Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
File: 3133382e35392e3134392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: pNn/hJQ+DqqBFsBY3HKAicCzJLNtQ62DWd+auZaLdkY=
Subject key identifier: F5:C4:43:15:75:F0:2D:39:D2:47:08:65:07:35:E7:CA:41:EB:FD:6D
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 0211BEAEA454491C14A5C39FB07616F688B24B84
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:50 +0000
ROA not before: Mon 01 Jul 2024 18:40:50 +0000
ROA not after: Mon 30 Jun 2025 18:45:50 +0000
asID: 28165
IP address blocks: 138.59.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:11:be:ae:a4:54:49:1c:14:a5:c3:9f:b0:76:16:f6:88:b2:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:50 2024 GMT
Not After : Jun 30 18:45:50 2025 GMT
Subject: CN=F5C4431575F02D39D24708650735E7CA41EBFD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:f1:c9:cd:36:97:43:be:e6:bc:59:d3:e0:
65:20:d9:dd:3b:4b:1a:9a:50:d3:12:cc:fb:5f:db:
5b:b1:68:e5:62:ca:29:9b:86:ed:ae:14:ed:92:33:
1b:98:17:51:bd:27:5a:32:45:25:e9:37:73:53:21:
96:07:f0:dd:e3:c5:ae:cb:a5:08:ba:69:cb:05:91:
45:4f:1d:e3:b3:b1:4a:79:fb:e3:fd:ec:cc:ca:2e:
76:69:59:73:ac:e5:e2:58:33:a9:f8:cd:14:73:bb:
4b:36:74:80:dc:7d:64:15:93:8d:f6:54:39:5c:2e:
f3:ba:76:40:dd:b8:6f:92:b2:61:4e:9c:fb:9e:20:
77:61:46:35:84:9f:2e:89:0e:b9:6d:71:94:cb:b9:
cf:af:85:76:ec:ae:6c:5c:ec:39:2d:9e:a8:e3:83:
c8:3d:82:cf:19:03:ca:71:cf:48:67:4f:57:10:b7:
15:ca:1d:90:2e:4d:23:99:76:21:27:df:48:6c:45:
94:64:ad:b8:b1:64:64:cc:9f:9d:65:21:6e:52:7c:
c1:2c:92:f3:66:b5:03:a6:cb:e0:fc:2c:c3:28:8e:
b6:72:9c:79:d7:f9:b9:62:84:a7:f3:3b:cd:ac:7d:
c4:e0:8d:17:6e:02:f6:ca:3f:1a:77:2e:4e:ac:9b:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:43:15:75:F0:2D:39:D2:47:08:65:07:35:E7:CA:41:EB:FD:6D
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:16:c8:f2:89:ea:61:02:ad:08:8a:e1:b3:bd:66:16:fd:d5:
6a:0b:b9:83:d7:c5:c9:ce:42:a2:37:94:72:85:78:8a:59:f2:
8e:b9:6d:1f:b5:9a:e4:5f:ea:72:07:fb:a7:bb:93:99:07:ac:
e5:dd:12:e3:b2:58:73:80:cb:4e:07:c0:17:1c:63:63:83:b6:
3f:cc:1a:52:37:50:e6:b5:ca:e1:7d:69:e4:ca:3c:f5:24:07:
f1:ec:b6:94:18:fa:73:c2:0c:f3:97:7d:2b:af:95:28:b2:b4:
74:a4:c3:0d:83:e0:6b:6f:6c:44:93:98:08:de:47:f7:dc:4f:
79:42:49:77:90:26:89:2f:e1:62:c9:fa:77:e1:69:ae:25:ae:
c3:8b:45:bc:17:c5:1b:f0:71:da:15:05:fb:92:b2:fe:2a:89:
8e:6f:10:bb:d7:28:a7:6c:12:26:24:a9:93:cf:32:09:cd:78:
21:c6:dc:83:7f:f5:28:91:49:cb:0e:26:0c:18:b0:f4:e1:27:
f0:61:df:e9:ed:60:d4:0d:eb:1e:70:7b:31:be:e6:6a:29:59:
bd:d9:53:d8:7d:1e:05:01:85:60:cc:6b:fb:b5:16:5e:aa:73:
77:34:36:bb:08:07:ab:0f:c1:8f:40:f2:5e:e7:2f:20:96:c0:
0c:f3:4e:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAhG+rqRUSRwUpcOfsHYW9oiyS4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQwNTBaFw0yNTA2MzAxODQ1NTBaMDMxMTAvBgNV
BAMTKEY1QzQ0MzE1NzVGMDJEMzlEMjQ3MDg2NTA3MzVFN0NBNDFFQkZENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bPHJzTaXQ77mvFnT4GUg2d07
SxqaUNMSzPtf21uxaOViyimbhu2uFO2SMxuYF1G9J1oyRSXpN3NTIZYH8N3jxa7L
pQi6acsFkUVPHeOzsUp5++P97MzKLnZpWXOs5eJYM6n4zRRzu0s2dIDcfWQVk432
VDlcLvO6dkDduG+SsmFOnPueIHdhRjWEny6JDrltcZTLuc+vhXbsrmxc7Dktnqjj
g8g9gs8ZA8pxz0hnT1cQtxXKHZAuTSOZdiEn30hsRZRkrbixZGTMn51lIW5SfMEs
kvNmtQOmy+D8LMMojrZynHnX+blihKfzO82sfcTgjRduAvbKPxp3Lk6smws5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9cRDFXXwLTnSRwhlBzXnykHr/W0wHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzM4MmUzNTM5MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijuVMA0GCSqGSIb3DQEBCwUAA4IBAQANFsjyieph
Aq0IiuGzvWYW/dVqC7mD18XJzkKiN5RyhXiKWfKOuW0ftZrkX+pyB/unu5OZB6zl
3RLjslhzgMtOB8AXHGNjg7Y/zBpSN1DmtcrhfWnkyjz1JAfx7LaUGPpzwgzzl30r
r5UosrR0pMMNg+Brb2xEk5gI3kf33E95Qkl3kCaJL+Fiyfp34WmuJa7Di0W8F8Ub
8HHaFQX7krL+KomObxC71yinbBImJKmTzzIJzXghxtyDf/UokUnLDiYMGLD04Sfw
Yd/p7WDUDesecHsxvuZqKVm92VPYfR4FAYVgzGv7tRZeqnN3NDa7CAerD8GPQPJe
5y8glsAM804D
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:26 2025 by rpki-client