Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3332203d3e20323634333836.roa
File: 3133312e3130382e3137322e302f32322d3332203d3e20323634333836.roa (raw, json)
Hash identifier: qTLQ2cmEYcfJISVeMxZEB8emfCrqWamTMg/Utpa1U3Y=
Subject key identifier: B6:70:CC:78:DF:97:7D:29:4C:95:2B:CA:49:B7:2E:71:DF:BF:21:A1
Certificate issuer: /CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
Certificate serial: 2AB3C1A5026891B6CA47C6312412382A33D8624C
Authority key identifier: 14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3332203d3e20323634333836.roa
Signing time: Tue 09 Jan 2024 12:24:13 +0000
ROA not before: Tue 09 Jan 2024 12:19:13 +0000
ROA not after: Tue 07 Jan 2025 12:24:13 +0000
asID: 264386
IP address blocks: 131.108.172.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b3:c1:a5:02:68:91:b6:ca:47:c6:31:24:12:38:2a:33:d8:62:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
Validity
Not Before: Jan 9 12:19:13 2024 GMT
Not After : Jan 7 12:24:13 2025 GMT
Subject: CN=B670CC78DF977D294C952BCA49B72E71DFBF21A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:78:96:d6:bd:0c:ec:2a:cf:33:ee:fe:f3:
fa:05:c1:73:8f:6c:20:82:48:70:90:b4:42:90:de:
81:dc:ce:c1:f9:65:26:04:14:d7:b5:cb:39:76:71:
77:48:8a:5f:71:b9:98:6d:29:67:e0:63:fe:4e:5e:
d6:a0:a4:51:24:c3:23:96:78:d1:a6:5e:4f:62:e2:
f4:00:be:4b:e0:b9:23:7c:c4:cb:85:2d:b0:28:90:
eb:9a:75:d4:c2:f9:f6:e6:b6:ea:27:76:11:04:b1:
36:f1:81:5f:c1:2f:df:61:bd:c6:b4:a9:a0:d2:f6:
5e:48:f0:07:7f:43:3a:86:21:d2:34:26:e1:0d:14:
64:56:5e:ad:ce:7e:57:49:0e:c3:5b:cc:e9:12:09:
4d:5c:03:79:dd:cc:a6:37:f3:4d:da:8d:5a:51:ec:
de:86:d6:c7:cf:6f:56:9a:63:42:2b:f9:ec:25:e0:
97:0b:f3:52:32:8d:bd:e7:fb:a1:b0:2a:81:d1:a2:
e5:af:8f:7e:60:04:02:9a:08:29:30:56:88:11:f8:
14:56:7c:10:49:4a:24:92:ea:ce:7c:b1:77:89:fd:
62:17:da:da:49:c6:d8:14:7e:3e:a0:64:d7:3a:47:
7e:68:1f:ba:15:44:48:00:d6:17:98:b3:52:ca:de:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:CC:78:DF:97:7D:29:4C:95:2B:CA:49:B7:2E:71:DF:BF:21:A1
X509v3 Authority Key Identifier:
keyid:14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3332203d3e20323634333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d5:70:db:be:c7:a5:63:7b:41:e7:ef:cc:16:ca:a8:79:97:
04:2f:fe:b3:a7:ef:ff:b5:1b:c6:67:01:fa:23:6b:82:8d:5b:
d4:f6:a6:9b:80:08:07:ce:3a:7d:59:f1:5c:36:73:79:f4:ec:
df:71:67:0b:b2:39:b1:65:a4:a7:e6:0a:db:cd:6a:26:3c:d0:
de:be:a9:9d:ee:d4:28:3c:1c:93:31:d6:0b:13:a4:5e:ac:99:
b6:8a:43:52:1a:16:53:27:7f:2a:24:97:00:e5:d2:07:30:55:
65:f1:1d:39:7b:09:bb:a9:76:3a:0c:fb:78:80:08:0d:ed:23:
3d:5c:48:4d:5e:d2:02:19:ad:4e:ae:34:7b:a9:e2:c2:ab:fa:
79:59:29:8d:f9:d3:17:9f:1a:0c:81:1c:5f:c4:29:8e:70:dc:
8a:93:54:e2:6a:7e:1f:20:67:6c:3b:9d:4f:cf:89:b0:98:82:
d0:5e:4a:cf:1f:87:37:10:75:72:ac:11:6a:ad:ac:26:b7:5e:
b5:45:e9:e0:98:8c:5d:51:3d:f3:c5:6e:3a:ae:d7:ff:dd:29:
99:55:fc:13:d2:56:99:dd:b7:9c:5b:e4:36:65:22:8e:fa:b7:
44:94:5a:08:d9:ea:0b:3f:9b:f7:db:ca:4f:55:81:ea:fc:54:
a5:ae:5c:c9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKrPBpQJokbbKR8YxJBI4KjPYYkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRBRjhENzMyNUM5RTM0OTM3NTc1RUU1NDg4RjJBRDNB
OTVGMDQ4QjAeFw0yNDAxMDkxMjE5MTNaFw0yNTAxMDcxMjI0MTNaMDMxMTAvBgNV
BAMTKEI2NzBDQzc4REY5NzdEMjk0Qzk1MkJDQTQ5QjcyRTcxREZCRjIxQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XniW1r0M7CrPM+7+8/oFwXOP
bCCCSHCQtEKQ3oHczsH5ZSYEFNe1yzl2cXdIil9xuZhtKWfgY/5OXtagpFEkwyOW
eNGmXk9i4vQAvkvguSN8xMuFLbAokOuaddTC+fbmtuondhEEsTbxgV/BL99hvca0
qaDS9l5I8Ad/QzqGIdI0JuENFGRWXq3OfldJDsNbzOkSCU1cA3ndzKY3803ajVpR
7N6G1sfPb1aaY0Ir+ewl4JcL81Iyjb3n+6GwKoHRouWvj35gBAKaCCkwVogR+BRW
fBBJSiSS6s58sXeJ/WIX2tpJxtgUfj6gZNc6R35oH7oVREgA1heYs1LK3tXFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtnDMeN+XfSlMlSvKSbcucd+/IaEwHwYDVR0j
BBgwFoAUFK+NcyXJ40k3V17lSI8q06lfBIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC8xNEFGOEQ3MzI1QzlFMzQ5Mzc1NzVFRTU0ODhGMkFEM0E5NUYwNDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0QUY4RDczMjVDOUUzNDkz
NzU3NUVFNTQ4OEYyQUQzQTk1RjA0OEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMzMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsrDANBgkqhkiG9w0BAQsFAAOCAQEAKtVw
277HpWN7QefvzBbKqHmXBC/+s6fv/7UbxmcB+iNrgo1b1Pamm4AIB846fVnxXDZz
efTs33FnC7I5sWWkp+YK281qJjzQ3r6pne7UKDwckzHWCxOkXqyZtopDUhoWUyd/
KiSXAOXSBzBVZfEdOXsJu6l2Ogz7eIAIDe0jPVxITV7SAhmtTq40e6niwqv6eVkp
jfnTF58aDIEcX8QpjnDcipNU4mp+HyBnbDudT8+JsJiC0F5Kzx+HNxB1cqwRaq2s
JrdetUXp4JiMXVE988VuOq7X/90pmVX8E9JWmd23nFvkNmUijvq3RJRaCNnqCz+b
99vKT1WB6vxUpa5cyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org