Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
File: 3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: EydmDBYjR+zmwyOycJiPRgnyonuUQT+sAG+4aQngBBA=
Subject key identifier: 02:98:21:13:E1:C5:13:04:B1:92:AA:31:44:A0:5A:58:6F:76:4E:36
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 45D8927C60FC6171BB390A0A28E1A6609D2ADC4E
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:25 +0000
ROA not before: Wed 28 Feb 2024 13:58:25 +0000
ROA not after: Wed 26 Feb 2025 14:03:25 +0000
asID: 28210
IP address blocks: 138.255.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d8:92:7c:60:fc:61:71:bb:39:0a:0a:28:e1:a6:60:9d:2a:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:25 2024 GMT
Not After : Feb 26 14:03:25 2025 GMT
Subject: CN=02982113E1C51304B192AA3144A05A586F764E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:cd:51:36:94:42:bb:d3:a6:85:01:b2:56:
44:1d:be:c3:bb:3e:20:41:fd:8f:a2:7f:fa:ff:86:
9f:d3:9a:33:53:20:0e:a4:4f:5a:ce:f5:70:65:39:
66:1d:99:21:7f:50:2c:9d:d3:3d:96:82:8a:72:69:
cd:cf:c0:6f:a6:a3:4d:07:88:11:89:c5:cb:c8:ec:
8d:4f:23:39:59:9f:03:05:2c:15:62:fb:66:b2:8a:
b1:03:3b:8e:65:87:35:cb:4f:c9:2b:96:be:3f:ca:
cd:37:56:37:10:00:ad:55:26:d9:77:67:fd:91:2b:
92:c0:9c:36:56:57:4a:4e:43:fb:40:73:bf:61:ec:
fe:fb:b2:26:76:5f:a4:e2:58:af:49:12:74:20:df:
5f:68:2b:5c:69:ba:fd:6e:22:50:4f:81:84:08:95:
fb:90:e1:73:29:b4:fb:0d:5b:72:87:51:e9:4b:51:
75:cf:f9:4d:40:a0:7d:e7:4b:27:aa:f3:fa:8d:46:
9d:cd:42:5b:e7:6d:96:9b:83:a8:95:a5:78:2c:53:
57:58:98:cb:b2:05:a7:50:28:41:68:c1:22:35:98:
99:61:3d:55:94:64:1b:f6:d9:9d:4d:77:26:2d:5d:
44:8c:47:40:9a:df:84:3d:c2:4e:33:ce:2b:48:8e:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:21:13:E1:C5:13:04:B1:92:AA:31:44:A0:5A:58:6F:76:4E:36
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:6c:a0:fe:36:f8:4b:cd:c6:f8:8a:f7:37:11:37:a5:39:5c:
60:9b:db:e1:a1:71:c3:74:3b:29:ae:26:16:d0:47:96:61:08:
ff:28:c8:68:b5:aa:67:04:d2:ca:8e:79:a5:98:9b:a6:38:fc:
95:e8:41:44:f3:74:d3:3f:b9:3c:bf:85:51:10:f1:be:d0:6e:
86:c6:ad:95:0b:fa:11:97:83:c4:8a:d2:39:04:8b:e1:ef:53:
0f:af:02:f4:04:0a:fb:ef:0f:87:38:63:24:1d:a8:37:f1:c3:
2e:f9:bd:58:54:5c:c2:78:aa:5b:73:39:dd:24:f5:77:fb:d7:
e8:d5:db:cf:b6:71:e9:a9:1e:3c:62:d9:a9:6f:28:c0:df:7f:
01:63:c7:8d:de:a5:71:e4:ff:f7:9e:1c:0f:68:a9:e9:3a:53:
52:c0:72:96:07:d1:bd:f4:e2:86:39:49:80:6e:d9:19:3b:fa:
c7:90:37:38:a7:79:be:2a:e3:33:c4:38:d5:53:7c:dc:de:64:
61:4b:67:1b:d5:58:b9:f6:a1:c7:13:70:5f:d3:3f:9a:40:5e:
6b:f9:09:26:2a:10:48:fe:a7:07:5f:bf:e3:3e:79:b8:b5:45:
46:2d:bc:b9:b6:69:f8:ab:bf:d1:6c:d2:b5:a3:27:d3:df:fd:
41:74:52:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURdiSfGD8YXG7OQoKKOGmYJ0q3E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjVaFw0yNTAyMjYxNDAzMjVaMDMxMTAvBgNV
BAMTKDAyOTgyMTEzRTFDNTEzMDRCMTkyQUEzMTQ0QTA1QTU4NkY3NjRFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCly81RNpRCu9OmhQGyVkQdvsO7
PiBB/Y+if/r/hp/TmjNTIA6kT1rO9XBlOWYdmSF/UCyd0z2Wgopyac3PwG+mo00H
iBGJxcvI7I1PIzlZnwMFLBVi+2ayirEDO45lhzXLT8krlr4/ys03VjcQAK1VJtl3
Z/2RK5LAnDZWV0pOQ/tAc79h7P77siZ2X6TiWK9JEnQg319oK1xpuv1uIlBPgYQI
lfuQ4XMptPsNW3KHUelLUXXP+U1AoH3nSyeq8/qNRp3NQlvnbZabg6iVpXgsU1dY
mMuyBadQKEFowSI1mJlhPVWUZBv22Z1NdyYtXUSMR0Ca34Q9wk4zzitIjp1nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUApghE+HFEwSxkqoxRKBaWG92TjYwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/5AwDQYJKoZIhvcNAQELBQADggEBAF5soP42
+EvNxviK9zcRN6U5XGCb2+GhccN0OymuJhbQR5ZhCP8oyGi1qmcE0sqOeaWYm6Y4
/JXoQUTzdNM/uTy/hVEQ8b7QbobGrZUL+hGXg8SK0jkEi+HvUw+vAvQECvvvD4c4
YyQdqDfxwy75vVhUXMJ4qltzOd0k9Xf71+jV28+2cempHjxi2alvKMDffwFjx43e
pXHk//eeHA9oqek6U1LAcpYH0b304oY5SYBu2Rk7+seQNzineb4q4zPEONVTfNze
ZGFLZxvVWLn2occTcF/TP5pAXmv5CSYqEEj+pwdfv+M+ebi1RUYtvLm2afirv9Fs
0rWjJ9Pf/UF0Ugk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:00 2025 by rpki-client