Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33362e302f32322d3232203d3e203238323630.roa
File: 3138372e39352e33362e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier: iiJUiEG5atgJilmmyl38023lARHoQTEkViHfcYfL1bE=
Subject key identifier: CA:A1:A3:B0:25:8A:81:6A:53:64:F5:24:AD:4B:6B:98:2B:F5:0C:0D
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 67772E31457CA2F45B2A2A0DAEA843321BC14629
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33362e302f32322d3232203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:43 +0000
ROA not before: Thu 09 Mar 2023 20:12:43 +0000
ROA not after: Thu 07 Mar 2024 20:17:43 +0000
asID: 28260
IP address blocks: 187.95.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:77:2e:31:45:7c:a2:f4:5b:2a:2a:0d:ae:a8:43:32:1b:c1:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:43 2023 GMT
Not After : Mar 7 20:17:43 2024 GMT
Subject: CN=CAA1A3B0258A816A5364F524AD4B6B982BF50C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:37:b0:e2:0f:92:c4:f8:2f:71:6b:97:d6:
57:19:95:39:de:d7:73:89:e5:6c:35:5f:f1:8a:c5:
cc:fd:31:d7:ff:bf:57:5c:a0:c3:7e:8a:a5:5c:67:
ac:4b:b1:4a:45:c9:09:db:ae:50:f7:33:f1:d1:d3:
02:02:c3:77:1e:eb:aa:c8:5d:d9:a2:05:af:14:ce:
72:6e:d7:c8:76:a9:01:a1:bc:e4:f3:40:d7:c8:f9:
70:22:76:ed:cf:0e:96:32:97:61:3e:a5:6c:2a:eb:
64:85:65:88:ec:ac:07:88:20:56:4c:06:c1:13:16:
ba:c2:95:00:a5:0c:c0:51:14:0b:a1:0c:42:1d:d8:
7e:50:05:11:b2:ae:17:0e:7c:7d:fc:20:da:7b:1e:
db:43:7e:54:48:a5:d0:27:17:a2:99:45:29:55:b7:
53:fa:8a:8b:09:d8:b9:9e:3a:41:1d:16:77:9a:58:
a3:fa:19:57:3a:01:0c:65:3f:8e:35:ac:d4:bd:22:
bc:02:bf:76:2c:3f:4f:49:af:cc:38:35:72:a7:29:
ff:72:f5:28:cb:22:42:f9:f6:8c:de:71:19:65:35:
8c:db:6f:cd:ad:04:e5:18:cf:6a:02:1b:19:d9:d9:
6f:66:b8:21:bd:f6:b5:d5:a7:62:26:a3:93:f8:78:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:A3:B0:25:8A:81:6A:53:64:F5:24:AD:4B:6B:98:2B:F5:0C:0D
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33362e302f32322d3232203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:e7:05:46:08:f1:60:7e:74:1e:61:8c:85:ee:e6:68:a6:e7:
91:c9:78:65:47:56:84:85:ee:0f:61:a8:11:e5:32:fb:85:b8:
f7:09:20:39:57:8d:d9:a2:ab:fb:2a:64:1a:c9:ec:1a:0e:1c:
b5:73:b6:ae:96:48:60:bd:c0:62:d9:8a:a9:92:93:8c:4c:6e:
cb:6f:3c:36:c3:55:bf:36:17:ae:d4:7e:94:4c:79:22:1e:43:
a0:52:5e:8c:2f:c6:6f:90:17:55:da:c9:ab:e4:84:57:6c:db:
0f:1d:3d:cf:85:e4:06:2f:d4:46:0a:40:aa:81:8b:f6:55:e4:
70:bf:c8:e0:fd:d6:f5:27:b4:88:12:1a:a8:52:57:db:16:2d:
7f:30:73:eb:10:58:2c:0f:97:bc:e3:6f:ba:12:13:e1:76:92:
5d:81:4e:9f:b3:fb:c6:94:18:e6:35:a4:62:9b:ce:4a:b4:f8:
ce:bf:13:75:c4:75:ed:8f:a9:f9:49:19:7e:3b:20:d7:59:12:
89:b3:64:17:f2:b2:8b:dd:f1:0b:b7:c0:03:56:ba:d2:a4:59:
b0:68:d6:8e:a2:f8:b1:c8:44:b5:86:11:46:54:26:ce:0c:19:
ce:4c:fd:fc:73:c2:79:a6:9b:4b:ff:7c:6d:55:36:a0:d4:77:
1d:87:5b:f8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZ3cuMUV8ovRbKioNrqhDMhvBRikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNDNaFw0yNDAzMDcyMDE3NDNaMDMxMTAvBgNV
BAMTKENBQTFBM0IwMjU4QTgxNkE1MzY0RjUyNEFENEI2Qjk4MkJGNTBDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfTew4g+SxPgvcWuX1lcZlTne
13OJ5Ww1X/GKxcz9Mdf/v1dcoMN+iqVcZ6xLsUpFyQnbrlD3M/HR0wICw3ce66rI
XdmiBa8UznJu18h2qQGhvOTzQNfI+XAidu3PDpYyl2E+pWwq62SFZYjsrAeIIFZM
BsETFrrClQClDMBRFAuhDEId2H5QBRGyrhcOfH38INp7HttDflRIpdAnF6KZRSlV
t1P6iosJ2LmeOkEdFneaWKP6GVc6AQxlP441rNS9IrwCv3YsP09Jr8w4NXKnKf9y
9SjLIkL59ozecRllNYzbb82tBOUYz2oCGxnZ2W9muCG99rXVp2Imo5P4eJKZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyqGjsCWKgWpTZPUkrUtrmCv1DA0wHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM3MmUzOTM1MmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMy
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArtfJDANBgkqhkiG9w0BAQsFAAOCAQEAsecFRgjxYH50
HmGMhe7maKbnkcl4ZUdWhIXuD2GoEeUy+4W49wkgOVeN2aKr+ypkGsnsGg4ctXO2
rpZIYL3AYtmKqZKTjExuy288NsNVvzYXrtR+lEx5Ih5DoFJejC/Gb5AXVdrJq+SE
V2zbDx09z4XkBi/URgpAqoGL9lXkcL/I4P3W9Se0iBIaqFJX2xYtfzBz6xBYLA+X
vONvuhIT4XaSXYFOn7P7xpQY5jWkYpvOSrT4zr8TdcR17Y+p+UkZfjsg11kSibNk
F/Kyi93xC7fAA1a60qRZsGjWjqL4schEtYYRRlQmzgwZzkz9/HPCeaabS/98bVU2
oNR3HYdb+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org