Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
File: 3136382e3232372e37362e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier: qciJ0R3AIkJweIaM2AAhLZHjgfMuS6AbOTBRU4VTjH0=
Subject key identifier: B8:F6:4F:B6:16:61:AF:3D:8F:35:D8:94:A8:18:6A:7E:EE:99:0C:47
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 36DF624A675542AB14508C8BBA5AE221BCEC6409
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
Signing time: Thu 31 Oct 2024 16:59:43 +0000
ROA not before: Thu 31 Oct 2024 16:54:43 +0000
ROA not after: Thu 30 Oct 2025 16:59:43 +0000
asID: 52940
IP address blocks: 168.227.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:df:62:4a:67:55:42:ab:14:50:8c:8b:ba:5a:e2:21:bc:ec:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:43 2024 GMT
Not After : Oct 30 16:59:43 2025 GMT
Subject: CN=B8F64FB61661AF3D8F35D894A8186A7EEE990C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:3b:36:3a:d0:3e:8b:c4:a0:4b:67:d7:55:
65:26:71:e1:5d:8f:9f:95:f0:ca:c4:d5:11:64:2a:
d9:3b:da:6e:17:23:61:f8:5b:1b:d1:5b:48:4c:dd:
4c:91:b6:5b:af:9f:2b:12:05:73:dd:8a:9f:36:7d:
15:6b:4c:95:b6:d8:82:98:5d:46:4a:93:0c:e4:14:
02:6e:c1:b9:e4:29:09:2e:51:76:05:47:94:ba:30:
93:87:dc:90:c2:9f:d5:1b:c2:8a:ca:7d:0b:76:48:
c9:36:a6:f7:4d:60:0f:7e:dc:74:67:d1:52:d5:78:
1c:91:a3:1e:d7:52:0a:1a:2d:63:5f:a0:5f:57:dc:
34:c4:9f:33:ea:c9:b7:2c:1b:e3:49:5c:4b:29:59:
e8:b7:77:15:c4:b9:68:bd:67:20:0e:b8:c8:b7:e0:
32:32:21:2e:4c:75:34:e7:82:7f:c1:fd:ac:80:7c:
15:aa:f5:4e:ea:2c:bf:a7:ca:88:00:3a:c4:a9:0c:
ec:78:a2:fd:34:e2:21:2c:ee:74:ab:02:63:9b:f3:
06:ba:0b:37:74:1a:61:88:04:60:57:09:09:f8:76:
61:89:1d:47:08:1e:4f:ae:e3:3f:c1:ec:84:4c:63:
ba:c3:f5:c5:69:2e:37:14:05:16:f0:47:df:66:93:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F6:4F:B6:16:61:AF:3D:8F:35:D8:94:A8:18:6A:7E:EE:99:0C:47
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.76.0/22
Signature Algorithm: sha256WithRSAEncryption
34:cb:2e:24:f5:37:16:69:6e:e2:93:8b:c8:ab:32:21:80:56:
33:ea:5b:59:8c:39:19:ff:58:9d:2d:76:28:4c:47:8f:e7:89:
42:4b:85:66:1c:32:0a:94:d9:54:4a:1f:e1:bf:39:2d:e7:9a:
00:9d:ad:a8:07:66:b3:52:30:cc:dc:1a:17:9f:58:d4:9c:92:
47:b9:b5:a6:76:d5:82:c2:64:f3:49:4a:96:b1:7c:f8:64:96:
29:2f:da:84:60:4b:75:5b:68:1b:4e:54:bb:c3:2a:16:ff:e6:
43:9c:c9:4c:ae:78:d6:26:9c:7f:22:69:ac:a0:2b:86:b3:25:
1c:fd:f7:2a:97:dd:c7:36:fb:f0:bf:3d:4b:df:bd:a3:1f:df:
00:af:9b:01:37:2a:5f:00:e7:0a:b4:29:91:2c:90:d9:eb:cd:
38:ac:04:36:b7:2d:93:6c:15:e7:ae:d4:76:f5:4b:b1:3b:c1:
69:e9:97:59:35:78:62:07:85:18:30:89:d9:62:5d:7f:ac:e7:
32:0d:1b:50:ac:62:79:7c:af:71:9b:d4:bc:d3:ca:2b:15:0c:
ce:05:0d:46:e8:87:bd:0b:a1:b5:f4:0d:f2:25:e9:ff:0d:6a:
ad:f8:73:e0:c2:3d:5f:2d:f6:94:78:b8:30:3e:0b:e5:5e:af:
79:36:f3:88
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNt9iSmdVQqsUUIyLulriIbzsZAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNjU0NDNaFw0yNTEwMzAxNjU5NDNaMDMxMTAvBgNV
BAMTKEI4RjY0RkI2MTY2MUFGM0Q4RjM1RDg5NEE4MTg2QTdFRUU5OTBDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdujs2OtA+i8SgS2fXVWUmceFd
j5+V8MrE1RFkKtk72m4XI2H4WxvRW0hM3UyRtluvnysSBXPdip82fRVrTJW22IKY
XUZKkwzkFAJuwbnkKQkuUXYFR5S6MJOH3JDCn9UbworKfQt2SMk2pvdNYA9+3HRn
0VLVeByRox7XUgoaLWNfoF9X3DTEnzPqybcsG+NJXEspWei3dxXEuWi9ZyAOuMi3
4DIyIS5MdTTngn/B/ayAfBWq9U7qLL+nyogAOsSpDOx4ov004iEs7nSrAmOb8wa6
Czd0GmGIBGBXCQn4dmGJHUcIHk+u4z/B7IRMY7rD9cVpLjcUBRbwR99mk597AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuPZPthZhrz2PNdiUqBhqfu6ZDEcwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzNjM4MmUzMjMyMzcyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqONMMA0GCSqGSIb3DQEBCwUAA4IBAQA0yy4k9TcW
aW7ik4vIqzIhgFYz6ltZjDkZ/1idLXYoTEeP54lCS4VmHDIKlNlUSh/hvzkt55oA
na2oB2azUjDM3BoXn1jUnJJHubWmdtWCwmTzSUqWsXz4ZJYpL9qEYEt1W2gbTlS7
wyoW/+ZDnMlMrnjWJpx/ImmsoCuGsyUc/fcql93HNvvwvz1L372jH98Ar5sBNypf
AOcKtCmRLJDZ6804rAQ2ty2TbBXnrtR29UuxO8Fp6ZdZNXhiB4UYMInZYl1/rOcy
DRtQrGJ5fK9xm9S808orFQzOBQ1G6Ie9C6G19A3yJen/DWqt+HPgwj1fLfaUeLgw
PgvlXq95NvOI
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:20 2025 by rpki-client