Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa
File: 3133382e33362e38342e302f32322d3234203d3e20323634313933.roa (raw, json)
Hash identifier: LeSKbP2siP69ufcy//dV+fEIOjcpaAlEjwad79hlYeY=
Subject key identifier: F7:89:9F:23:9A:7C:46:3F:B3:1D:C4:A5:C9:BB:5C:40:82:19:E2:E3
Certificate issuer: /CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Certificate serial: 3DC77E8F921887AEBCE779312673B98A8D3CECF4
Authority key identifier: DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa
Signing time: Wed 14 Feb 2024 20:29:07 +0000
ROA not before: Wed 14 Feb 2024 20:24:07 +0000
ROA not after: Wed 12 Feb 2025 20:29:07 +0000
asID: 264193
IP address blocks: 138.36.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c7:7e:8f:92:18:87:ae:bc:e7:79:31:26:73:b9:8a:8d:3c:ec:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Validity
Not Before: Feb 14 20:24:07 2024 GMT
Not After : Feb 12 20:29:07 2025 GMT
Subject: CN=F7899F239A7C463FB31DC4A5C9BB5C408219E2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:90:3b:82:ae:3d:2a:ed:30:f7:d3:21:87:
8f:46:a8:a1:18:86:2e:f9:59:0d:70:b8:3e:a4:28:
c0:26:ec:9b:31:d1:24:06:08:93:65:4f:fc:f5:1d:
8e:c7:d8:55:0a:f5:37:8d:8d:62:b5:41:fe:67:29:
d8:a9:aa:ca:1b:b6:59:ae:47:6f:77:f8:49:fd:e5:
91:36:16:48:3c:94:43:20:b9:75:dc:fc:3f:51:2f:
59:ed:27:be:2d:d9:f4:f6:c7:fb:d0:b4:40:f3:97:
c2:43:01:1f:e7:1c:5c:51:34:10:b3:98:c9:40:56:
d8:6b:b7:cf:33:0e:7a:4a:18:87:9e:62:05:b7:fe:
a6:ee:03:62:f5:36:46:9f:85:36:70:a5:c8:8e:4c:
96:fb:b7:97:81:7b:a0:86:36:8d:3b:3b:c0:c8:1c:
95:b0:62:b5:b9:6b:b9:54:f5:b2:f2:17:3f:1e:b6:
95:49:f6:86:86:9e:16:5b:74:9d:cc:16:67:31:30:
ca:8b:f8:8f:c0:f9:cc:28:e8:23:68:35:9a:85:09:
d1:9c:27:c1:14:ed:9d:0b:15:cb:0d:f3:e4:e7:29:
f5:cc:da:fb:75:75:76:e2:13:37:ec:a0:2e:cb:25:
78:0c:9a:f7:28:f2:83:15:e9:4b:b2:c4:fd:78:f2:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:9F:23:9A:7C:46:3F:B3:1D:C4:A5:C9:BB:5C:40:82:19:E2:E3
X509v3 Authority Key Identifier:
keyid:DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:0d:e7:7d:04:61:16:0a:4b:0f:e9:22:d2:63:3c:9c:e6:fb:
c6:57:31:14:2c:8f:08:6e:65:28:9e:74:73:6d:75:36:28:89:
5f:9d:7a:af:37:41:2c:1b:8b:09:8a:8a:45:ad:48:a7:8c:3d:
27:a6:cd:aa:e5:0e:94:81:d0:32:5b:88:62:5c:e4:8c:9c:ab:
9e:b3:11:c0:51:7d:fb:81:8b:60:38:42:47:93:a0:8a:c7:e2:
