Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa
File: 3133382e3132312e36342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: 2MXhfZxGKMyUDqm4rZewlR8kLi7YXpkEs+b0jrYKYos=
Subject key identifier: 73:71:37:B7:C3:14:35:18:C2:1F:D3:C1:9F:4E:3F:CF:5D:25:B4:37
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 1D43A10DC6AA634D653D6B4DFADDA49196D0711F
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:33:40 +0000
ROA not before: Wed 10 Apr 2024 12:28:40 +0000
ROA not after: Wed 09 Apr 2025 12:33:40 +0000
asID: 28201
IP address blocks: 138.121.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:43:a1:0d:c6:aa:63:4d:65:3d:6b:4d:fa:dd:a4:91:96:d0:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:28:40 2024 GMT
Not After : Apr 9 12:33:40 2025 GMT
Subject: CN=737137B7C3143518C21FD3C19F4E3FCF5D25B437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:18:3d:24:96:46:9c:e5:48:fb:ea:68:00:
f2:01:51:62:e3:59:c4:7a:34:e2:9d:09:cc:07:94:
20:6b:1f:e8:8a:9a:fc:06:83:88:61:c5:85:56:76:
79:10:58:7a:48:e0:10:d2:e6:ff:67:cb:d6:3a:19:
e7:7f:f8:7d:93:38:43:c3:ad:cc:d0:14:95:77:0a:
d1:37:9b:10:5d:13:d9:4d:26:8c:38:17:4e:bf:39:
ba:4f:a8:46:b7:31:ed:f8:6b:ba:a1:cb:78:62:d2:
05:26:f7:c7:72:a1:32:9b:da:00:ef:18:06:c3:93:
99:90:31:61:34:47:5a:80:95:fe:ea:1e:2f:ee:02:
22:a1:e4:0f:9f:d2:35:22:01:b2:c4:47:48:65:4f:
68:69:04:21:77:cc:2a:1f:a2:73:4c:5b:20:7c:4a:
b1:49:cc:38:bf:1d:cb:16:33:a0:7e:f1:3e:7e:ac:
c1:aa:86:70:5c:53:bf:81:8f:d8:d1:39:e0:fe:8e:
fa:24:43:05:82:77:da:46:1c:1c:7f:16:bb:eb:27:
66:37:59:2b:a1:f0:c2:1d:cc:45:06:f7:e4:3c:89:
12:ca:1a:53:da:ef:13:13:53:ee:56:fa:83:00:c4:
9b:af:b0:32:68:c8:3f:ae:d3:8a:f2:8b:89:46:9c:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:37:B7:C3:14:35:18:C2:1F:D3:C1:9F:4E:3F:CF:5D:25:B4:37
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.64.0/22
Signature Algorithm: sha256WithRSAEncryption
62:9a:c6:58:26:a3:6c:16:d1:f4:6f:28:ae:d7:19:1d:f9:35:
d8:a3:ba:d1:99:ec:25:17:c2:04:41:3b:79:e1:07:ca:13:e3:
fa:d5:f5:bd:e7:28:50:eb:6c:ab:04:9c:72:48:b5:d6:16:15:
41:99:20:30:01:d2:81:4e:79:e3:5b:1c:13:f8:bc:cc:13:f8:
95:3a:16:c5:bc:2f:43:a4:19:1c:88:f4:eb:b4:e8:3a:a1:61:
b1:8e:c1:ec:c8:fb:7e:ed:8b:e7:a2:c8:db:c6:04:e1:cf:95:
0d:c3:30:b3:94:41:94:f3:df:9b:3d:bb:a5:79:ac:20:a5:4f:
cf:c5:5c:d3:72:bf:f1:5e:66:e8:65:94:a7:0b:6f:ba:b7:9f:
8b:76:00:c2:98:80:18:29:02:02:dd:aa:df:c3:7c:f5:e0:b2:
58:02:29:db:c1:cc:55:47:c5:6e:53:82:c2:9a:fa:85:53:b0:
21:20:3c:f0:ae:84:39:e4:2c:23:d1:65:0b:4e:5d:bc:24:02:
94:7b:3e:6d:6b:00:64:15:4f:63:69:10:ee:78:20:ec:31:d2:
e0:2f:0e:9a:95:c1:df:1f:ae:f0:45:5a:90:1a:54:fe:88:71:
92:26:22:5b:79:12:0d:47:81:bf:0c:f7:7a:e4:b4:d1:e6:4c:
44:b9:23:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUOhDcaqY01lPWtN+t2kkZbQcR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjI4NDBaFw0yNTA0MDkxMjMzNDBaMDMxMTAvBgNV
BAMTKDczNzEzN0I3QzMxNDM1MThDMjFGRDNDMTlGNEUzRkNGNUQyNUI0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoBg9JJZGnOVI++poAPIBUWLj
WcR6NOKdCcwHlCBrH+iKmvwGg4hhxYVWdnkQWHpI4BDS5v9ny9Y6Ged/+H2TOEPD
rczQFJV3CtE3mxBdE9lNJow4F06/ObpPqEa3Me34a7qhy3hi0gUm98dyoTKb2gDv
GAbDk5mQMWE0R1qAlf7qHi/uAiKh5A+f0jUiAbLER0hlT2hpBCF3zCofonNMWyB8
SrFJzDi/HcsWM6B+8T5+rMGqhnBcU7+Bj9jROeD+jvokQwWCd9pGHBx/FrvrJ2Y3
WSuh8MIdzEUG9+Q8iRLKGlPa7xMTU+5W+oMAxJuvsDJoyD+u04ryi4lGnOOxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUc3E3t8MUNRjCH9PBn04/z10ltDcwHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzMzM4MmUzMTMyMzEyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinlAMA0GCSqGSIb3DQEBCwUAA4IBAQBimsZYJqNs
FtH0byiu1xkd+TXYo7rRmewlF8IEQTt54QfKE+P61fW95yhQ62yrBJxySLXWFhVB
mSAwAdKBTnnjWxwT+LzME/iVOhbFvC9DpBkciPTrtOg6oWGxjsHsyPt+7Yvnosjb
xgThz5UNwzCzlEGU89+bPbuleawgpU/PxVzTcr/xXmboZZSnC2+6t5+LdgDCmIAY
KQIC3arfw3z14LJYAinbwcxVR8VuU4LCmvqFU7AhIDzwroQ55Cwj0WULTl28JAKU
ez5tawBkFU9jaRDueCDsMdLgLw6alcHfH67wRVqQGlT+iHGSJiJbeRINR4G/DPd6
5LTR5kxEuSND
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:14 2025 by rpki-client