Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
File: 3133382e3138352e32342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: kz/wKqehQdpn7LAo3B33lLmcJnicIrtlImsgEProP/g=
Subject key identifier: CF:8D:A2:45:02:DA:D1:BB:66:89:AF:FB:2D:B7:79:14:5D:BE:8D:CA
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 6BE6C7184F65429D47AD6AC46F1C6030144EF48E
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:39:05 +0000
ROA not before: Wed 10 Apr 2024 12:34:05 +0000
ROA not after: Wed 09 Apr 2025 12:39:05 +0000
asID: 28201
IP address blocks: 138.185.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e6:c7:18:4f:65:42:9d:47:ad:6a:c4:6f:1c:60:30:14:4e:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:34:05 2024 GMT
Not After : Apr 9 12:39:05 2025 GMT
Subject: CN=CF8DA24502DAD1BB6689AFFB2DB779145DBE8DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:0b:30:ea:1f:05:8f:56:16:ea:dc:37:b4:
c0:05:14:17:8f:89:90:92:e4:ca:5b:f5:74:8e:05:
e5:fc:00:1c:ad:28:ed:07:e9:b4:f4:53:f1:03:1a:
77:e6:d0:f5:c8:ee:c3:af:64:f4:ab:7e:f6:5c:33:
c2:41:17:0d:fa:bb:1f:be:a5:de:2a:a2:ba:3e:ea:
ee:cd:9f:3d:5a:e8:67:d4:48:05:8d:ac:fb:73:71:
30:67:ea:95:35:40:37:67:30:3f:aa:90:d4:ef:3c:
0a:69:b1:4d:ef:93:1d:15:07:63:ca:5d:7b:29:8f:
18:b8:c2:c7:62:79:f7:25:c7:3c:e5:8b:06:0f:49:
63:3a:35:eb:6a:d9:1f:a4:12:12:01:8d:12:39:14:
d7:93:a0:c5:e5:04:46:23:a2:9f:8b:d9:a8:5e:94:
06:b6:d9:e1:db:ff:cc:8b:ce:da:17:c2:a8:50:ad:
53:40:5e:6b:51:ea:52:60:d2:c2:94:3f:9a:78:a5:
7b:29:7b:ab:f9:03:51:6e:d9:fb:ed:18:1d:fa:b0:
88:36:87:a0:b6:b1:c6:2c:8a:65:ed:62:34:2b:d7:
ab:0d:c9:59:2e:f2:6f:3e:96:54:8d:98:65:50:bc:
b3:15:40:11:6e:10:b6:8d:d7:25:4a:8a:5a:c1:b6:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8D:A2:45:02:DA:D1:BB:66:89:AF:FB:2D:B7:79:14:5D:BE:8D:CA
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3138352e32342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:7a:13:83:c6:34:15:b8:c9:a0:4d:f9:88:e3:53:2e:d5:a4:
07:10:8f:fe:93:d1:5a:af:2a:65:f2:78:37:69:13:8e:96:e3:
57:91:59:30:99:3b:75:8f:39:4d:56:5c:f7:d0:f7:50:c3:97:
16:72:90:19:54:6c:09:e5:c0:08:9b:ca:6b:3d:cb:ad:53:d9:
57:30:b0:1d:2b:eb:55:89:ff:1f:62:df:63:e5:89:98:69:70:
25:f2:3a:b1:54:45:82:f3:bf:37:91:7b:1f:b7:3f:30:da:ed:
17:11:17:0b:52:20:4c:02:9b:d0:36:f2:dc:ed:de:cb:9a:b0:
0e:eb:a5:28:56:5e:09:e0:e3:2e:62:00:10:8f:15:6c:1f:43:
f3:45:6e:50:f5:4f:fe:7e:2e:f7:1d:9b:45:ab:95:7d:3b:38:
b8:5c:e0:24:ca:13:8f:bb:11:56:a9:72:dc:02:d8:83:35:1c:
c1:0e:3a:55:b2:be:50:6a:3d:55:11:3d:b6:ae:47:25:77:9a:
96:f9:12:f3:57:8d:8f:dd:e4:a0:87:88:e2:94:9a:36:7f:42:
8c:9b:95:04:53:08:58:5f:8d:3f:dc:cb:82:9b:af:c8:e0:a2:
d6:f7:5f:06:6d:a0:29:e0:82:db:9b:09:30:cc:46:bb:99:92:
6a:47:aa:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa+bHGE9lQp1HrWrEbxxgMBRO9I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjM0MDVaFw0yNTA0MDkxMjM5MDVaMDMxMTAvBgNV
BAMTKENGOERBMjQ1MDJEQUQxQkI2Njg5QUZGQjJEQjc3OTE0NURCRThEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHwsw6h8Fj1YW6tw3tMAFFBeP
iZCS5Mpb9XSOBeX8ABytKO0H6bT0U/EDGnfm0PXI7sOvZPSrfvZcM8JBFw36ux++
pd4qoro+6u7Nnz1a6GfUSAWNrPtzcTBn6pU1QDdnMD+qkNTvPAppsU3vkx0VB2PK
XXspjxi4wsdiefclxzzliwYPSWM6Netq2R+kEhIBjRI5FNeToMXlBEYjop+L2ahe
lAa22eHb/8yLztoXwqhQrVNAXmtR6lJg0sKUP5p4pXspe6v5A1Fu2fvtGB36sIg2
h6C2scYsimXtYjQr16sNyVku8m8+llSNmGVQvLMVQBFuELaN1yVKilrBtpr9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz42iRQLa0btmia/7Lbd5FF2+jcowHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzMzM4MmUzMTM4MzUyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirkYMA0GCSqGSIb3DQEBCwUAA4IBAQA+ehODxjQV
uMmgTfmI41Mu1aQHEI/+k9Farypl8ng3aROOluNXkVkwmTt1jzlNVlz30PdQw5cW
cpAZVGwJ5cAIm8prPcutU9lXMLAdK+tVif8fYt9j5YmYaXAl8jqxVEWC8783kXsf
tz8w2u0XERcLUiBMApvQNvLc7d7LmrAO66UoVl4J4OMuYgAQjxVsH0PzRW5Q9U/+
fi73HZtFq5V9Ozi4XOAkyhOPuxFWqXLcAtiDNRzBDjpVsr5Qaj1VET22rkcld5qW
+RLzV42P3eSgh4jilJo2f0KMm5UEUwhYX40/3MuCm6/I4KLW918GbaAp4ILbmwkw
zEa7mZJqR6qD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org