Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
File: 3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa (raw, json)
Hash identifier: Mh/ugyEPRzPZDbqRQRpmGbxtHRO8KQHr8GdD2H7PnlA=
Subject key identifier: 4A:D8:42:85:2F:84:F4:08:9D:21:4B:8F:45:E7:5C:27:56:71:87:D6
Certificate issuer: /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial: 6DD228195FD481AEC837E372C5D5C250815F4ACA
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
Signing time: Fri 03 Nov 2023 13:03:08 +0000
ROA not before: Fri 03 Nov 2023 12:58:08 +0000
ROA not after: Fri 01 Nov 2024 13:03:08 +0000
asID: 28669
IP address blocks: 191.241.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d2:28:19:5f:d4:81:ae:c8:37:e3:72:c5:d5:c2:50:81:5f:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Validity
Not Before: Nov 3 12:58:08 2023 GMT
Not After : Nov 1 13:03:08 2024 GMT
Subject: CN=4AD842852F84F4089D214B8F45E75C27567187D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:0f:1c:1a:8a:c6:08:5f:60:fc:a4:7e:87:
a6:a2:ae:8c:00:07:47:1a:23:6a:b6:43:39:7f:57:
7f:d6:ed:e4:16:de:e6:f3:71:c4:c2:44:df:e7:92:
72:60:6e:83:93:53:a3:e1:a3:7d:a9:bf:34:0b:c7:
59:1e:16:26:c2:49:01:cb:be:2b:39:cb:53:bc:58:
9f:7b:1c:25:8a:02:af:22:15:34:2d:9e:fe:af:a9:
00:8e:a8:f3:2a:32:05:c2:17:8b:a7:41:32:8f:5c:
ba:f0:03:83:e1:65:e4:52:55:90:da:f6:cd:b9:45:
77:d1:38:94:a9:d3:33:9b:c3:c0:5b:5e:b5:61:3c:
fb:1f:db:27:0a:8a:6f:e9:30:cb:5b:42:de:3c:15:
45:c4:ec:98:3c:c7:3e:86:bd:f3:15:a7:c5:eb:97:
5f:23:74:02:82:ed:d4:cd:af:c3:e4:b8:60:67:07:
b9:68:19:d9:55:7d:8d:ef:f1:2a:f6:15:67:ba:c5:
1a:50:c6:ec:f0:70:ab:53:c2:c1:ef:3d:32:75:d4:
fc:05:2f:9b:84:d1:42:bc:61:69:e9:3f:cf:28:9b:
cf:f5:58:42:52:dd:67:b6:d1:18:9d:34:1a:a1:70:
46:ec:ec:c0:91:45:ee:a7:67:b7:6f:b8:5d:da:19:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:42:85:2F:84:F4:08:9D:21:4B:8F:45:E7:5C:27:56:71:87:D6
X509v3 Authority Key Identifier:
keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.224.0/19
Signature Algorithm: sha256WithRSAEncryption
86:2c:d8:8f:3a:e6:45:d0:1e:39:15:6d:93:e5:4f:4b:03:7e:
19:18:71:cb:80:5b:99:a8:b4:6e:db:47:48:09:aa:e6:d7:5b:
f2:59:f0:f3:c8:ad:29:2d:a8:5f:c5:eb:76:9e:1e:aa:b0:fb:
34:11:81:a0:b3:f8:95:fa:45:07:9b:3c:96:32:0d:2a:84:ea:
01:38:63:cc:de:5b:06:4b:fe:ea:6d:36:f5:54:ca:b0:d9:6b:
88:6d:22:36:db:0d:0d:b0:61:84:c3:76:77:9f:d0:bc:e5:b9:
6a:5e:72:c9:24:89:c4:a7:75:40:62:fc:75:87:e6:25:01:ac:
46:a8:ad:06:53:3f:8c:17:05:0c:19:a9:73:79:34:ed:03:6c:
5c:03:07:de:e7:50:e3:7b:f3:17:15:11:fd:28:40:ca:ac:61:
ba:f2:72:b0:a6:2a:ce:30:58:86:6b:fe:3d:fa:ff:dd:54:f1:
b0:6a:d9:cb:e9:1c:bb:58:d2:47:af:02:9c:70:0e:d2:69:14:
d7:68:16:ef:78:75:d7:ec:04:90:24:a4:26:e9:be:4d:a8:16:
b2:5a:1e:55:ed:8f:3e:0d:e2:15:92:3f:67:85:fa:ac:37:7a:
c8:da:f6:01:56:16:7a:d1:87:70:3d:b8:d6:ca:15:6d:51:85:
8e:e1:c8:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbdIoGV/Uga7IN+NyxdXCUIFfSsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZERjNDNTRDMzRCQzAwNDBBQkJCRTQxMkVDNjk0OEM4
N0QxNjIyQTAeFw0yMzExMDMxMjU4MDhaFw0yNDExMDExMzAzMDhaMDMxMTAvBgNV
BAMTKDRBRDg0Mjg1MkY4NEY0MDg5RDIxNEI4RjQ1RTc1QzI3NTY3MTg3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Nw8cGorGCF9g/KR+h6airowA
B0caI2q2Qzl/V3/W7eQW3ubzccTCRN/nknJgboOTU6Pho32pvzQLx1keFibCSQHL
vis5y1O8WJ97HCWKAq8iFTQtnv6vqQCOqPMqMgXCF4unQTKPXLrwA4PhZeRSVZDa
9s25RXfROJSp0zObw8BbXrVhPPsf2ycKim/pMMtbQt48FUXE7Jg8xz6GvfMVp8Xr
l18jdAKC7dTNr8PkuGBnB7loGdlVfY3v8Sr2FWe6xRpQxuzwcKtTwsHvPTJ11PwF
L5uE0UK8YWnpP88om8/1WEJS3We20RidNBqhcEbs7MCRRe6nZ7dvuF3aGWiZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSthChS+E9AidIUuPRedcJ1Zxh9YwHwYDVR0j
BBgwFoAUNt88VMNLwAQKu75BLsaUjIfRYiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMC8zNkRGM0M1NEMzNEJDMDA0MEFCQkJFNDEyRUM2OTQ4Qzg3RDE2MjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2REYzQzU0QzM0QkMwMDQw
QUJCQkU0MTJFQzY5NDhDODdEMTYyMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzAv
MzEzOTMxMmUzMjM0MzEyZTMyMzIzNDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW/8eAwDQYJKoZIhvcNAQELBQADggEBAIYs2I86
5kXQHjkVbZPlT0sDfhkYccuAW5motG7bR0gJqubXW/JZ8PPIrSktqF/F63aeHqqw
+zQRgaCz+JX6RQebPJYyDSqE6gE4Y8zeWwZL/uptNvVUyrDZa4htIjbbDQ2wYYTD
dnef0LzluWpecskkicSndUBi/HWH5iUBrEaorQZTP4wXBQwZqXN5NO0DbFwDB97n
UON78xcVEf0oQMqsYbrycrCmKs4wWIZr/j36/91U8bBq2cvpHLtY0kevApxwDtJp
FNdoFu94ddfsBJAkpCbpvk2oFrJaHlXtjz4N4hWSP2eF+qw3esja9gFWFnrRh3A9
uNbKFW1RhY7hyMY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:13 2025 by rpki-client