Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32322d3232203d3e20323634343436.roa
File: 3133312e3232312e3232382e302f32322d3232203d3e20323634343436.roa (raw, json)
Hash identifier: cyl3Lz5Ol/NVLbi1QdJwZAYX2RdsbKVmv5ehGjlgqKA=
Subject key identifier: FD:A6:6D:02:D4:1C:DB:63:B4:95:0D:36:8F:76:6C:FD:3F:47:9F:CA
Certificate issuer: /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial: 4AB7687F5A676EF600104720C948911E64260B5C
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32322d3232203d3e20323634343436.roa
Signing time: Tue 02 May 2023 16:10:34 +0000
ROA not before: Tue 02 May 2023 16:05:34 +0000
ROA not after: Tue 30 Apr 2024 16:10:34 +0000
asID: 264446
IP address blocks: 131.221.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b7:68:7f:5a:67:6e:f6:00:10:47:20:c9:48:91:1e:64:26:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Validity
Not Before: May 2 16:05:34 2023 GMT
Not After : Apr 30 16:10:34 2024 GMT
Subject: CN=FDA66D02D41CDB63B4950D368F766CFD3F479FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:94:ef:9f:59:56:56:18:79:f9:77:a1:c6:
46:ef:10:52:09:31:bf:fb:c6:17:67:e4:ab:fa:59:
0d:a2:44:93:4e:87:32:f9:c2:f6:c8:5b:6c:6e:88:
07:a3:7e:67:52:24:01:e6:d9:7d:be:66:90:66:a5:
5c:91:00:2a:ae:c8:da:dc:c5:d6:a1:f6:bb:54:89:
df:7f:e5:29:d2:b8:75:6f:df:3d:90:95:d9:2b:9a:
fb:79:55:10:bb:55:52:ed:3f:86:3c:6e:8b:0d:e0:
31:5d:b1:17:19:32:9d:cb:36:44:26:27:f4:5a:72:
16:ca:68:a6:4a:c3:2a:4c:d7:6c:a9:d5:b9:ed:da:
30:82:ab:96:fa:ea:61:71:a0:4e:3b:89:3c:14:a6:
96:a8:46:76:ce:d7:5f:02:ed:13:cd:b1:02:a6:33:
c4:84:cd:83:5f:d3:c1:a0:d8:73:6b:22:c4:ee:01:
f5:36:f8:82:91:7c:37:51:aa:01:b0:30:2b:1b:62:
d6:52:51:47:8b:8e:11:81:8d:3d:f7:62:3a:f5:60:
1e:8c:3f:b5:f4:9a:0c:7e:97:43:a6:db:80:d7:e2:
e9:af:6a:9b:0c:d2:53:f5:63:54:a8:50:e3:ee:51:
90:ab:6c:3d:10:80:00:b2:ae:7e:e4:f4:1f:7c:26:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:6D:02:D4:1C:DB:63:B4:95:0D:36:8F:76:6C:FD:3F:47:9F:CA
X509v3 Authority Key Identifier:
keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32322d3232203d3e20323634343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:fe:7a:8f:4c:b6:dc:d9:e2:8d:eb:1d:15:ad:26:0a:bf:49:
0a:fe:b5:28:fc:6c:a9:6e:d5:a4:51:ac:27:f7:8c:97:aa:6e:
d9:fe:b3:bd:4b:65:a2:74:d4:ea:99:6c:f6:da:9e:fd:f8:f3:
4c:d1:9f:f9:ea:65:27:2e:e0:be:37:46:65:43:66:0f:fe:fa:
