Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
File: 3230302e392e3232302e302f32322d3234203d3e20323632343538.roa (raw, json)
Hash identifier: O3XCE9CgUZl2Nr1E4pTEbNfQMd+lckJ2SVkCS6AN9Z4=
Subject key identifier: B7:B8:27:61:6C:C4:24:4D:64:A1:4D:7B:7D:74:AB:00:5D:8E:A5:65
Certificate issuer: /CN=29768DA627CDA1EED461D93503E553A7242B3516
Certificate serial: 5F9839590FDAE9C426CF91A390FB4787B3F0292B
Authority key identifier: 29:76:8D:A6:27:CD:A1:EE:D4:61:D9:35:03:E5:53:A7:24:2B:35:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29768DA627CDA1EED461D93503E553A7242B3516.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
Signing time: Thu 04 Apr 2024 13:30:15 +0000
ROA not before: Thu 04 Apr 2024 13:25:15 +0000
ROA not after: Thu 03 Apr 2025 13:30:15 +0000
asID: 262458
IP address blocks: 200.9.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:98:39:59:0f:da:e9:c4:26:cf:91:a3:90:fb:47:87:b3:f0:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29768DA627CDA1EED461D93503E553A7242B3516
Validity
Not Before: Apr 4 13:25:15 2024 GMT
Not After : Apr 3 13:30:15 2025 GMT
Subject: CN=B7B827616CC4244D64A14D7B7D74AB005D8EA565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:b6:fb:ec:37:89:70:6d:35:f7:71:be:cb:
f5:1a:98:40:1f:3e:11:6b:6b:fc:3f:9d:c7:5d:f7:
01:25:1d:62:f6:44:b3:ae:a3:25:d7:56:ac:a6:0e:
93:9e:c0:1d:ed:07:b5:e7:1f:4a:5a:92:97:ae:8e:
7f:02:4b:14:e7:df:c5:ad:bb:e0:43:de:42:38:44:
ae:01:8d:f9:f4:cd:d2:21:f6:68:62:71:f5:1f:b9:
ee:71:7d:5c:8e:ff:d2:bd:67:e0:7f:df:67:2f:83:
a4:df:bf:bc:0d:16:0d:7b:a0:eb:67:a8:91:f3:11:
b3:31:c2:f3:6d:1c:d0:69:2a:a7:ce:fd:50:b9:77:
57:28:af:a5:29:85:43:59:da:15:27:4a:5e:77:56:
53:5e:16:32:cd:62:00:89:fe:1a:b5:c8:87:c7:dd:
84:6f:41:e0:18:1f:99:90:f9:6e:7f:41:0e:8c:83:
12:7e:de:ad:7b:d4:6b:80:1c:04:c2:45:d5:22:93:
6c:6b:bb:4e:71:0c:d7:e2:4f:0d:a4:ba:1b:2f:6a:
f7:c9:e3:29:bc:e0:38:f6:ad:13:22:74:c0:12:88:
4e:4a:df:e3:56:60:d8:d6:e2:15:18:a6:4b:a6:0a:
ab:96:70:73:31:c5:54:6d:ab:72:30:9f:2a:49:fc:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:27:61:6C:C4:24:4D:64:A1:4D:7B:7D:74:AB:00:5D:8E:A5:65
X509v3 Authority Key Identifier:
keyid:29:76:8D:A6:27:CD:A1:EE:D4:61:D9:35:03:E5:53:A7:24:2B:35:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/29768DA627CDA1EED461D93503E553A7242B3516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29768DA627CDA1EED461D93503E553A7242B3516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:8d:83:bb:19:8d:14:28:9d:7c:1e:17:3e:df:86:d1:3a:bf:
