Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
File: 3230312e34362e31362e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: 1Ooi6ZrpPoVX6h8baVDClIYcJCjcmzaaok5cVvsBoE0=
Subject key identifier: 4D:E9:56:9A:C4:DD:E2:DE:E8:E5:85:0C:F6:03:0E:EE:E9:58:10:EB
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 3F8FC9ADCF838BC5F4B960A3BAA5C62FBE88372E
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
Signing time: Mon 25 Nov 2024 17:04:16 +0000
ROA not before: Mon 25 Nov 2024 16:59:16 +0000
ROA not after: Mon 24 Nov 2025 17:04:16 +0000
asID: 28669
IP address blocks: 201.46.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8f:c9:ad:cf:83:8b:c5:f4:b9:60:a3:ba:a5:c6:2f:be:88:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:16 2024 GMT
Not After : Nov 24 17:04:16 2025 GMT
Subject: CN=4DE9569AC4DDE2DEE8E5850CF6030EEEE95810EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:4c:f5:d6:fc:4f:e9:d8:36:92:51:41:b4:
df:bd:73:5a:03:e6:bd:43:6f:ab:9f:c7:23:12:c6:
ee:be:f0:82:36:36:ce:05:82:9b:41:ad:b2:be:30:
2f:6f:54:04:b4:48:c7:20:f4:5f:c5:1e:0e:93:a2:
e8:cd:09:0e:3d:a7:c0:f0:ae:0f:ca:30:f5:51:13:
1e:77:8e:e2:ff:a0:2e:1f:68:67:5b:f3:eb:56:10:
d0:67:50:61:f7:a8:2f:03:31:39:57:49:25:b6:f9:
d8:1e:13:69:2b:47:78:1c:7c:d8:ab:73:09:1f:ab:
65:b3:f2:bb:19:b0:df:96:87:e2:d3:e7:65:47:cf:
11:12:50:7b:6b:79:0d:f6:2f:27:f4:16:2d:50:a5:
23:83:37:0e:96:6c:2c:6a:40:93:dc:9b:8d:ff:b1:
b6:71:64:a2:ea:ba:c3:2e:f4:7e:d8:b2:44:d1:55:
86:0e:2f:38:87:67:df:1b:92:41:5f:70:fa:a0:8f:
19:89:aa:ca:d9:e5:8c:33:d8:bc:8d:99:1e:ba:27:
a0:99:45:fb:a3:71:4f:5a:03:1f:e1:5d:ad:a1:41:
fa:6c:fa:fe:8c:c3:a9:a6:10:90:a1:df:4f:c4:06:
9c:9d:69:d2:3d:81:d5:d5:28:dc:b8:4b:6f:13:cd:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:56:9A:C4:DD:E2:DE:E8:E5:85:0C:F6:03:0E:EE:E9:58:10:EB
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.46.16.0/20
Signature Algorithm: sha256WithRSAEncryption
61:7b:04:2c:ec:08:67:cb:36:23:25:fe:dc:2e:ec:16:64:75:
3d:3d:fc:05:43:ff:86:c4:93:58:1a:bd:d8:2b:7b:fe:02:b5:
bb:46:29:d2:61:1e:95:20:2c:4f:97:72:aa:d9:6d:1f:ad:09:
b9:52:6e:70:a3:eb:c0:f8:e4:0b:cd:a2:5c:ff:7c:e9:20:16:
43:c3:e7:b6:c7:92:a9:25:f9:b5:60:b6:b3:5e:81:63:b0:1b:
d6:96:dc:25:de:6f:f8:ef:4d:aa:05:ae:5b:9e:e3:af:5a:25:
e4:b3:ef:d2:03:9c:56:52:d3:33:13:e8:80:73:9b:8b:4a:d3:
99:2b:8a:a0:30:aa:95:8a:c8:01:aa:55:9c:e9:c3:12:ff:a4:
da:7f:11:ad:f3:20:65:9c:f1:5a:94:22:f8:62:78:43:40:40:
be:46:b8:d8:d2:07:f8:d5:95:45:8f:88:68:c1:98:8d:9d:ac:
63:bb:95:db:0a:e3:8b:23:ae:8d:81:88:4a:4c:fd:99:d8:09:
1e:96:cf:2c:47:e9:ec:01:83:b7:a8:7b:08:e5:e6:a8:e9:d0:
bd:cf:a6:d4:d2:e3:bb:8e:db:e7:ba:ff:cf:da:b9:64:4e:ba:
90:31:85:b3:d4:27:53:af:fe:ee:66:3e:dd:3d:fb:91:fd:70:
79:11:f9:45
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP4/Jrc+Di8X0uWCjuqXGL76INy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MTZaFw0yNTExMjQxNzA0MTZaMDMxMTAvBgNV
BAMTKDRERTk1NjlBQzREREUyREVFOEU1ODUwQ0Y2MDMwRUVFRTk1ODEwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAUz11vxP6dg2klFBtN+9c1oD
5r1Db6ufxyMSxu6+8II2Ns4FgptBrbK+MC9vVAS0SMcg9F/FHg6ToujNCQ49p8Dw
rg/KMPVREx53juL/oC4faGdb8+tWENBnUGH3qC8DMTlXSSW2+dgeE2krR3gcfNir
cwkfq2Wz8rsZsN+Wh+LT52VHzxESUHtreQ32Lyf0Fi1QpSODNw6WbCxqQJPcm43/
sbZxZKLqusMu9H7YskTRVYYOLziHZ98bkkFfcPqgjxmJqsrZ5Ywz2LyNmR66J6CZ
RfujcU9aAx/hXa2hQfps+v6Mw6mmEJCh30/EBpydadI9gdXVKNy4S28Tzfb3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTelWmsTd4t7o5YUM9gMO7ulYEOswHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzIzMDMxMmUzNDM2MmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMkuEDANBgkqhkiG9w0BAQsFAAOCAQEAYXsELOwIZ8s2
IyX+3C7sFmR1PT38BUP/hsSTWBq92Ct7/gK1u0Yp0mEelSAsT5dyqtltH60JuVJu
cKPrwPjkC82iXP986SAWQ8PntseSqSX5tWC2s16BY7Ab1pbcJd5v+O9NqgWuW57j
r1ol5LPv0gOcVlLTMxPogHObi0rTmSuKoDCqlYrIAapVnOnDEv+k2n8RrfMgZZzx
WpQi+GJ4Q0BAvka42NIH+NWVRY+IaMGYjZ2sY7uV2wrjiyOujYGISkz9mdgJHpbP
LEfp7AGDt6h7COXmqOnQvc+m1NLju47b57r/z9q5ZE66kDGFs9QnU6/+7mY+3T37
kf1weRH5RQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:59 2025 by rpki-client