Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3232203d3e203238323130.roa
File: 3133312e302e32382e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: mHawb5gokkWF48iLYwbyTkSxhRrpHO9yQ1aCgOaqvlw=
Subject key identifier: 0D:CE:04:A2:E9:F9:57:9B:8D:E2:9F:79:7A:59:B6:38:9E:2B:4F:E2
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 74923B1701C19600C63D3BBF99CB37B98A18AF93
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3232203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:25 +0000
ROA not before: Wed 28 Feb 2024 13:58:25 +0000
ROA not after: Wed 26 Feb 2025 14:03:25 +0000
asID: 28210
IP address blocks: 131.0.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:92:3b:17:01:c1:96:00:c6:3d:3b:bf:99:cb:37:b9:8a:18:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:25 2024 GMT
Not After : Feb 26 14:03:25 2025 GMT
Subject: CN=0DCE04A2E9F9579B8DE29F797A59B6389E2B4FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:56:f5:c9:c1:27:e0:d1:c5:36:45:ba:e7:
b1:33:75:96:7c:b5:de:32:af:ca:31:e5:d5:5c:66:
7d:44:27:0a:14:79:eb:33:73:83:8c:d5:6a:5c:21:
6b:72:ae:0c:2b:8d:61:db:c4:5c:85:69:32:24:7f:
f5:56:50:5c:96:16:26:02:65:e3:1a:c9:94:e7:82:
dd:cc:90:c1:6d:23:43:86:e3:56:89:d4:37:5a:49:
78:72:c3:14:23:6a:ad:e4:06:aa:cc:94:b2:5d:b1:
63:55:f9:34:c2:39:b8:24:d9:40:50:03:b5:76:bc:
f2:82:c8:5d:23:83:2d:74:9d:4c:28:fd:39:30:1b:
8f:d1:96:d5:7b:be:1f:c5:29:77:49:18:ee:cf:1d:
fe:ad:2c:37:3a:ed:f3:57:2d:0f:7f:3c:ea:fc:a4:
e3:cc:40:37:56:90:4e:e1:77:05:9f:4f:a4:cb:a1:
7a:1f:32:fe:cd:9b:d3:9c:b6:bc:fc:60:4a:24:6b:
00:73:82:38:6e:56:37:eb:0a:bd:28:3e:38:67:5c:
82:7c:76:c9:0f:5e:72:63:5a:54:78:a2:79:eb:44:
c3:2a:6b:b2:8b:86:ae:1a:c3:19:94:e4:86:c2:c5:
49:92:3f:89:60:f3:99:bb:c5:e8:ad:90:4b:b0:a0:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:04:A2:E9:F9:57:9B:8D:E2:9F:79:7A:59:B6:38:9E:2B:4F:E2
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
e1:92:70:64:84:29:ae:12:5f:a0:09:0d:b0:27:41:f5:1f:a0:
cb:03:e0:f8:f9:a5:33:ec:06:9f:bd:fc:26:10:34:77:f8:b0:
ae:c5:ec:22:75:54:7c:96:dd:a2:7f:5e:ae:8f:c8:76:44:82:
57:21:44:67:92:6c:f1:79:79:49:7c:52:f0:ca:c9:8f:c8:ee:
28:4f:b1:9e:cc:7c:1a:3b:05:a6:5a:16:4f:b5:f6:1f:3c:08:
e5:a4:bf:53:ea:05:cf:b4:94:49:b9:eb:02:2c:f9:d4:78:8d:
8e:19:e2:bd:f8:89:47:d3:98:05:6e:22:a3:80:62:97:96:ed:
a6:87:65:cf:d2:e0:9c:a6:e0:1d:cd:41:85:78:4b:06:34:fc:
c3:0b:4a:d1:5d:05:65:b4:d0:c5:4f:b4:36:a2:7a:3c:fc:55:
dd:46:46:68:d5:80:f9:4f:64:38:b4:01:bd:0f:30:59:d3:85:
e5:8b:0f:9b:61:73:f3:5c:ea:b6:07:8c:c1:27:92:76:c7:0e:
f2:16:55:d6:93:1b:ec:dd:cb:1f:b4:54:c5:90:57:4d:48:ca:
4f:eb:a7:12:5c:28:81:7f:5a:49:1e:ad:2b:e1:9a:71:ff:ed:
2d:3c:95:6c:b3:04:c2:de:2d:98:50:5a:32:c4:08:fa:ab:d2:
12:8a:de:37
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdJI7FwHBlgDGPTu/mcs3uYoYr5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjVaFw0yNTAyMjYxNDAzMjVaMDMxMTAvBgNV
BAMTKDBEQ0UwNEEyRTlGOTU3OUI4REUyOUY3OTdBNTlCNjM4OUUyQjRGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4Fb1ycEn4NHFNkW657EzdZZ8
td4yr8ox5dVcZn1EJwoUeeszc4OM1WpcIWtyrgwrjWHbxFyFaTIkf/VWUFyWFiYC
ZeMayZTngt3MkMFtI0OG41aJ1DdaSXhywxQjaq3kBqrMlLJdsWNV+TTCObgk2UBQ
A7V2vPKCyF0jgy10nUwo/TkwG4/RltV7vh/FKXdJGO7PHf6tLDc67fNXLQ9/POr8
pOPMQDdWkE7hdwWfT6TLoXofMv7Nm9Octrz8YEokawBzgjhuVjfrCr0oPjhnXIJ8
dskPXnJjWlR4onnrRMMqa7KLhq4awxmU5IbCxUmSP4lg85m7xeitkEuwoLa9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUDc4Eoun5V5uN4p95elm2OJ4rT+IwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzMzMxMmUzMDJlMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKDABwwDQYJKoZIhvcNAQELBQADggEBAOGScGSEKa4SX6AJ
DbAnQfUfoMsD4Pj5pTPsBp+9/CYQNHf4sK7F7CJ1VHyW3aJ/Xq6PyHZEglchRGeS
bPF5eUl8UvDKyY/I7ihPsZ7MfBo7BaZaFk+19h88COWkv1PqBc+0lEm56wIs+dR4
jY4Z4r34iUfTmAVuIqOAYpeW7aaHZc/S4Jym4B3NQYV4SwY0/MMLStFdBWW00MVP
tDaiejz8Vd1GRmjVgPlPZDi0Ab0PMFnTheWLD5thc/Nc6rYHjMEnknbHDvIWVdaT
G+zdyx+0VMWQV01Iyk/rpxJcKIF/WkkerSvhmnH/7S08lWyzBMLeLZhQWjLECPqr
0hKK3jc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org