Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
File: 3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa (raw, json)
Hash identifier: bkt+kZ3H/gFAz0Cgpd6rQklX4Aq3vbWrGbxkGTnwZD8=
Subject key identifier: 3B:F1:64:6B:55:29:99:CB:C6:0F:DB:CF:ED:72:B6:C8:A9:04:AF:0D
Certificate issuer: /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial: 53D9C7EBA84F0FA5699389303E71128E96AA50F7
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
Signing time: Mon 29 Jan 2024 13:48:34 +0000
ROA not before: Mon 29 Jan 2024 13:43:34 +0000
ROA not after: Mon 27 Jan 2025 13:48:34 +0000
asID: 263897
IP address blocks: 138.204.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d9:c7:eb:a8:4f:0f:a5:69:93:89:30:3e:71:12:8e:96:aa:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Validity
Not Before: Jan 29 13:43:34 2024 GMT
Not After : Jan 27 13:48:34 2025 GMT
Subject: CN=3BF1646B552999CBC60FDBCFED72B6C8A904AF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:ce:59:71:d6:57:be:97:99:f8:63:e0:57:
44:08:11:72:5c:d2:89:fe:85:61:e3:3f:0e:e6:a3:
4c:4c:1d:f7:54:6c:8d:09:25:90:1d:65:15:61:05:
94:03:f9:fd:86:ce:c6:84:78:90:29:9e:39:8b:18:
9b:08:09:64:d0:2c:ac:66:22:82:d5:eb:35:d7:de:
c2:d8:b0:87:b4:cb:79:79:19:ee:2b:52:40:a5:e7:
d5:1e:06:af:8d:4c:cb:99:8f:d8:bd:21:2d:0f:5a:
9a:7a:19:05:ca:4f:d6:fe:ec:47:1e:0e:be:2d:5c:
2f:e1:74:4f:37:43:2a:68:7b:0e:b5:f7:b0:8e:16:
e5:77:f5:ab:6a:30:fc:39:6d:ed:3e:a1:15:7d:10:
05:4e:46:29:43:ab:27:75:93:9d:16:8f:1d:b0:a1:
cb:f4:e4:8d:46:91:57:fe:ce:4a:d9:1e:a0:18:f5:
63:c9:b1:8b:85:c0:28:92:39:cc:c3:c9:22:52:12:
b1:da:5f:6e:ee:e2:c7:ff:21:31:ac:1f:d4:c3:67:
0b:c0:49:43:8f:83:aa:17:9c:1b:b7:cd:83:cf:d4:
ec:b3:f4:b1:47:fe:1b:30:10:c6:51:a0:66:2c:52:
49:31:49:5b:3a:72:c2:be:24:5b:ea:e3:91:1e:e4:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:64:6B:55:29:99:CB:C6:0F:DB:CF:ED:72:B6:C8:A9:04:AF:0D
X509v3 Authority Key Identifier:
keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:0d:03:79:4e:ab:b2:80:99:4a:30:a7:1c:1a:2d:6b:1d:70:
94:70:5b:78:b3:62:29:8a:cb:c0:06:c0:ed:7f:96:a1:9e:0e:
32:09:8f:57:2b:07:7c:c1:83:90:ee:c1:a5:5a:96:91:82:d7:
ea:26:a9:90:06:41:b5:af:70:5c:b6:63:d5:04:6b:6e:cc:ca:
db:06:b5:4c:d4:3c:76:25:d2:95:31:de:46:2a:03:12:d2:29:
88:b8:14:cf:d3:5d:27:0c:de:a8:b8:2f:75:7d:72:f8:ef:37:
b3:43:72:c2:7a:6b:89:60:52:b0:6c:bf:3c:f4:4c:77:e3:24:
48:7e:8d:85:cb:67:eb:a9:20:bd:d7:01:36:3b:e4:b2:02:a9:
56:10:66:fe:ac:3f:56:5e:da:42:a3:00:cc:dc:50:7b:b1:f9:
b0:1a:6f:75:20:27:0c:80:02:2e:f6:6f:d3:bc:89:4b:5e:29:
6c:d2:a2:e8:8d:96:e3:87:c7:50:b3:ad:45:a8:80:9f:c0:3c:
cd:57:27:16:45:ee:df:cb:18:8e:04:c4:59:e8:af:d4:9c:0b:
69:7e:ea:d4:0a:34:1d:4b:e1:9a:c8:e8:e2:99:da:7e:4d:1e:
9e:b7:19:17:05:33:3d:80:53:ce:ff:f4:94:b7:dc:6f:cf:ac:
31:b2:17:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU9nH66hPD6Vpk4kwPnESjpaqUPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VFRDMwMjkyQTlDOUUxMjk0RERBMzFENTJCQzk3RDc3
NzVFRTlFQzAeFw0yNDAxMjkxMzQzMzRaFw0yNTAxMjcxMzQ4MzRaMDMxMTAvBgNV
BAMTKDNCRjE2NDZCNTUyOTk5Q0JDNjBGREJDRkVENzJCNkM4QTkwNEFGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqs5ZcdZXvpeZ+GPgV0QIEXJc
0on+hWHjPw7mo0xMHfdUbI0JJZAdZRVhBZQD+f2GzsaEeJApnjmLGJsICWTQLKxm
IoLV6zXX3sLYsIe0y3l5Ge4rUkCl59UeBq+NTMuZj9i9IS0PWpp6GQXKT9b+7Ece
Dr4tXC/hdE83Qypoew6197COFuV39atqMPw5be0+oRV9EAVORilDqyd1k50Wjx2w
ocv05I1GkVf+zkrZHqAY9WPJsYuFwCiSOczDySJSErHaX27u4sf/ITGsH9TDZwvA
SUOPg6oXnBu3zYPP1Oyz9LFH/hswEMZRoGYsUkkxSVs6csK+JFvq45Ee5CdHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUO/Fka1UpmcvGD9vP7XK2yKkErw0wHwYDVR0j
BBgwFoAUfu0wKSqcnhKU3aMdUryX13de6ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVTNFJwZFB1Vkg4c0FQemlmZ2FINzFWYkdWRlRVZnN2cktucURMbmt2
bTcvMC83RUVEMzAyOTJBOUM5RTEyOTREREEzMUQ1MkJDOTdENzc3NUVFOUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRUQzMDI5MkE5QzlFMTI5
NEREQTMxRDUyQkM5N0Q3Nzc1RUU5RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JlUzRScGRQdVZIOHNBUHppZmdhSDcxVmJHVkZUVWZzdnJLbnFETG5rdm03LzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM4MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMcDANBgkqhkiG9w0BAQsFAAOCAQEAPw0D
eU6rsoCZSjCnHBotax1wlHBbeLNiKYrLwAbA7X+WoZ4OMgmPVysHfMGDkO7BpVqW
kYLX6iapkAZBta9wXLZj1QRrbszK2wa1TNQ8diXSlTHeRioDEtIpiLgUz9NdJwze
qLgvdX1y+O83s0NywnpriWBSsGy/PPRMd+MkSH6Nhctn66kgvdcBNjvksgKpVhBm
/qw/Vl7aQqMAzNxQe7H5sBpvdSAnDIACLvZv07yJS14pbNKi6I2W44fHULOtRaiA
n8A8zVcnFkXu38sYjgTEWeiv1JwLaX7q1Ao0HUvhmsjo4pnafk0enrcZFwUzPYBT
zv/0lLfcb8+sMbIXWQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:23 2025 by rpki-client