5b:b4:19:72:a6:90:f0:df:a0:0f:a4:9d:7c:36:ce:9d:f5:81:
bb:e8:83:fd:ec:5e:44:b2:0b:45:21:28:1c:ae:2a:1b:69:f4:
30:d0:ff:27:42:3c:c4:2f:9c:43:3b:e9:dd:79:b8:f0:ee:db:
58:5d:90:17:58:ee:a5:33:9f:84:d1:3e:1b:73:31:63:c7:93:
7e:d0:14:4b:bb:d7:5c:3f:99:90:a5:58:0c:47:56:15:94:4e:
8f:91:67:b0:89:67:29:55:7a:69:b5:c4:55:2d:73:3e:d6:1f:
67:cf:1c:85:57:97:c2:18:a4:75:9e:71:f6:08:0a:23:30:1e:
71:57:54:cd:55:ac:e7:49:b7:47:b1:4a:2f:cd:72:61:42:23:
aa:ea:dc:31:17:23:4e:41:b3:b4:22:4e:9f:d7:80:6e:aa:07:
f4:46:d8:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPcd+j5IYh66853kxJnO5io087PQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxM0E2QzRBRTY4QjkwMkNGNjQ3QzkxNTQ3Qjg4RUY5
RTJCNjczODAeFw0yNDAyMTQyMDI0MDdaFw0yNTAyMTIyMDI5MDdaMDMxMTAvBgNV
BAMTKEY3ODk5RjIzOUE3QzQ2M0ZCMzFEQzRBNUM5QkI1QzQwODIxOUUyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsZA7gq49Ku0w99Mhh49GqKEY
hi75WQ1wuD6kKMAm7Jsx0SQGCJNlT/z1HY7H2FUK9TeNjWK1Qf5nKdipqsobtlmu
R293+En95ZE2Fkg8lEMguXXc/D9RL1ntJ74t2fT2x/vQtEDzl8JDAR/nHFxRNBCz
mMlAVthrt88zDnpKGIeeYgW3/qbuA2L1NkafhTZwpciOTJb7t5eBe6CGNo07O8DI
HJWwYrW5a7lU9bLyFz8etpVJ9oaGnhZbdJ3MFmcxMMqL+I/A+cwo6CNoNZqFCdGc
J8EU7Z0LFcsN8+TnKfXM2vt1dXbiEzfsoC7LJXgMmvco8oMV6UuyxP148lVrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU94mfI5p8Rj+zHcSlybtcQIIZ4uMwHwYDVR0j
BBgwFoAU3BOmxK5ouQLPZHyRVHuI754rZzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZTZ3FycUN3Snp2b0VSelYxdHlMWWJ1ZFhWRVNFNDFyTXVYUkVRWDJK
RlEvMC9EQzEzQTZDNEFFNjhCOTAyQ0Y2NDdDOTE1NDdCODhFRjlFMkI2NzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMTNBNkM0QUU2OEI5MDJD
RjY0N0M5MTU0N0I4OEVGOUUyQjY3MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGU2dxcnFDd0p6dm9FUnpWMXR5TFlidWRYVkVTRTQxck11WFJFUVgySkZRLzAv
MzEzMzM4MmUzMzM2MmUzODM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCiiRUMA0GCSqGSIb3DQEBCwUAA4IBAQCmDed9BGEW
CksP6SLSYzyc5vvGVzEULI8IbmUonnRzbXU2KIlfnXqvN0EsG4sJiopFrUinjD0n
ps2q5Q6UgdAyW4hiXOSMnKuesxHAUX37gYtgOEJHk6CKx+JbtBlyppDw36APpJ18
Ns6d9YG76IP97F5EsgtFISgcriobafQw0P8nQjzEL5xDO+ndebjw7ttYXZAXWO6l
M5+E0T4bczFjx5N+0BRLu9dcP5mQpVgMR1YVlE6PkWewiWcpVXpptcRVLXM+1h9n
zxyFV5fCGKR1nnH2CAojMB5xV1TNVaznSbdHsUovzXJhQiOq6twxFyNOQbO0Ik6f
14Buqgf0RtgO
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:22:59 2025 by rpki-client