Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
File: 3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: D3LtGhaCHWjSu5x0cmPMW5OksSUcCmIpAMfVT0XMeYs=
Subject key identifier: 70:92:80:75:C9:D8:60:CF:6D:CB:98:F1:CD:C8:0A:FD:C8:4D:ED:EF
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 6C3C6A8CE3740E142296DC9680D36235243655AF
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
Signing time: Mon 25 Nov 2024 17:04:18 +0000
ROA not before: Mon 25 Nov 2024 16:59:18 +0000
ROA not after: Mon 24 Nov 2025 17:04:18 +0000
asID: 264299
IP address blocks: 138.121.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3c:6a:8c:e3:74:0e:14:22:96:dc:96:80:d3:62:35:24:36:55:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:18 2024 GMT
Not After : Nov 24 17:04:18 2025 GMT
Subject: CN=70928075C9D860CF6DCB98F1CDC80AFDC84DEDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:89:90:3f:8c:da:af:15:b6:b7:45:29:88:
83:27:58:c7:69:9a:62:c1:15:85:79:87:0b:65:69:
0d:82:b7:52:4a:83:9d:b7:54:e6:74:e3:68:e9:e3:
50:65:8a:fc:95:ce:46:cf:6b:56:22:58:2d:ff:2c:
0a:ef:6f:a2:69:08:e2:25:19:13:97:ce:52:34:4f:
0c:f4:31:5b:65:e0:22:b7:ac:a4:92:1b:98:81:6d:
cb:33:66:e8:1c:9a:08:bb:fe:6b:b3:4b:31:ce:17:
18:49:09:af:d6:5a:75:8b:2b:be:79:80:fc:2e:2e:
e6:b0:eb:88:0d:56:65:ed:8a:fd:c5:d5:49:26:0a:
85:dc:6a:21:30:93:1c:00:97:55:a5:76:7d:b7:77:
1f:4f:26:f9:d9:a6:ba:67:71:06:20:d5:b3:0d:d1:
1f:09:8c:88:8c:67:9f:34:f9:25:d4:08:43:93:6e:
b6:06:35:6f:69:92:07:66:d9:4f:74:16:5b:5e:f9:
a1:65:0e:e2:89:de:09:c7:bf:8f:92:66:9a:73:72:
ee:59:4b:46:4a:39:50:16:db:89:ee:82:41:1a:93:
42:76:54:99:09:50:d9:67:2d:43:92:eb:a9:1d:10:
05:81:c4:e1:28:34:12:f5:f9:d1:dc:ca:42:c6:da:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:80:75:C9:D8:60:CF:6D:CB:98:F1:CD:C8:0A:FD:C8:4D:ED:EF
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.152.0/22
Signature Algorithm: sha256WithRSAEncryption
78:54:11:da:4d:90:7a:67:4c:30:f5:c6:05:26:8c:76:bf:e2:
49:65:56:e1:5e:5d:d7:0e:b3:fa:77:94:b6:e6:0b:76:37:f4:
2f:c7:8b:fb:42:3d:40:bd:b6:cd:33:14:8e:31:f2:5b:cf:10:
84:72:37:71:f7:21:e3:40:02:24:a9:71:a2:bb:af:04:31:b5:
a1:48:15:ef:fb:4c:c7:21:2d:bd:c4:19:e6:ad:af:64:c9:94:
c3:18:1c:c2:f4:c4:9b:85:c8:55:9f:d4:d2:b0:c8:41:5b:b0:
91:de:ad:4f:bc:68:39:63:34:1a:0c:d2:77:6e:8f:2a:ee:9c:
4c:57:ea:c7:5e:c9:20:2c:70:ed:30:cc:10:5f:84:9e:af:06:
c4:c9:9e:9a:24:33:54:3d:cc:e0:7b:75:60:e5:9f:f9:e1:c6:
79:e4:19:5c:6e:89:ee:81:a2:3e:8e:59:3f:08:d4:1e:ca:86:
09:a5:5f:ac:21:69:42:9d:4c:2b:69:cf:75:72:cf:9f:08:d8:
f9:ca:f0:48:59:20:bc:f7:f9:d0:81:39:34:48:e1:f9:79:7c:
c6:9a:49:d6:59:b6:cd:eb:e6:9a:32:ad:52:22:33:1c:4d:b9:
d4:49:c2:40:85:d3:db:20:ea:02:4c:6d:ce:b3:7a:3a:60:3e:
4d:44:73:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbDxqjON0DhQiltyWgNNiNSQ2Va8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MThaFw0yNTExMjQxNzA0MThaMDMxMTAvBgNV
BAMTKDcwOTI4MDc1QzlEODYwQ0Y2RENCOThGMUNEQzgwQUZEQzg0REVERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop4mQP4zarxW2t0UpiIMnWMdp
mmLBFYV5hwtlaQ2Ct1JKg523VOZ042jp41BlivyVzkbPa1YiWC3/LArvb6JpCOIl
GROXzlI0Twz0MVtl4CK3rKSSG5iBbcszZugcmgi7/muzSzHOFxhJCa/WWnWLK755
gPwuLuaw64gNVmXtiv3F1UkmCoXcaiEwkxwAl1Wldn23dx9PJvnZprpncQYg1bMN
0R8JjIiMZ580+SXUCEOTbrYGNW9pkgdm2U90Flte+aFlDuKJ3gnHv4+SZppzcu5Z
S0ZKOVAW24nugkEak0J2VJkJUNlnLUOS66kdEAWBxOEoNBL1+dHcykLG2tgrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcJKAdcnYYM9ty5jxzcgK/chN7e8wHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzMzM4MmUzMTMyMzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5mDANBgkqhkiG9w0BAQsFAAOCAQEAeFQR
2k2QemdMMPXGBSaMdr/iSWVW4V5d1w6z+neUtuYLdjf0L8eL+0I9QL22zTMUjjHy
W88QhHI3cfch40ACJKlxoruvBDG1oUgV7/tMxyEtvcQZ5q2vZMmUwxgcwvTEm4XI
VZ/U0rDIQVuwkd6tT7xoOWM0GgzSd26PKu6cTFfqx17JICxw7TDMEF+Enq8GxMme
miQzVD3M4Ht1YOWf+eHGeeQZXG6J7oGiPo5ZPwjUHsqGCaVfrCFpQp1MK2nPdXLP
nwjY+crwSFkgvPf50IE5NEjh+Xl8xppJ1lm2zevmmjKtUiIzHE251EnCQIXT2yDq
AkxtzrN6OmA+TURzyg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:38 2025 by rpki-client