Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa
File: 3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (raw, json)
Hash identifier: s1aZkdlcuZ0+5XZcl7MepcvFTzzYW9rROrweW9ljRvc=
Subject key identifier: D8:4F:0C:0A:3D:EA:BB:D8:2D:10:94:96:D4:AF:72:0C:62:12:33:84
Certificate issuer: /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial: 792070CB48AFB56096D1A13BF109AC7A2430FE06
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa
Signing time: Wed 20 Mar 2024 07:10:20 +0000
ROA not before: Wed 20 Mar 2024 07:05:20 +0000
ROA not after: Wed 19 Mar 2025 07:10:20 +0000
asID: 270910
IP address blocks: 138.121.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:20:70:cb:48:af:b5:60:96:d1:a1:3b:f1:09:ac:7a:24:30:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Validity
Not Before: Mar 20 07:05:20 2024 GMT
Not After : Mar 19 07:10:20 2025 GMT
Subject: CN=D84F0C0A3DEABBD82D109496D4AF720C62123384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:9a:88:d5:17:76:87:47:65:52:eb:d1:04:
e0:cc:94:aa:49:04:3c:32:01:29:fb:ac:fe:7e:da:
97:fc:9f:e5:18:64:6f:bb:fc:a1:29:86:46:60:d4:
85:40:6a:10:d5:1c:03:59:0e:1a:51:a7:fd:eb:6f:
5c:95:71:69:7c:9e:f7:46:b5:5e:c3:2a:77:7a:ab:
b5:14:ef:1a:64:13:56:bc:78:61:5f:64:22:1b:73:
94:ea:39:fd:1f:b6:fd:ef:a8:f8:45:48:e4:1b:32:
fa:01:a4:cd:a5:8e:1a:28:5f:1b:9f:99:d8:11:98:
8e:dc:94:c5:fe:b6:4e:51:cf:aa:1f:58:46:05:e5:
ca:88:1e:ca:87:34:b3:4b:c9:c2:00:0b:14:bd:5a:
f7:35:73:87:f9:ee:db:bd:1e:06:6f:81:a8:ed:df:
9d:4b:d8:85:fd:80:17:b2:55:6b:38:8c:32:56:6e:
c6:80:25:81:97:15:b9:e4:3f:3e:f4:ad:eb:4c:03:
c4:9e:c6:97:44:74:e3:bd:a8:fe:f7:a2:d0:e3:aa:
fd:05:81:87:cf:c1:67:4e:9f:d3:e9:4a:e0:bd:01:
ec:df:37:f4:5e:b2:af:3f:01:08:c9:8a:22:db:5d:
2f:90:b3:ac:5d:f9:a7:ac:f0:43:86:54:2b:bd:21:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4F:0C:0A:3D:EA:BB:D8:2D:10:94:96:D4:AF:72:0C:62:12:33:84
X509v3 Authority Key Identifier:
keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.166.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:2f:fa:5e:2c:9f:10:d9:40:6a:19:23:e6:3b:9f:52:37:05:
8d:22:bc:91:38:e2:20:71:44:9e:59:0b:39:05:a2:eb:c5:7d:
bb:1f:c7:ae:46:85:ee:c5:0b:65:0a:b3:4d:aa:ff:ac:dc:10:
4b:d5:f5:23:33:11:21:81:30:ab:4d:ae:ef:c1:f1:d1:45:bc:
97:3e:36:01:d0:2d:68:11:ff:ab:ac:0f:c7:f7:69:83:a7:d9:
ff:f9:ba:48:dd:ba:1d:cb:19:b9:fe:3b:0a:1f:18:e4:2c:9e:
a9:be:7b:a8:cc:7e:81:1e:2c:c0:55:0d:e8:83:ba:cb:90:72:
59:14:d8:89:76:c1:bb:1e:a3:83:f5:26:6a:a5:ed:a9:7e:22:
1a:a6:fa:30:63:02:e7:bf:7c:07:74:06:7b:0c:e1:c2:8f:ac:
fd:1d:ee:eb:98:cf:25:c6:1e:5e:8b:b1:07:e4:c9:a6:c5:40:
a6:76:49:1a:4b:74:5e:e9:24:17:ce:f7:da:b7:35:fa:a5:f0:
5d:ef:9f:08:2f:a4:ca:a5:08:80:23:0e:41:be:07:03:42:9f:
b8:6c:5f:e4:a3:05:5a:d1:81:c9:00:85:73:d1:4f:d8:d5:69:
98:75:3a:8f:f8:90:8f:bd:e7:f0:ce:6d:47:1c:0c:3a:8c:b9:
ed:93:96:9c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeSBwy0ivtWCW0aE78QmseiQw/gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEyOTA4NDhDQjQ4QjIzNjZENkY4NzhDNEEyMTI2RUJB
NTgxRkRFQzAeFw0yNDAzMjAwNzA1MjBaFw0yNTAzMTkwNzEwMjBaMDMxMTAvBgNV
BAMTKEQ4NEYwQzBBM0RFQUJCRDgyRDEwOTQ5NkQ0QUY3MjBDNjIxMjMzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOJqI1Rd2h0dlUuvRBODMlKpJ
BDwyASn7rP5+2pf8n+UYZG+7/KEphkZg1IVAahDVHANZDhpRp/3rb1yVcWl8nvdG
tV7DKnd6q7UU7xpkE1a8eGFfZCIbc5TqOf0ftv3vqPhFSOQbMvoBpM2ljhooXxuf
mdgRmI7clMX+tk5Rz6ofWEYF5cqIHsqHNLNLycIACxS9Wvc1c4f57tu9HgZvgajt
351L2IX9gBeyVWs4jDJWbsaAJYGXFbnkPz70retMA8SexpdEdOO9qP73otDjqv0F
gYfPwWdOn9PpSuC9AezfN/Resq8/AQjJiiLbXS+Qs6xd+aes8EOGVCu9IeElAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2E8MCj3qu9gtEJSW1K9yDGISM4QwHwYDVR0j
BBgwFoAUGikISMtIsjZtb4eMSiEm66WB/ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMC8xQTI5MDg0OENCNDhCMjM2NkQ2Rjg3OEM0QTIxMjZFQkE1ODFGREVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMjkwODQ4Q0I0OEIyMzY2
RDZGODc4QzRBMjEyNkVCQTU4MUZERUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5pjANBgkqhkiG9w0BAQsFAAOCAQEAni/6
XiyfENlAahkj5jufUjcFjSK8kTjiIHFEnlkLOQWi68V9ux/HrkaF7sULZQqzTar/
rNwQS9X1IzMRIYEwq02u78Hx0UW8lz42AdAtaBH/q6wPx/dpg6fZ//m6SN26HcsZ
uf47Ch8Y5Cyeqb57qMx+gR4swFUN6IO6y5ByWRTYiXbBux6jg/UmaqXtqX4iGqb6
MGMC5798B3QGewzhwo+s/R3u65jPJcYeXouxB+TJpsVApnZJGkt0XukkF8732rc1
+qXwXe+fCC+kyqUIgCMOQb4HA0KfuGxf5KMFWtGByQCFc9FP2NVpmHU6j/iQj73n
8M5tRxwMOoy57ZOWnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org