Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
File: 3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (raw, json)
Hash identifier: vI31R/3jjUgDFQb8WNPyBGM0ugMkKUKjG4G8ef6fR2A=
Subject key identifier: 18:48:75:1E:5B:05:1B:2C:88:1B:30:8A:83:B4:65:1E:AD:C1:DD:DF
Certificate issuer: /CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Certificate serial: 2943C4509CFECB6259D3624334A7701B208E7C9C
Authority key identifier: AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
Signing time: Mon 22 Jan 2024 15:28:23 +0000
ROA not before: Mon 22 Jan 2024 15:23:23 +0000
ROA not after: Mon 20 Jan 2025 15:28:23 +0000
asID: 264544
IP address blocks: 138.0.112.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:43:c4:50:9c:fe:cb:62:59:d3:62:43:34:a7:70:1b:20:8e:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Validity
Not Before: Jan 22 15:23:23 2024 GMT
Not After : Jan 20 15:28:23 2025 GMT
Subject: CN=1848751E5B051B2C881B308A83B4651EADC1DDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:a3:ad:f8:c8:b1:47:d1:a0:8a:32:11:db:
45:f9:43:01:07:33:2a:d8:c6:1b:95:c3:c8:3e:4c:
bb:13:cf:19:83:b7:ed:c0:55:4e:30:f3:79:0c:fe:
16:9a:73:f2:e2:8f:c0:e8:93:e5:5a:42:c8:6f:90:
9c:a3:5d:b4:3c:4b:e8:58:90:2c:84:22:23:98:6f:
6e:b5:b3:3d:6e:5f:ac:f7:7b:72:35:fb:fc:53:b7:
3c:c8:ce:f1:45:15:8c:3c:20:ae:5e:92:41:ed:23:
7b:3e:b0:5b:ea:3b:88:fd:02:f0:20:cb:51:9d:27:
fc:88:99:1c:89:1a:ad:9b:f0:40:fe:15:cc:79:ea:
a3:14:2e:f9:8e:4c:ee:3f:3e:e3:5c:8e:76:9b:1f:
d9:c5:6c:a7:7b:46:0e:2f:08:bb:87:7c:d3:38:1b:
34:ef:8c:8e:4f:73:f5:e6:23:37:df:79:09:ad:88:
8c:a9:39:9d:c8:3e:aa:e9:f2:47:00:b1:28:10:ba:
8c:68:45:65:04:54:1f:74:1d:a8:51:94:46:48:dc:
0b:f3:6e:74:43:aa:5d:c4:95:cb:a3:b5:7f:02:e8:
a4:4e:91:3d:c3:5f:b6:6b:90:4c:bb:7f:5c:08:84:
de:b5:95:76:9f:22:1d:0d:ae:29:07:d3:87:b4:56:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:75:1E:5B:05:1B:2C:88:1B:30:8A:83:B4:65:1E:AD:C1:DD:DF
X509v3 Authority Key Identifier:
keyid:AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:b5:7a:6a:90:bb:4f:79:fd:42:89:0d:b6:7f:3c:f8:c3:ec:
59:88:8d:1a:4e:e9:3f:a5:74:0f:c9:59:f8:f2:1f:a9:b7:e9:
9d:6e:10:5d:77:88:86:9d:32:60:13:2d:24:25:45:a5:d1:5f:
a7:ca:89:85:47:ea:76:3e:5e:28:a9:f2:a8:bc:2a:d4:58:5c:
22:34:f1:fe:81:2d:15:88:16:8f:2e:7f:59:d0:b7:99:5f:ac:
83:14:75:14:5c:36:1f:ff:3f:ec:4e:fd:8d:a6:61:f8:0b:8a:
3b:98:a4:4d:da:ee:7f:4b:fd:36:71:2d:a8:cc:6a:df:ba:44:
85:0a:b0:4a:11:af:5d:f4:a1:5a:f1:82:65:f0:18:59:eb:43:
fc:0d:89:09:f9:b3:a5:8c:2b:a5:3e:39:56:21:8f:67:2c:14:
c2:94:e7:49:97:a4:f9:4f:27:ff:99:60:8b:27:de:d3:df:a4:
75:da:d8:06:4c:65:c2:b8:b3:66:35:01:d5:e4:ca:90:64:01:
62:c7:ac:07:30:ab:65:a3:6e:ea:45:48:77:fc:2d:19:65:d6:
24:9a:c2:87:0f:dc:8e:06:da:82:d9:d3:dd:92:cc:10:30:6e:
42:fa:15:3b:45:9e:77:6a:4a:19:5d:05:55:8b:5e:9e:ad:81:
16:50:aa:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKUPEUJz+y2JZ02JDNKdwGyCOfJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0MkRCNzBBREY1MUUxQ0JGNzcxMUQ0QjQyRTQ0MDUw
NTA0QUI4RTAeFw0yNDAxMjIxNTIzMjNaFw0yNTAxMjAxNTI4MjNaMDMxMTAvBgNV
BAMTKDE4NDg3NTFFNUIwNTFCMkM4ODFCMzA4QTgzQjQ2NTFFQURDMUREREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+qOt+MixR9GgijIR20X5QwEH
MyrYxhuVw8g+TLsTzxmDt+3AVU4w83kM/haac/Lij8Dok+VaQshvkJyjXbQ8S+hY
kCyEIiOYb261sz1uX6z3e3I1+/xTtzzIzvFFFYw8IK5ekkHtI3s+sFvqO4j9AvAg
y1GdJ/yImRyJGq2b8ED+Fcx56qMULvmOTO4/PuNcjnabH9nFbKd7Rg4vCLuHfNM4
GzTvjI5Pc/XmIzffeQmtiIypOZ3IPqrp8kcAsSgQuoxoRWUEVB90HahRlEZI3Avz
bnRDql3ElcujtX8C6KROkT3DX7ZrkEy7f1wIhN61lXafIh0NrikH04e0VmoBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGEh1HlsFGyyIGzCKg7RlHq3B3d8wHwYDVR0j
BBgwFoAUqkLbcK31Hhy/dxHUtC5EBQUEq44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMS9BQTQyREI3MEFERjUxRTFDQkY3NzExRDRCNDJFNDQwNTA1MDRBQjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNDJEQjcwQURGNTFFMUNC
Rjc3MTFENEI0MkU0NDA1MDUwNEFCOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzEv
MzEzMzM4MmUzMDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigBwMA0GCSqGSIb3DQEBCwUAA4IBAQDLtXpqkLtP
ef1CiQ22fzz4w+xZiI0aTuk/pXQPyVn48h+pt+mdbhBdd4iGnTJgEy0kJUWl0V+n
yomFR+p2Pl4oqfKovCrUWFwiNPH+gS0ViBaPLn9Z0LeZX6yDFHUUXDYf/z/sTv2N
pmH4C4o7mKRN2u5/S/02cS2ozGrfukSFCrBKEa9d9KFa8YJl8BhZ60P8DYkJ+bOl
jCulPjlWIY9nLBTClOdJl6T5Tyf/mWCLJ97T36R12tgGTGXCuLNmNQHV5MqQZAFi
x6wHMKtlo27qRUh3/C0ZZdYkmsKHD9yOBtqC2dPdkswQMG5C+hU7RZ53akoZXQVV
i16erYEWUKr0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org