Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa
File: 3139312e3235332e302e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier: DYH1MrDBlm8bF0EJwNwkbtnSZO6RevR61KGUNU7UXo0=
Subject key identifier: 2B:E4:C8:7A:58:29:7F:E7:87:F7:7F:39:0B:50:3B:71:43:F3:8E:0F
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 56D91C13734C309DD0B4C541566D21621272F48C
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa
Signing time: Thu 31 Oct 2024 17:05:14 +0000
ROA not before: Thu 31 Oct 2024 17:00:14 +0000
ROA not after: Thu 30 Oct 2025 17:05:14 +0000
asID: 53080
IP address blocks: 191.253.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d9:1c:13:73:4c:30:9d:d0:b4:c5:41:56:6d:21:62:12:72:f4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:00:14 2024 GMT
Not After : Oct 30 17:05:14 2025 GMT
Subject: CN=2BE4C87A58297FE787F77F390B503B7143F38E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:af:52:06:23:27:0b:48:c6:21:57:2e:ab:
93:b6:49:01:01:9c:fc:d6:5e:19:9a:fd:9c:8a:55:
05:e3:ab:81:83:a1:da:ca:7f:9a:53:3e:15:aa:d5:
a3:8d:27:7c:6e:b5:c8:e6:79:fc:7e:b4:d2:6b:65:
8d:81:a9:b1:27:97:93:c9:19:e5:ea:5c:7e:7c:79:
59:b8:3f:8f:11:b6:a0:5a:fe:04:b7:42:0b:06:da:
cc:96:65:f3:d5:08:cd:c5:86:c6:d6:d3:c7:39:27:
86:1f:89:6c:7a:34:ee:30:19:bb:91:18:90:72:b6:
fb:a7:e4:ce:7e:d4:dd:9a:e2:8c:5d:85:05:de:67:
5d:c7:a7:b6:b4:9d:8c:cb:6e:8a:e8:53:85:89:22:
35:f6:26:5d:3d:c8:8f:cc:97:95:44:28:1b:c8:7f:
e6:7f:3b:ad:4c:5f:3b:dc:19:e9:02:47:24:72:6e:
45:4e:66:ad:21:2e:1e:0a:13:25:48:45:a4:d2:5f:
b2:a5:62:5f:1f:15:ac:83:a7:c9:6f:99:3c:7c:fd:
ad:af:2a:7a:45:c8:ed:08:ab:40:32:c8:a7:72:24:
d7:6e:70:43:73:83:39:4e:65:94:77:e6:42:a8:13:
18:f5:45:08:8a:c1:39:d1:ba:8c:31:93:1a:d5:30:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:C8:7A:58:29:7F:E7:87:F7:7F:39:0B:50:3B:71:43:F3:8E:0F
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.0.0/20
Signature Algorithm: sha256WithRSAEncryption
26:30:7f:a8:06:25:8e:11:ff:0c:72:c1:4c:44:a3:80:cf:11:
f1:cb:a6:cf:2d:53:b9:cd:33:6f:4d:c8:7c:28:cb:41:a4:da:
08:94:14:7e:0e:50:32:c8:50:b5:79:3d:3f:9e:b0:e8:7b:6e:
7d:df:28:f5:02:3b:7b:ab:81:4f:9c:4b:41:30:97:6b:2d:a7:
a8:8f:d5:41:f4:87:22:43:e1:c5:36:53:7e:bf:6a:2c:4a:a7:
e2:e4:bb:5f:0f:0b:97:1f:42:96:9d:f9:3d:1b:b1:ed:37:80:
fc:b6:c5:10:09:4b:7e:2d:76:57:ac:23:8a:b0:66:20:84:02:
7b:bb:4a:45:98:49:fd:ae:d4:d1:72:33:fe:c7:c7:85:00:5b:
8e:aa:1f:49:fb:db:39:a8:18:91:1a:cb:fc:63:d1:a5:53:a3:
e6:9b:74:6b:7c:7c:b5:43:13:95:6a:8a:ef:6b:8c:56:38:43:
1a:da:09:12:e5:5c:80:cd:f7:59:b6:35:94:9e:d4:c3:83:b3:
5c:c0:eb:08:46:17:81:38:a5:90:97:40:06:44:b5:08:ff:44:
11:11:d8:2e:86:cf:f5:fa:cf:83:d0:c0:b1:5a:07:23:8c:69:
da:fa:ad:7a:b2:c8:90:29:59:65:43:b9:15:67:02:8d:b3:ec:
24:45:45:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVtkcE3NMMJ3QtMVBVm0hYhJy9IwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzAwMTRaFw0yNTEwMzAxNzA1MTRaMDMxMTAvBgNV
BAMTKDJCRTRDODdBNTgyOTdGRTc4N0Y3N0YzOTBCNTAzQjcxNDNGMzhFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYa9SBiMnC0jGIVcuq5O2SQEB
nPzWXhma/ZyKVQXjq4GDodrKf5pTPhWq1aONJ3xutcjmefx+tNJrZY2BqbEnl5PJ
GeXqXH58eVm4P48RtqBa/gS3QgsG2syWZfPVCM3FhsbW08c5J4YfiWx6NO4wGbuR
GJBytvun5M5+1N2a4oxdhQXeZ13Hp7a0nYzLboroU4WJIjX2Jl09yI/Ml5VEKBvI
f+Z/O61MXzvcGekCRyRybkVOZq0hLh4KEyVIRaTSX7KlYl8fFayDp8lvmTx8/a2v
KnpFyO0Iq0AyyKdyJNducENzgzlOZZR35kKoExj1RQiKwTnRuowxkxrVMB1jAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUK+TIelgpf+eH9385C1A7cUPzjg8wHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzOTMxMmUzMjM1MzMyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL/9ADANBgkqhkiG9w0BAQsFAAOCAQEAJjB/qAYljhH/
DHLBTESjgM8R8cumzy1Tuc0zb03IfCjLQaTaCJQUfg5QMshQtXk9P56w6Htufd8o
9QI7e6uBT5xLQTCXay2nqI/VQfSHIkPhxTZTfr9qLEqn4uS7Xw8Llx9Clp35PRux
7TeA/LbFEAlLfi12V6wjirBmIIQCe7tKRZhJ/a7U0XIz/sfHhQBbjqofSfvbOagY
kRrL/GPRpVOj5pt0a3x8tUMTlWqK72uMVjhDGtoJEuVcgM33WbY1lJ7Uw4OzXMDr
CEYXgTilkJdABkS1CP9EERHYLobP9frPg9DAsVoHI4xp2vqterLIkClZZUO5FWcC
jbPsJEVFQA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:30 2025 by rpki-client