Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier: LgkkCiFdiXEgieCdL7hdt/XdXoO5ts0Mff4KIibIMOI=
Subject key identifier: 3D:3C:2E:2C:AE:5F:4B:7B:CD:16:EB:C9:26:8E:51:AD:A4:D4:FD:31
Certificate issuer: /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial: 2045C661B0771A45D7DD81E95C06DE8C6624884F
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time: Wed 03 Apr 2024 20:23:10 +0000
ROA not before: Wed 03 Apr 2024 20:18:10 +0000
ROA not after: Wed 02 Apr 2025 20:23:10 +0000
asID: 271607
IP address blocks: 190.9.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:45:c6:61:b0:77:1a:45:d7:dd:81:e9:5c:06:de:8c:66:24:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Validity
Not Before: Apr 3 20:18:10 2024 GMT
Not After : Apr 2 20:23:10 2025 GMT
Subject: CN=3D3C2E2CAE5F4B7BCD16EBC9268E51ADA4D4FD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:75:b7:d5:d1:c5:e9:5f:0e:d3:e7:8e:2c:
bf:03:a9:79:85:e4:17:81:39:04:39:92:8c:db:d5:
3c:e2:ba:b3:4b:55:45:7c:de:76:60:74:c6:e0:ab:
cb:ef:60:b8:45:00:17:ce:63:05:00:a8:8d:43:6e:
48:68:6e:0f:16:49:96:7c:ae:d8:5c:e8:60:61:ca:
ba:ac:7b:83:38:07:d5:0c:05:1c:27:84:fc:f4:2e:
cf:ae:ec:36:c3:c4:72:e5:37:44:cd:0b:2c:07:c6:
c4:1f:7d:f0:bf:5f:38:77:53:dc:14:ea:f1:b1:70:
ea:e9:bf:22:79:3f:fd:89:38:11:88:cc:ac:89:7b:
a9:7b:68:4d:d6:f1:50:88:54:53:07:3e:0f:1b:99:
58:c3:c9:61:f7:9d:36:eb:87:72:28:13:58:16:52:
a2:94:23:61:07:d2:56:4a:2d:ce:87:40:7c:21:98:
b6:fe:30:b3:6d:61:83:9c:38:bf:d4:60:b9:6e:70:
ba:3d:2a:d1:e2:81:e8:3e:e2:1a:6e:f7:d4:02:00:
f0:1f:69:7a:8e:01:66:46:80:c3:76:0e:b0:f6:dc:
36:1f:ec:a9:bf:2c:09:f9:e8:58:0f:a8:96:b0:7a:
cc:50:ff:2b:c3:f2:46:2a:43:1f:cf:d9:05:ee:c4:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:2E:2C:AE:5F:4B:7B:CD:16:EB:C9:26:8E:51:AD:A4:D4:FD:31
X509v3 Authority Key Identifier:
keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.106.0/23
Signature Algorithm: sha256WithRSAEncryption
28:8d:52:6a:43:08:f4:02:1a:af:0f:87:4c:dc:be:af:95:2e:
27:50:f1:67:be:12:c9:b4:01:94:20:13:fa:da:ed:92:3d:ae:
61:66:ea:da:4f:6e:bb:24:c8:5a:0e:e8:6a:ca:09:e1:67:ba:
7a:e4:20:9f:ac:88:18:f2:1b:d8:5c:d1:87:59:fe:24:f4:44:
e6:14:f8:f7:98:e8:bf:15:1d:fb:e8:fe:6a:ae:ae:e7:c7:0f:
da:79:c3:14:2f:53:45:d1:99:e6:5d:f3:fd:a0:3d:1b:4c:68:
1f:06:f3:41:53:48:11:f1:f5:97:a1:dd:78:ef:35:87:64:54:
52:a9:ed:6e:04:b4:48:92:2a:a1:5b:3e:16:9a:43:c7:84:50:
ea:31:0c:39:b6:ff:a1:a7:e6:93:a4:f2:71:78:bd:4d:0a:29:
b8:57:82:09:01:80:83:32:c6:86:da:a0:10:41:bf:48:16:83:
a1:26:28:14:d8:cc:1b:37:fa:75:64:44:88:cb:96:d4:c6:b9:
3b:81:2d:92:9d:2c:b5:c7:17:de:0a:23:6f:5d:5d:71:61:0a:
67:82:59:28:5e:12:8f:97:fe:9f:75:c0:98:bd:dd:63:21:17:
1d:59:0e:ae:47:61:97:cf:fd:7a:f5:dd:57:93:f7:8d:fd:90:
57:a4:74:fd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIEXGYbB3GkXX3YHpXAbejGYkiE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEw
NTEwRjhFNzAeFw0yNDA0MDMyMDE4MTBaFw0yNTA0MDIyMDIzMTBaMDMxMTAvBgNV
BAMTKDNEM0MyRTJDQUU1RjRCN0JDRDE2RUJDOTI2OEU1MUFEQTRENEZEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNGXW31dHF6V8O0+eOLL8DqXmF
5BeBOQQ5kozb1TziurNLVUV83nZgdMbgq8vvYLhFABfOYwUAqI1Dbkhobg8WSZZ8
rthc6GBhyrqse4M4B9UMBRwnhPz0Ls+u7DbDxHLlN0TNCywHxsQfffC/Xzh3U9wU
6vGxcOrpvyJ5P/2JOBGIzKyJe6l7aE3W8VCIVFMHPg8bmVjDyWH3nTbrh3IoE1gW
UqKUI2EH0lZKLc6HQHwhmLb+MLNtYYOcOL/UYLlucLo9KtHigeg+4hpu99QCAPAf
aXqOAWZGgMN2DrD23DYf7Km/LAn56FgPqJawesxQ/yvD8kYqQx/P2QXuxKzZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPTwuLK5fS3vNFuvJJo5RraTU/TEwHwYDVR0j
BBgwFoAUiT2VraOLKiiMA9qpkpDVEQUQ+OcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzEvODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEwNTEwRjhFNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTNEOTVBREEzOEIyQTI4OEMw
M0RBQTk5MjkwRDUxMTA1MTBGOEU3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzEvMzEz
OTMwMmUzOTJlMzEzMDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvglqMA0GCSqGSIb3DQEBCwUAA4IBAQAojVJqQwj0Ahqv
D4dM3L6vlS4nUPFnvhLJtAGUIBP62u2SPa5hZuraT267JMhaDuhqygnhZ7p65CCf
rIgY8hvYXNGHWf4k9ETmFPj3mOi/FR376P5qrq7nxw/aecMUL1NF0ZnmXfP9oD0b
TGgfBvNBU0gR8fWXod147zWHZFRSqe1uBLRIkiqhWz4WmkPHhFDqMQw5tv+hp+aT
pPJxeL1NCim4V4IJAYCDMsaG2qAQQb9IFoOhJigU2MwbN/p1ZESIy5bUxrk7gS2S
nSy1xxfeCiNvXV1xYQpnglkoXhKPl/6fdcCYvd1jIRcdWQ6uR2GXz/169d1Xk/eN
/ZBXpHT9
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:23:58 2025 by rpki-client