Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
File: 3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa (raw, json)
Hash identifier: nHA6nBddgs2FluZuEchwIBf6WE2LjPkMSRizBYIO/DE=
Subject key identifier: 8B:5C:A4:C8:25:7C:99:AD:30:5B:81:3A:93:29:7A:40:C7:F2:80:2D
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 06473E1C6BA654EBD08243FBCB867B76056B86C1
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
Signing time: Thu 31 Oct 2024 17:24:35 +0000
ROA not before: Thu 31 Oct 2024 17:19:35 +0000
ROA not after: Thu 30 Oct 2025 17:24:35 +0000
asID: 262272
IP address blocks: 187.120.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:47:3e:1c:6b:a6:54:eb:d0:82:43:fb:cb:86:7b:76:05:6b:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:19:35 2024 GMT
Not After : Oct 30 17:24:35 2025 GMT
Subject: CN=8B5CA4C8257C99AD305B813A93297A40C7F2802D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:74:69:07:f7:b3:09:ce:f9:4a:b5:98:2c:b8:
3f:69:e2:4d:b1:1d:9b:b5:d1:30:89:19:b1:d9:13:
90:81:c8:f4:6e:20:ee:7c:26:c2:f3:38:a8:35:b0:
c5:f8:de:ac:a2:b9:a8:f0:e9:cb:8c:64:36:e1:e5:
01:26:dc:23:23:38:72:e5:7a:0e:8a:9f:e3:d6:b1:
21:80:0f:d8:88:f6:dd:e3:d4:3a:e4:da:67:f7:ae:
d7:b3:b7:97:3e:25:71:3a:f8:2b:b3:cc:37:2a:44:
eb:eb:34:bf:1a:a7:a4:27:7c:8e:4f:fe:43:6f:7d:
84:8b:35:85:93:1d:11:14:cf:73:f4:43:93:f8:1b:
2e:2a:b6:e3:6e:5f:36:10:f8:5f:8a:84:2d:b9:24:
d9:1a:98:10:db:36:f7:56:2e:8a:e5:3c:ca:5b:d3:
27:d4:c2:b5:75:9b:f7:36:4d:ac:ac:9a:68:46:3b:
99:9c:e8:ca:a1:84:7c:b1:84:f7:b3:3e:a6:d7:c1:
d6:ac:4e:ba:1c:06:12:fe:64:b9:37:45:6e:46:2c:
0e:b3:95:f4:aa:9b:aa:d0:4e:ce:ef:85:17:09:7b:
bc:af:77:28:1f:70:62:37:67:81:3c:6f:ee:a1:f4:
ee:bb:b2:54:e6:bb:91:e5:0f:86:e2:b0:d9:71:de:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:A4:C8:25:7C:99:AD:30:5B:81:3A:93:29:7A:40:C7:F2:80:2D
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.128.0/19
Signature Algorithm: sha256WithRSAEncryption
54:f0:c9:fa:4f:d6:6e:b6:cf:5c:5f:7d:75:27:9c:d0:d9:c0:
0f:65:a4:26:80:a7:9b:a5:24:64:f6:37:3d:f3:9e:68:66:90:
0f:24:b5:bd:4b:ee:37:24:57:e7:8e:e8:24:36:0a:c4:0f:c8:
a7:d4:df:b2:6d:0a:04:50:e3:e1:84:8c:ee:cc:33:70:1f:ac:
09:a0:cf:9e:4c:02:90:1c:ef:0a:dd:e2:bb:7b:18:6b:a7:93:
e8:09:4c:73:15:d5:64:28:d8:3a:8d:4d:2e:1d:25:79:0a:f5:
ff:85:94:76:b2:69:9a:fa:53:d5:11:c9:67:54:fa:75:50:89:
5c:78:1d:65:17:c2:1c:f7:e8:92:d0:0d:ab:8c:d9:71:52:0d:
98:b3:a5:c9:94:ca:10:5b:c7:d5:a6:2f:9e:62:9f:a2:2f:88:
bd:90:2e:32:e3:e7:a9:5c:2b:b5:e6:f8:03:cb:99:52:29:93:
d0:49:c6:2d:f2:46:db:7b:17:b9:e9:bd:21:c1:d9:b0:54:e8:
14:56:3c:fd:a7:23:c8:f9:a2:4c:53:5e:d8:c3:a2:4d:41:df:
a3:5c:5f:3a:ed:01:73:6c:97:a5:3a:03:ef:e3:54:90:84:29:
f8:2c:c5:1a:5b:fa:c6:5c:84:68:a0:7b:e5:d0:16:ff:6f:5c:
3b:75:c3:d9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBkc+HGumVOvQgkP7y4Z7dgVrhsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzE5MzVaFw0yNTEwMzAxNzI0MzVaMDMxMTAvBgNV
BAMTKDhCNUNBNEM4MjU3Qzk5QUQzMDVCODEzQTkzMjk3QTQwQzdGMjgwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7dGkH97MJzvlKtZgsuD9p4k2x
HZu10TCJGbHZE5CByPRuIO58JsLzOKg1sMX43qyiuajw6cuMZDbh5QEm3CMjOHLl
eg6Kn+PWsSGAD9iI9t3j1Drk2mf3rtezt5c+JXE6+CuzzDcqROvrNL8ap6QnfI5P
/kNvfYSLNYWTHREUz3P0Q5P4Gy4qtuNuXzYQ+F+KhC25JNkamBDbNvdWLorlPMpb
0yfUwrV1m/c2TaysmmhGO5mc6MqhhHyxhPezPqbXwdasTrocBhL+ZLk3RW5GLA6z
lfSqm6rQTs7vhRcJe7yvdygfcGI3Z4E8b+6h9O67slTmu5HlD4bisNlx3mkpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUi1ykyCV8ma0wW4E6kyl6QMfygC0wHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzODM3MmUzMTMyMzAyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzYzMjMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBbt4gDANBgkqhkiG9w0BAQsFAAOCAQEAVPDJ
+k/WbrbPXF99dSec0NnAD2WkJoCnm6UkZPY3PfOeaGaQDyS1vUvuNyRX547oJDYK
xA/Ip9Tfsm0KBFDj4YSM7swzcB+sCaDPnkwCkBzvCt3iu3sYa6eT6AlMcxXVZCjY
Oo1NLh0leQr1/4WUdrJpmvpT1RHJZ1T6dVCJXHgdZRfCHPfoktANq4zZcVINmLOl
yZTKEFvH1aYvnmKfoi+IvZAuMuPnqVwrteb4A8uZUimT0EnGLfJG23sXuem9IcHZ
sFToFFY8/acjyPmiTFNe2MOiTUHfo1xfOu0Bc2yXpToD7+NUkIQp+CzFGlv6xlyE
aKB75dAW/29cO3XD2Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:40 2025 by rpki-client