Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32312d3231203d3e203631383332.roa
File: 3138372e36302e3234302e302f32312d3231203d3e203631383332.roa (raw, json)
Hash identifier: C8xfj/Ykyz72t539jauet/TPMgzqEvmXQcU3sU/T+5w=
Subject key identifier: C1:7F:28:7D:41:EA:41:6C:EC:CF:BD:C0:25:9F:EA:9E:FB:1A:CC:11
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 5AD788F2DBC51FBC1728203EB0D2BD5EFED1C8B4
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32312d3231203d3e203631383332.roa
Signing time: Wed 29 Nov 2023 12:17:32 +0000
ROA not before: Wed 29 Nov 2023 12:12:32 +0000
ROA not after: Wed 27 Nov 2024 12:17:32 +0000
asID: 61832
IP address blocks: 187.60.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d7:88:f2:db:c5:1f:bc:17:28:20:3e:b0:d2:bd:5e:fe:d1:c8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Nov 29 12:12:32 2023 GMT
Not After : Nov 27 12:17:32 2024 GMT
Subject: CN=C17F287D41EA416CECCFBDC0259FEA9EFB1ACC11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:0e:46:5e:ba:07:64:43:69:90:5e:c5:cb:
a7:5a:5d:22:52:0e:a3:cb:65:25:00:83:6a:ee:d7:
ca:06:be:cc:a5:68:24:6d:54:f4:a8:df:86:c0:13:
cb:64:ec:71:03:f0:8a:32:71:73:e6:8b:5c:30:d6:
8e:b7:05:18:bf:1e:87:d5:59:9e:c2:88:83:70:bb:
54:87:5c:15:20:b2:93:90:70:40:b5:1d:8d:0d:6e:
bc:a0:76:09:69:88:0d:78:19:bc:a7:2f:0b:02:51:
26:e4:97:7e:8a:c1:2b:f0:4f:f8:6d:01:8b:48:6e:
7f:4e:8d:fa:d7:91:5a:2d:0e:c1:ea:21:b9:bd:22:
4a:7c:40:61:76:62:07:19:f8:9a:ec:6c:60:81:bc:
61:14:81:f7:b7:cf:fe:d7:76:e9:b5:16:0e:4b:19:
d9:3a:3e:51:dd:b9:36:81:20:5d:71:ba:c4:b5:0f:
dd:58:9a:ce:0f:c3:8b:57:2a:c9:81:21:75:4c:1c:
78:a9:00:ac:32:2d:3c:ad:e5:15:63:a6:e8:ed:a8:
9b:92:c4:fb:cb:e6:35:f8:de:44:d5:b6:b2:e8:2a:
9f:0f:a3:98:28:6e:fb:ce:72:71:fb:5d:05:4a:80:
31:3e:7b:9f:6b:e2:48:c7:82:2c:4d:ad:6c:1c:75:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:28:7D:41:EA:41:6C:EC:CF:BD:C0:25:9F:EA:9E:FB:1A:CC:11
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32312d3231203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.60.240.0/21
Signature Algorithm: sha256WithRSAEncryption
62:ab:75:5a:d8:37:c9:2f:92:d3:7e:9a:ff:dd:1b:9c:fd:0a:
fe:4f:73:49:4e:be:85:91:da:53:39:cf:e6:4b:c1:ca:25:98:
4f:d5:ae:05:72:73:0c:45:43:e1:47:82:51:cb:27:ab:28:30:
7b:d0:ee:fd:00:d8:e1:9c:f5:5a:69:22:b3:4d:d7:33:b4:02:
d1:b3:90:6c:f7:e5:12:8a:c7:f6:ec:0b:50:f0:a9:f9:4a:d8:
d5:42:46:4c:a2:f5:b2:da:13:df:df:67:e8:5e:46:7a:0b:99:
c9:0a:18:fe:2e:40:b9:0e:05:e7:d9:24:7d:59:48:56:9e:ee:
7b:ac:93:0b:a3:e6:70:b3:5f:4b:52:c1:72:e9:68:b2:1f:3c:
43:40:5b:3a:d9:78:b9:90:01:27:7f:c4:06:49:6d:4c:84:cd:
70:6c:70:32:99:81:a6:84:c4:5f:e9:80:79:c8:94:aa:19:1f:
08:be:30:75:89:82:01:0c:4c:6f:81:31:95:7f:eb:91:2e:d2:
ba:39:e8:39:95:2c:46:2e:46:8c:ee:98:aa:4f:8a:02:f5:96:
ff:0a:41:64:01:9f:ae:4d:2e:c8:f1:cf:e7:dc:ff:3c:6a:2f:
70:be:39:06:d8:a9:63:60:fa:99:e3:c4:d9:1f:59:db:c6:2a:
80:dd:09:27
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWteI8tvFH7wXKCA+sNK9Xv7RyLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzExMjkxMjEyMzJaFw0yNDExMjcxMjE3MzJaMDMxMTAvBgNV
BAMTKEMxN0YyODdENDFFQTQxNkNFQ0NGQkRDMDI1OUZFQTlFRkIxQUNDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVg5GXroHZENpkF7Fy6daXSJS
DqPLZSUAg2ru18oGvsylaCRtVPSo34bAE8tk7HED8IoycXPmi1ww1o63BRi/HofV
WZ7CiINwu1SHXBUgspOQcEC1HY0NbrygdglpiA14GbynLwsCUSbkl36KwSvwT/ht
AYtIbn9OjfrXkVotDsHqIbm9Ikp8QGF2YgcZ+JrsbGCBvGEUgfe3z/7Xdum1Fg5L
Gdk6PlHduTaBIF1xusS1D91Yms4Pw4tXKsmBIXVMHHipAKwyLTyt5RVjpujtqJuS
xPvL5jX43kTVtrLoKp8Po5gobvvOcnH7XQVKgDE+e59r4kjHgixNrWwcdcCBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwX8ofUHqQWzsz73AJZ/qnvsazBEwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzODM3MmUzNjMwMmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNjMx
MzgzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuzzwMA0GCSqGSIb3DQEBCwUAA4IBAQBiq3Va2DfJ
L5LTfpr/3Ruc/Qr+T3NJTr6FkdpTOc/mS8HKJZhP1a4FcnMMRUPhR4JRyyerKDB7
0O79ANjhnPVaaSKzTdcztALRs5Bs9+USisf27AtQ8Kn5StjVQkZMovWy2hPf32fo
XkZ6C5nJChj+LkC5DgXn2SR9WUhWnu57rJMLo+Zws19LUsFy6WiyHzxDQFs62Xi5
kAEnf8QGSW1MhM1wbHAymYGmhMRf6YB5yJSqGR8IvjB1iYIBDExvgTGVf+uRLtK6
Oeg5lSxGLkaM7piqT4oC9Zb/CkFkAZ+uTS7I8c/n3P88ai9wvjkG2KljYPqZ48TZ
H1nbxiqA3Qkn
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:37 2025 by rpki-client