Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa
File: 3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier: rvw5O14nrHhsnhMNCdFv9/oYy5MiqUsG+bkoO7peEq8=
Subject key identifier: 29:4A:F9:E9:D6:D6:01:36:DD:0D:4E:B4:FB:DE:C4:3E:0D:42:15:5B
Certificate issuer: /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial: 2F94A1926D4A84B60F0E5C9CBF2B36028ECE29E5
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa
Signing time: Tue 09 Jan 2024 21:00:02 +0000
ROA not before: Tue 09 Jan 2024 20:55:02 +0000
ROA not after: Tue 07 Jan 2025 21:00:02 +0000
asID: 262741
IP address blocks: 186.208.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:94:a1:92:6d:4a:84:b6:0f:0e:5c:9c:bf:2b:36:02:8e:ce:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Validity
Not Before: Jan 9 20:55:02 2024 GMT
Not After : Jan 7 21:00:02 2025 GMT
Subject: CN=294AF9E9D6D60136DD0D4EB4FBDEC43E0D42155B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:da:20:aa:99:8c:a6:12:2c:47:3f:ef:57:
de:18:87:b3:06:a4:09:7f:4a:a2:6f:54:f7:fd:0d:
7a:5f:72:f1:09:07:0a:07:b5:97:7b:e4:b2:57:89:
79:e5:a3:b2:e6:9b:65:59:ab:b2:8c:43:6f:5a:b9:
5d:87:ad:20:0c:bd:32:bc:d3:3f:64:71:9d:9e:ba:
58:f0:23:a5:eb:4c:d5:94:c7:49:01:7c:e3:0b:eb:
05:41:3c:67:4b:c8:90:03:32:d0:9d:4c:44:06:d4:
bd:52:e3:2e:17:22:02:a1:b6:b5:a5:ee:98:d9:4d:
56:7a:ff:1e:33:fb:eb:99:b5:5d:20:0c:de:9a:66:
82:99:0b:e0:46:22:a3:27:55:3a:af:4b:d7:fe:33:
cc:e8:8d:6a:a9:00:40:b0:25:b9:b5:68:2b:dd:cf:
af:fd:5d:10:c0:d0:36:1d:d8:50:96:ad:53:0c:d6:
ac:53:1e:17:a7:a4:c7:5d:41:50:d3:7b:16:c7:a6:
07:27:b9:ae:02:b2:cf:c7:b8:b5:47:1e:a5:34:75:
24:ef:07:f7:0c:e2:07:18:24:9c:05:eb:be:09:5f:
6a:59:f0:cb:35:2e:e4:a8:6c:93:04:49:05:6f:a8:
e0:c3:15:9d:82:fd:d0:39:9b:7c:6f:c9:c9:73:31:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:F9:E9:D6:D6:01:36:DD:0D:4E:B4:FB:DE:C4:3E:0D:42:15:5B
X509v3 Authority Key Identifier:
keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:bf:53:d3:0d:51:e2:2f:a0:ad:a4:df:c6:44:b0:1a:c3:25:
7b:a4:46:26:1f:6b:c1:a3:36:74:19:ad:ba:94:d8:d7:7e:7d:
49:9c:1e:c6:63:51:41:f4:9e:13:36:0a:e7:ba:16:9a:72:aa:
3f:19:1b:be:0a:6e:56:81:ea:ea:95:64:75:f2:fb:21:07:d5:
cd:0e:3b:36:f4:01:80:6e:05:0a:e1:66:37:a5:01:16:ee:38:
b5:95:fe:b9:1a:81:9f:18:4e:13:d9:16:33:b5:49:bc:ad:da:
0d:ba:09:bf:86:2d:db:67:7d:25:38:2e:d5:f0:de:b9:94:ef:
0c:7f:65:7f:74:34:c9:fb:84:ec:ae:18:54:42:c4:a4:45:90:
5f:88:ac:af:e4:5a:14:06:89:df:c2:cb:9f:d1:e6:54:58:0e:
2c:d3:75:1b:e4:73:6b:e9:3f:a7:08:4b:9b:89:86:9b:b7:69:
51:3f:77:97:69:ab:5f:53:6d:c6:e7:37:49:8f:62:47:56:a8:
f9:a5:4e:04:fe:16:3d:1e:de:4b:96:13:1d:bf:42:e6:43:79:
43:d7:88:5d:63:4d:a3:bb:b9:43:3b:26:63:be:b6:37:19:2e:
0a:4f:75:f3:1f:b8:ec:fd:de:e3:08:f9:32:97:72:e4:49:b0:
e6:aa:b3:1f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL5Shkm1KhLYPDlycvys2Ao7OKeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDJaFw0yNTAxMDcyMTAwMDJaMDMxMTAvBgNV
BAMTKDI5NEFGOUU5RDZENjAxMzZERDBENEVCNEZCREVDNDNFMEQ0MjE1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl9ogqpmMphIsRz/vV94Yh7MG
pAl/SqJvVPf9DXpfcvEJBwoHtZd75LJXiXnlo7Lmm2VZq7KMQ29auV2HrSAMvTK8
0z9kcZ2euljwI6XrTNWUx0kBfOML6wVBPGdLyJADMtCdTEQG1L1S4y4XIgKhtrWl
7pjZTVZ6/x4z++uZtV0gDN6aZoKZC+BGIqMnVTqvS9f+M8zojWqpAECwJbm1aCvd
z6/9XRDA0DYd2FCWrVMM1qxTHhenpMddQVDTexbHpgcnua4Css/HuLVHHqU0dSTv
B/cM4gcYJJwF674JX2pZ8Ms1LuSobJMESQVvqODDFZ2C/dA5m3xvyclzMSWXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKUr56dbWATbdDU60+97EPg1CFVswHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzkzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQvjANBgkqhkiG9w0BAQsFAAOCAQEAfb9T
0w1R4i+graTfxkSwGsMle6RGJh9rwaM2dBmtupTY1359SZwexmNRQfSeEzYK57oW
mnKqPxkbvgpuVoHq6pVkdfL7IQfVzQ47NvQBgG4FCuFmN6UBFu44tZX+uRqBnxhO
E9kWM7VJvK3aDboJv4Yt22d9JTgu1fDeuZTvDH9lf3Q0yfuE7K4YVELEpEWQX4is
r+RaFAaJ38LLn9HmVFgOLNN1G+Rza+k/pwhLm4mGm7dpUT93l2mrX1Ntxuc3SY9i
R1ao+aVOBP4WPR7eS5YTHb9C5kN5Q9eIXWNNo7u5QzsmY762NxkuCk918x+47P3e
4wj5Mpdy5Emw5qqzHw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:42 2025 by rpki-client