Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32342d3234203d3e20323636313633.roa
File: 3138362e322e3234382e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier: 7Ejb9b7BDRxR7fzJC1mhDcFMMhd1RaDL643IBylGpik=
Subject key identifier: CA:65:C2:4A:BE:73:6D:4E:33:70:35:D6:11:99:28:3B:A7:3A:E1:06
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 1E022AEE830614F54B5266930B6D62EE0BBCE477
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32342d3234203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:08 +0000
ROA not before: Fri 20 Dec 2024 21:12:08 +0000
ROA not after: Fri 19 Dec 2025 21:17:08 +0000
asID: 266163
IP address blocks: 186.2.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:02:2a:ee:83:06:14:f5:4b:52:66:93:0b:6d:62:ee:0b:bc:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:08 2024 GMT
Not After : Dec 19 21:17:08 2025 GMT
Subject: CN=CA65C24ABE736D4E337035D61199283BA73AE106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:4c:60:1f:8f:33:98:53:b6:e4:22:c6:48:
84:9a:2c:47:ba:47:22:69:b2:c6:7a:2e:d9:42:0b:
29:34:f3:98:34:f0:ae:24:84:aa:ec:1a:37:55:e4:
03:57:be:cb:59:a9:8b:2f:b9:a6:16:94:d6:01:ab:
8a:a7:ae:5a:35:4b:a0:da:e2:03:00:ca:47:5d:31:
f9:e4:45:1a:35:cb:6c:d0:65:f0:47:dc:7a:a7:6d:
44:a5:2d:92:32:47:bb:49:50:ce:88:03:54:29:19:
69:ad:3f:d0:f5:77:c1:90:9d:49:85:b0:49:0d:56:
51:9f:8d:6e:22:6a:c8:bc:30:cc:a0:b4:e9:97:68:
4c:ec:d7:61:0a:20:03:8f:5e:ef:61:e7:24:2a:7f:
95:35:bd:bf:57:14:e4:85:92:c7:fa:a5:d2:f4:5f:
20:71:a1:95:39:2b:33:25:92:d2:e8:7a:9f:fb:ef:
31:81:58:08:cf:b0:4a:22:94:17:0f:19:dc:dd:56:
62:d1:94:dc:7b:09:80:80:ee:7d:ed:ed:f0:6b:4d:
88:bc:3c:08:b2:c4:9a:ee:53:5c:e4:61:62:6d:0d:
fc:87:5e:5d:2e:92:fb:68:ed:6a:aa:65:ec:b8:ab:
c7:01:da:32:66:61:be:3d:6a:61:6f:0e:a2:19:f5:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:C2:4A:BE:73:6D:4E:33:70:35:D6:11:99:28:3B:A7:3A:E1:06
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32342d3234203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.248.0/24
Signature Algorithm: sha256WithRSAEncryption
81:27:70:68:f5:1c:b3:26:40:40:d6:ac:07:af:9c:52:f8:94:
d8:0d:eb:3a:c6:78:45:26:c6:fc:a7:e3:2d:87:85:c2:a3:9e:
54:3a:81:8e:c0:7f:3f:62:9e:81:40:ad:5e:6d:f9:a0:3c:15:
58:a6:54:a2:8b:ad:42:39:89:f5:72:a2:5c:ea:9b:34:c9:8f:
e9:da:a3:c0:02:6b:6e:4b:18:1a:ee:20:95:05:6d:e8:46:eb:
5e:3d:ee:74:28:34:98:51:c4:0b:66:86:12:02:fc:f3:e2:6c:
ba:85:1d:61:b8:c1:a9:65:57:0d:4c:02:3d:e2:42:bb:24:78:
79:f2:89:d3:62:21:94:f0:55:c6:f7:e9:36:ce:24:40:d5:81:
b8:92:d7:27:13:e1:27:f4:5a:76:43:7f:79:3f:f7:2f:e6:67:
d6:87:d7:1c:f8:f4:e4:d7:a8:f0:d4:cf:38:d5:f7:e2:68:72:
10:d9:8d:18:57:a8:f6:32:2c:f5:01:5c:63:1c:e1:3b:bb:af:
36:b7:f2:9e:ec:25:35:06:88:ee:b5:5a:cc:fb:81:90:1f:b5:
1c:38:98:04:c9:22:ab:8f:ae:7b:4d:67:d0:74:ed:0a:ed:25:
65:f5:df:f2:aa:8b:0c:29:ae:0f:b5:17:b0:2b:c1:47:0e:77:
2c:ee:d7:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHgIq7oMGFPVLUmaTC21i7gu85HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBRkUwODY3NzkyRTdDNjZDRDQxMTM2NzlGM0U5QjdB
RDVGMUU4NzAeFw0yNDEyMjAyMTEyMDhaFw0yNTEyMTkyMTE3MDhaMDMxMTAvBgNV
BAMTKENBNjVDMjRBQkU3MzZENEUzMzcwMzVENjExOTkyODNCQTczQUUxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXaExgH48zmFO25CLGSISaLEe6
RyJpssZ6LtlCCyk085g08K4khKrsGjdV5ANXvstZqYsvuaYWlNYBq4qnrlo1S6Da
4gMAykddMfnkRRo1y2zQZfBH3HqnbUSlLZIyR7tJUM6IA1QpGWmtP9D1d8GQnUmF
sEkNVlGfjW4iasi8MMygtOmXaEzs12EKIAOPXu9h5yQqf5U1vb9XFOSFksf6pdL0
XyBxoZU5KzMlktLoep/77zGBWAjPsEoilBcPGdzdVmLRlNx7CYCA7n3t7fBrTYi8
PAiyxJruU1zkYWJtDfyHXl0ukvto7WqqZey4q8cB2jJmYb49amFvDqIZ9f1pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUymXCSr5zbU4zcDXWEZkoO6c64QYwHwYDVR0j
BBgwFoAUK6/ghneS58Zs1BE2efPpt61fHocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8yQkFGRTA4Njc3OTJFN0M2NkNENDExMzY3OUYzRTlCN0FENUYxRTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQUZFMDg2Nzc5MkU3QzY2
Q0Q0MTEzNjc5RjNFOUI3QUQ1RjFFODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAugL4MA0GCSqGSIb3DQEBCwUAA4IBAQCBJ3Bo9Ryz
JkBA1qwHr5xS+JTYDes6xnhFJsb8p+Mth4XCo55UOoGOwH8/Yp6BQK1ebfmgPBVY
plSii61COYn1cqJc6ps0yY/p2qPAAmtuSxga7iCVBW3oRutePe50KDSYUcQLZoYS
Avzz4my6hR1huMGpZVcNTAI94kK7JHh58onTYiGU8FXG9+k2ziRA1YG4ktcnE+En
9Fp2Q395P/cv5mfWh9cc+PTk16jw1M841ffiaHIQ2Y0YV6j2Miz1AVxjHOE7u682
t/Ke7CU1BojutVrM+4GQH7UcOJgEySKrj657TWfQdO0K7SVl9d/yqosMKa4PtRew
K8FHDncs7tcR
-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:34 2025 by rpki-client