Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa
File: 3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier: /WrSP5QipusllEB7kZJUxLW1AC5QrmH3wwJNVzY2118=
Subject key identifier: A0:9F:C4:F9:46:E2:05:53:30:F6:FA:0E:BB:F7:AC:F6:65:93:1B:A9
Certificate issuer: /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial: 3641ECE95901D26BE4F000572990DB6DFCF3712C
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa
Signing time: Wed 10 Jan 2024 17:32:13 +0000
ROA not before: Wed 10 Jan 2024 17:27:13 +0000
ROA not after: Wed 08 Jan 2025 17:32:13 +0000
asID: 265303
IP address blocks: 201.87.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:41:ec:e9:59:01:d2:6b:e4:f0:00:57:29:90:db:6d:fc:f3:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Validity
Not Before: Jan 10 17:27:13 2024 GMT
Not After : Jan 8 17:32:13 2025 GMT
Subject: CN=A09FC4F946E2055330F6FA0EBBF7ACF665931BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:d9:88:3e:f4:23:be:b6:2c:c1:01:28:e4:
50:01:27:4e:29:76:4d:f1:2b:87:a1:67:f1:d7:f6:
fb:7c:05:9a:3e:5f:da:50:9b:b0:d7:ad:63:6d:f9:
e9:01:2a:d7:25:75:ff:4a:65:8f:8e:a3:8e:31:b8:
a2:e4:cf:f4:90:ef:4e:11:23:99:51:65:a4:38:14:
ff:20:b3:e3:0c:ed:c1:1b:5d:cb:50:1b:96:69:f2:
2f:65:47:fe:ad:83:1c:a0:a8:7f:c7:62:16:4d:2a:
c2:5f:d7:d3:8c:c1:a6:7b:b6:8f:87:eb:68:77:fe:
54:bc:b3:b4:a2:c6:4c:35:07:27:5a:55:e6:09:45:
b6:ff:1f:59:74:c9:33:08:72:9c:8f:ec:44:7a:22:
ef:ac:66:32:27:7a:c8:82:ca:fd:84:e0:79:9c:e6:
bd:a9:f4:33:ea:22:dc:6f:5b:23:78:7b:90:32:85:
e4:7e:08:87:05:f8:16:40:9a:12:e8:c9:2f:49:03:
e9:dd:e7:f2:bb:c2:9d:95:12:38:5c:c9:25:3a:7e:
f2:cd:84:6a:19:81:51:ce:92:11:37:4e:a4:2e:9d:
27:f8:fa:5e:7a:a5:f8:6f:09:82:eb:1e:52:9e:55:
70:59:42:a3:ed:26:99:5a:16:a5:f6:dd:6f:e0:ff:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:C4:F9:46:E2:05:53:30:F6:FA:0E:BB:F7:AC:F6:65:93:1B:A9
X509v3 Authority Key Identifier:
keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.133.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:62:6a:b0:9a:a1:c0:f0:d2:76:da:2e:b4:21:a3:4c:bf:
45:25:1b:2f:55:8c:ab:3c:30:f6:11:b4:12:27:97:0d:fa:a9:
32:97:6f:7d:2c:a0:32:34:5e:e1:26:73:d6:1d:6a:3a:65:02:
e8:3a:3a:1d:2b:df:d8:56:24:9c:d7:15:f9:35:45:be:c0:78:
61:8b:c1:e5:41:fd:ac:13:10:a5:d5:bc:9f:5a:b5:73:2c:67:
2a:30:45:8b:d5:2a:b9:27:53:08:ed:5a:97:34:8a:1b:20:19:
6e:8c:0e:62:21:c2:bf:d5:79:65:f9:44:3b:0b:e6:d6:44:98:
5d:1e:22:40:94:6b:12:28:cc:76:1b:64:94:7b:05:be:2a:68:
04:07:6d:a9:8f:97:78:ab:49:7c:b1:57:da:7d:10:2c:ed:4d:
56:89:aa:da:3e:e9:a9:28:7d:7e:d5:83:26:89:c6:8c:1c:d0:
2a:5a:e8:25:1a:f7:e2:05:57:b8:f9:88:53:b1:b7:5a:eb:15:
49:51:98:fb:b6:da:07:91:c5:ae:7e:25:7d:77:6c:50:14:8f:
98:83:95:df:f3:dd:f0:3c:23:3d:7d:86:5c:e4:2a:ad:49:7a:
fc:a7:27:c4:3e:28:94:76:aa:d2:e8:30:24:ec:5c:a8:e6:ff:
cb:52:53:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNkHs6VkB0mvk8ABXKZDbbfzzcSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzI3MTNaFw0yNTAxMDgxNzMyMTNaMDMxMTAvBgNV
BAMTKEEwOUZDNEY5NDZFMjA1NTMzMEY2RkEwRUJCRjdBQ0Y2NjU5MzFCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZdmIPvQjvrYswQEo5FABJ04p
dk3xK4ehZ/HX9vt8BZo+X9pQm7DXrWNt+ekBKtcldf9KZY+Oo44xuKLkz/SQ704R
I5lRZaQ4FP8gs+MM7cEbXctQG5Zp8i9lR/6tgxygqH/HYhZNKsJf19OMwaZ7to+H
62h3/lS8s7Sixkw1BydaVeYJRbb/H1l0yTMIcpyP7ER6Iu+sZjInesiCyv2E4Hmc
5r2p9DPqItxvWyN4e5AyheR+CIcF+BZAmhLoyS9JA+nd5/K7wp2VEjhcySU6fvLN
hGoZgVHOkhE3TqQunSf4+l56pfhvCYLrHlKeVXBZQqPtJplaFqX23W/g/85JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoJ/E+UbiBVMw9voOu/es9mWTG6kwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzIzMDMxMmUzODM3MmUzMTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJV4UwDQYJKoZIhvcNAQELBQADggEBAFCEYmqw
mqHA8NJ22i60IaNMv0UlGy9VjKs8MPYRtBInlw36qTKXb30soDI0XuEmc9Ydajpl
Aug6Oh0r39hWJJzXFfk1Rb7AeGGLweVB/awTEKXVvJ9atXMsZyowRYvVKrknUwjt
Wpc0ihsgGW6MDmIhwr/VeWX5RDsL5tZEmF0eIkCUaxIozHYbZJR7Bb4qaAQHbamP
l3irSXyxV9p9ECztTVaJqto+6akofX7VgyaJxowc0Cpa6CUa9+IFV7j5iFOxt1rr
FUlRmPu22geRxa5+JX13bFAUj5iDld/z3fA8Iz19hlzkKq1JevynJ8Q+KJR2qtLo
MCTsXKjm/8tSU5g=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:14 2025 by rpki-client