Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File: 3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: Ut963Hp4iNggt9qN9Me6hSgvpuDdzN19llwWOzJsXGQ=
Subject key identifier: 4C:2C:78:BD:79:84:3F:8E:F7:F2:9F:88:E7:AD:EE:90:48:E6:37:B5
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 60F7849D9AD2A0D011B7615282BB9DFF515C6B2C
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time: Mon 25 Nov 2024 17:04:01 +0000
ROA not before: Mon 25 Nov 2024 16:59:01 +0000
ROA not after: Mon 24 Nov 2025 17:04:01 +0000
asID: 28669
IP address blocks: 189.28.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f7:84:9d:9a:d2:a0:d0:11:b7:61:52:82:bb:9d:ff:51:5c:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:01 2024 GMT
Not After : Nov 24 17:04:01 2025 GMT
Subject: CN=4C2C78BD79843F8EF7F29F88E7ADEE9048E637B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:d4:6f:34:99:f9:ee:48:4a:b3:01:8d:b7:
24:e7:4b:86:c8:69:21:c6:f7:7c:7e:9e:b3:ce:3a:
ef:8f:19:8c:54:87:8f:d3:ee:33:b7:f3:21:05:48:
3d:c8:b9:dc:03:b3:a0:24:3e:7f:e0:76:50:46:10:
35:ad:e8:98:bb:1e:bb:9b:4c:36:04:30:4c:05:7e:
2e:0e:c7:19:7b:1d:49:fb:33:2b:87:8a:58:ef:65:
6d:09:85:87:58:9b:6a:37:40:d3:c9:fe:ce:a9:51:
5e:2c:04:e9:c0:b0:8d:ac:eb:82:fc:46:aa:ba:8e:
44:af:a5:87:b4:cc:f4:e1:fc:c5:e7:5b:22:77:32:
e8:29:fe:da:b3:1a:5b:17:83:84:13:11:17:75:aa:
f4:ba:e8:b8:90:b3:3a:1f:59:8d:e8:83:f3:4e:88:
b8:d9:ed:b0:ec:ad:b6:ae:9f:6e:dc:e0:de:60:fc:
3a:bb:89:7d:83:a6:ef:0a:39:9a:8a:e7:27:af:77:
8b:12:94:41:ba:e2:3f:2a:18:22:78:3a:43:66:c9:
f5:93:da:82:d7:99:f7:a0:e4:e6:f9:66:1e:bc:c9:
c6:e2:6e:25:e5:b3:ba:d1:78:4b:52:3c:19:08:49:
db:ff:40:81:70:85:50:f7:5c:a4:ae:25:7f:9c:71:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:78:BD:79:84:3F:8E:F7:F2:9F:88:E7:AD:EE:90:48:E6:37:B5
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.28.144.0/20
Signature Algorithm: sha256WithRSAEncryption
d3:c3:9b:eb:75:96:aa:cd:f5:57:7e:c5:25:ba:a2:f1:7a:ab:
47:cb:97:c0:20:4d:0b:ce:7f:4a:0f:81:73:e9:eb:62:4d:2d:
71:41:d4:c6:ad:75:c7:ba:aa:e7:07:17:e6:0a:d9:7a:d0:2d:
86:fa:ff:7a:86:e0:cf:ec:0a:ab:81:a2:5c:01:16:de:38:bd:
22:78:71:05:42:e8:07:1b:1f:fd:3e:03:42:77:8d:20:fb:8d:
11:bb:98:b0:ad:e7:19:39:00:58:4b:db:ba:3e:db:e3:cd:2a:
03:53:92:62:93:f9:64:de:83:cb:2d:9c:16:53:aa:36:14:23:
2a:b8:fc:ed:6d:13:4f:4d:93:b1:fd:16:ce:88:a4:a5:97:8b:
ac:be:57:b2:aa:aa:53:e4:a8:17:90:f7:b0:e4:01:b2:f8:8e:
48:9c:90:33:80:67:1a:cb:05:dd:85:e3:3a:94:fc:9d:9a:c7:
b2:13:09:1a:38:17:02:2d:da:1f:25:62:36:16:6d:ea:46:8c:
7d:41:64:b8:29:22:69:8e:fd:43:29:d8:63:d4:f7:67:84:f4:
94:21:96:b8:c1:26:d1:f9:b0:79:8a:db:c2:7f:60:c1:23:61:
68:e0:7a:5a:c2:00:75:47:32:c4:35:64:1c:34:8c:e5:50:58:
3d:f8:56:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYPeEnZrSoNARt2FSgrud/1FcaywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MDFaFw0yNTExMjQxNzA0MDFaMDMxMTAvBgNV
BAMTKDRDMkM3OEJENzk4NDNGOEVGN0YyOUY4OEU3QURFRTkwNDhFNjM3QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChstRvNJn57khKswGNtyTnS4bI
aSHG93x+nrPOOu+PGYxUh4/T7jO38yEFSD3IudwDs6AkPn/gdlBGEDWt6Ji7Hrub
TDYEMEwFfi4Oxxl7HUn7MyuHiljvZW0JhYdYm2o3QNPJ/s6pUV4sBOnAsI2s64L8
Rqq6jkSvpYe0zPTh/MXnWyJ3Mugp/tqzGlsXg4QTERd1qvS66LiQszofWY3og/NO
iLjZ7bDsrbaun27c4N5g/Dq7iX2Dpu8KOZqK5yevd4sSlEG64j8qGCJ4OkNmyfWT
2oLXmfeg5Ob5Zh68ycbibiXls7rReEtSPBkISdv/QIFwhVD3XKSuJX+ccR/BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTCx4vXmEP4738p+I563ukEjmN7UwHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzODM5MmUzMjM4MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvRyQMA0GCSqGSIb3DQEBCwUAA4IBAQDTw5vrdZaq
zfVXfsUluqLxeqtHy5fAIE0Lzn9KD4Fz6etiTS1xQdTGrXXHuqrnBxfmCtl60C2G
+v96huDP7AqrgaJcARbeOL0ieHEFQugHGx/9PgNCd40g+40Ru5iwrecZOQBYS9u6
PtvjzSoDU5Jik/lk3oPLLZwWU6o2FCMquPztbRNPTZOx/RbOiKSll4usvleyqqpT
5KgXkPew5AGy+I5InJAzgGcaywXdheM6lPydmseyEwkaOBcCLdofJWI2Fm3qRox9
QWS4KSJpjv1DKdhj1PdnhPSUIZa4wSbR+bB5itvCf2DBI2Fo4HpawgB1RzLENWQc
NIzlUFg9+Faw
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:43 2025 by rpki-client