e6:4c:92:7e:62:4f:1c:c3:01:42:8b:c6:65:a0:01:f4:2a:e1:
7b:35:9c:3a:e1:bc:5b:43:54:39:fb:38:94:7c:d7:3f:01:c5:
e0:86:fc:c6:0c:96:77:7b:f9:ec:07:18:6c:55:8d:cf:88:10:
83:61:70:c9:62:97:62:de:65:6c:dd:7e:cb:51:e6:f7:94:26:
76:f5:03:78:46:ab:45:a3:e6:db:09:77:b6:c2:9f:e1:b2:4c:
8c:54:77:a1:6a:97:50:0c:6e:a6:58:50:78:f7:1b:2d:7a:26:
9a:b1:37:62:b0:ef:31:79:17:84:fd:6f:cf:57:28:3e:92:67:
26:c9:05:4e:02:1a:ba:59:51:65:ce:e8:6b:e6:2b:20:4a:3b:
ea:d7:12:ea:79:3d:f4:d6:02:79:b0:06:e7:a2:c9:1c:a4:37:
6a:ac:99:34:71:31:b5:82:bf:d2:47:23:be:84:88:40:6f:a1:
82:d7:85:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSrdof1pnbvYAEEcgyUiRHmQmC1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RCNEJEMDUwOTQxODNDRDkyQ0I2MjdGNUM3QTU3NzQ4
QzZFODc2MTAeFw0yMzA1MDIxNjA1MzRaFw0yNDA0MzAxNjEwMzRaMDMxMTAvBgNV
BAMTKEZEQTY2RDAyRDQxQ0RCNjNCNDk1MEQzNjhGNzY2Q0ZEM0Y0NzlGQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsJTvn1lWVhh5+XehxkbvEFIJ
Mb/7xhdn5Kv6WQ2iRJNOhzL5wvbIW2xuiAejfmdSJAHm2X2+ZpBmpVyRACquyNrc
xdah9rtUid9/5SnSuHVv3z2Qldkrmvt5VRC7VVLtP4Y8bosN4DFdsRcZMp3LNkQm
J/RachbKaKZKwypM12yp1bnt2jCCq5b66mFxoE47iTwUppaoRnbO118C7RPNsQKm
M8SEzYNf08Gg2HNrIsTuAfU2+IKRfDdRqgGwMCsbYtZSUUeLjhGBjT33Yjr1YB6M
P7X0mgx+l0Om24DX4umvapsM0lP1Y1SoUOPuUZCrbD0QgACyrn7k9B98JhVjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/aZtAtQc22O0lQ02j3Zs/T9Hn8owHwYDVR0j
BBgwFoAUzbS9BQlBg82Sy2J/XHpXdIxuh2EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUF2c01ERkxLaVhWY2lEQ2l2bTJub29FbmlFTVN3UDZzU2hoNVg2bXpo
ZTYvMC9DREI0QkQwNTA5NDE4M0NEOTJDQjYyN0Y1QzdBNTc3NDhDNkU4NzYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEQjRCRDA1MDk0MTgzQ0Q5
MkNCNjI3RjVDN0E1Nzc0OEM2RTg3NjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlBdnNNREZMS2lYVmNpRENpdm0ybm9vRW5pRU1Td1A2c1NoaDVYNm16aGU2LzAv
MzEzMzMxMmUzMjMyMzEyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM0MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPd5DANBgkqhkiG9w0BAQsFAAOCAQEAm/56
j0y23NnijesdFa0mCr9JCv61KPxsqW7VpFGsJ/eMl6pu2f6zvUtlonTU6pls9tqe
/fjzTNGf+eplJy7gvjdGZUNmD/765kySfmJPHMMBQovGZaAB9CrhezWcOuG8W0NU
Ofs4lHzXPwHF4Ib8xgyWd3v57AcYbFWNz4gQg2FwyWKXYt5lbN1+y1Hm95QmdvUD
eEarRaPm2wl3tsKf4bJMjFR3oWqXUAxuplhQePcbLXommrE3YrDvMXkXhP1vz1co
PpJnJskFTgIaullRZc7oa+YrIEo76tcS6nk99NYCebAG56LJHKQ3aqyZNHExtYK/
0kcjvoSIQG+hgteFeg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:27 2025 by rpki-client