8:98:14:72:fc:63:
05:42:10:99:61:38:22:00:9d:03:80:f1:56:3d:24:a7:c0:e7:
f2:69:cc:f3:07:c5:ae:7f:2b:c1:5b:6d:51:96:07:2f:26:a7:
35:c8:be:8e:c1:33:b4:03:75:e4:be:30:fe:98:12:e0:77:13:
be:27:e7:f4:3e:f8:31:6f:61:e4:06:f8:9d:27:08:4c:bd:ec:
5f:c3:76:b9:bf:9f:b0:87:a8:e1:e2:5b:c8:fc:97:d0:04:1c:
5f:fc:8f:c9:26:a5:fa:af:ad:5d:13:fe:bd:78:97:ab:37:b5:
a0:a1:89:70:ba:19:5e:1d:03:3e:44:56:d5:1d:d5:76:ab:60:
ce:42:69:57:de:b7:25:5b:07:32:83:c5:dd:9e:b2:fb:eb:e1:
18:ab:45:eb:9d:fd:a7:52:a4:a6:32:cf:65:9b:09:c0:c4:bf:
2f:12:14:84:f8:f8:2b:e4:4e:d9:56:18:e5:43:8a:e5:14:27:
b8:55:15:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNqD38dCJqCDr8yf2F8wnhOJSFA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMTExMjI4MDhaFw0yNTAzMTAxMjMzMDhaMDMxMTAvBgNV
BAMTKEMzRjU4MDY0NUZCMTdCMkJENTg5RThFQUY2RDZFRkZCMDk3MEI4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH/9ICh462siYQj4dJF7vfvvx
OlQvMbCtjKUYoABgDtr+FR9TB+7/8LpBYzcKvL6u6kl6gl2wr5gvwCJbPUKf11PR
FTD9CIzZoyyDzGmKyjh20GWwKgW0yALJDZK9dQQa4G07sWy/RziYlJ5ygClUKKt0
TBCTDSU0SaGuaiY6kzt/OE2SWl+SIlqRjzNZxXv3WdaGuocchv4qfiryxq7lDmGR
Acycg3ZOVyRMSW10/6KyKj5tAOOIRx2R/71oDav+lGdfUj9Wz0e9MTmNz2HzqLVK
0Sou6pfuF5gTUcAQfCQiW3xS5pj/MZVlk5HatXb9d70Jz0FzQbZFJ7xXYgHjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw/WAZF+xeyvViejq9tbv+wlwuBEwHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzEzNDMzMmUzMTMzMzcyZTMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGPiSIwDQYJKoZIhvcNAQELBQADggEBAJuiATI7
0UsiX22POre42XCFIAglXaEMhD3q3MLTHRIwtgB15OZa0KkKNbw9TCxdQl5d1k0H
OFLFBrRF6IZfkmuqDuiYFHL8YwVCEJlhOCIAnQOA8VY9JKfA5/JpzPMHxa5/K8Fb
bVGWBy8mpzXIvo7BM7QDdeS+MP6YEuB3E74n5/Q++DFvYeQG+J0nCEy97F/Ddrm/
n7CHqOHiW8j8l9AEHF/8j8kmpfqvrV0T/r14l6s3taChiXC6GV4dAz5EVtUd1Xar
YM5CaVfetyVbBzKDxd2esvvr4RirReud/adSpKYyz2WbCcDEvy8SFIT4+CvkTtlW
GOVDiuUUJ7hVFVM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:38 2025 by rpki-client