ac:ce:08:97:e2:38:d9:ae:0a:12:e9:65:5a:bd:f3:c5:cf:d4:
2d:e2:b4:ec:ae:35:bb:a0:1c:7e:77:6a:55:67:93:4c:79:36:
46:ef:c1:15:a0:0d:5c:f1:59:42:b8:80:e7:14:fc:dd:f1:c8:
d2:31:f4:58:af:81:ae:83:b5:ff:1b:cf:8d:84:82:df:e7:2e:
7d:ee:a9:cf:73:2b:5a:ec:cb:45:d0:b3:1e:04:88:76:a0:43:
56:9f:f5:1b:4e:f9:91:c8:ca:43:8f:3b:3b:4c:f0:3e:bd:dc:
99:71:d7:c9:55:df:ad:2f:de:06:d8:3f:cd:ae:cd:63:2a:95:
1e:6c:5a:45:28:2c:48:3e:b6:d9:23:9b:c1:84:cc:1c:9d:81:
7c:61:fc:0b:0f:8f:97:52:3b:ab:f2:f0:c4:49:25:6b:17:7d:
09:a2:9b:f0:a2:b3:69:91:9c:cb:1a:f8:96:08:c7:8f:06:10:
9e:48:3e:18:73:08:34:93:e6:e7:84:a0:de:6a:92:9a:e6:aa:
df:49:82:f3:a0:6f:7a:9e:07:18:f5:28:97:75:cc:c0:59:8a:
50:87:36:d4:e0:12:af:00:86:b4:14:3c:fd:bf:fe:c5:bb:ea:
1f:2a:b6:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX5g5WQ/a6cQmz5GjkPtHh7PwKSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3NjhEQTYyN0NEQTFFRUQ0NjFEOTM1MDNFNTUzQTcy
NDJCMzUxNjAeFw0yNDA0MDQxMzI1MTVaFw0yNTA0MDMxMzMwMTVaMDMxMTAvBgNV
BAMTKEI3QjgyNzYxNkNDNDI0NEQ2NEExNEQ3QjdENzRBQjAwNUQ4RUE1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWbb77DeJcG0193G+y/UamEAf
PhFra/w/ncdd9wElHWL2RLOuoyXXVqymDpOewB3tB7XnH0pakpeujn8CSxTn38Wt
u+BD3kI4RK4Bjfn0zdIh9mhicfUfue5xfVyO/9K9Z+B/32cvg6Tfv7wNFg17oOtn
qJHzEbMxwvNtHNBpKqfO/VC5d1cor6UphUNZ2hUnSl53VlNeFjLNYgCJ/hq1yIfH
3YRvQeAYH5mQ+W5/QQ6MgxJ+3q171GuAHATCRdUik2xru05xDNfiTw2kuhsvavfJ
4ym84Dj2rRMidMASiE5K3+NWYNjW4hUYpkumCquWcHMxxVRtq3IwnypJ/O4dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUt7gnYWzEJE1koU17fXSrAF2OpWUwHwYDVR0j
BBgwFoAUKXaNpifNoe7UYdk1A+VTpyQrNRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWpya0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2
UHUvMS8yOTc2OERBNjI3Q0RBMUVFRDQ2MUQ5MzUwM0U1NTNBNzI0MkIzNTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5NzY4REE2MjdDREExRUVE
NDYxRDkzNTAzRTU1M0E3MjQyQjM1MTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FqcmtKM3dXUjJKN2V0ZTdFN1Y1djU0NHl1ZEd4dFN1NFUzQ0tydUFydlB1LzEv
MzIzMDMwMmUzOTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyAncMA0GCSqGSIb3DQEBCwUAA4IBAQCLjYO7GY0U
KJ18Hhc+34bROr+szgiX4jjZrgoS6WVavfPFz9Qt4rTsrjW7oBx+d2pVZ5NMeTZG
78EVoA1c8VlCuIDnFPzd8cjSMfRYr4Gug7X/G8+NhILf5y597qnPcyta7MtF0LMe
BIh2oENWn/UbTvmRyMpDjzs7TPA+vdyZcdfJVd+tL94G2D/Nrs1jKpUebFpFKCxI
PrbZI5vBhMwcnYF8YfwLD4+XUjur8vDESSVrF30JopvworNpkZzLGviWCMePBhCe
SD4Ycwg0k+bnhKDeapKa5qrfSYLzoG96ngcY9SiXdczAWYpQhzbU4BKvAIa0FDz9
v/7Fu+ofKrZ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org