Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3232203d3e20323634303031.roa
File: 3137302e302e32342e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier: 6QzrbTWRLbYViLB2Ao7W5Ull6sXWCtVEuA/DTXUy0wg=
Subject key identifier: B8:81:53:30:E2:9C:EB:4E:9E:BE:31:02:D7:F0:8B:3E:68:7D:33:80
Certificate issuer: /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial: 6693383E104076F4406DA446D8D9EDFBA79508CA
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3232203d3e20323634303031.roa
Signing time: Wed 15 Nov 2023 16:55:29 +0000
ROA not before: Wed 15 Nov 2023 16:50:29 +0000
ROA not after: Wed 13 Nov 2024 16:55:29 +0000
asID: 264001
IP address blocks: 170.0.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:93:38:3e:10:40:76:f4:40:6d:a4:46:d8:d9:ed:fb:a7:95:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Validity
Not Before: Nov 15 16:50:29 2023 GMT
Not After : Nov 13 16:55:29 2024 GMT
Subject: CN=B8815330E29CEB4E9EBE3102D7F08B3E687D3380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:6d:bd:cb:98:e1:22:b1:4c:f0:f7:4c:e2:
df:5c:d5:08:30:47:29:00:ec:59:49:c7:48:47:f4:
9e:5f:94:54:27:76:7c:3c:39:95:05:4e:10:dd:ba:
e0:15:95:e7:01:e2:5e:1a:5d:8a:17:80:a7:78:45:
aa:c5:77:66:df:b8:1f:4b:18:78:7e:23:9a:78:9b:
36:55:ff:5c:a2:19:1c:17:15:40:60:7f:ec:21:76:
6f:1d:e1:ec:60:b5:7a:d0:b9:79:6a:de:20:4b:1f:
e1:0a:f7:dc:ce:be:b9:8f:5c:e9:ef:fe:95:9d:91:
2a:ec:d7:b3:ed:d0:52:b5:bc:d6:1a:47:c7:dd:c7:
bd:67:8f:96:b6:34:ab:71:f9:62:f2:32:32:b1:d9:
6e:13:03:54:98:26:99:8b:48:ea:f3:e8:71:5c:2b:
92:74:3c:62:cc:53:49:c4:86:d9:24:95:b3:c6:2c:
26:1a:e6:17:01:15:24:86:29:cc:9f:c4:00:cb:40:
2f:3e:a9:9c:69:2b:4a:4f:f7:f1:33:9d:9a:62:6e:
40:45:e4:69:98:68:76:48:56:6d:db:3d:3b:10:01:
fb:2c:c6:85:3b:c3:0b:51:aa:74:43:81:f7:e7:d7:
5d:62:26:5e:3a:c3:c4:e8:53:d9:49:48:a3:7c:49:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:53:30:E2:9C:EB:4E:9E:BE:31:02:D7:F0:8B:3E:68:7D:33:80
X509v3 Authority Key Identifier:
keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3232203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.24.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d3:77:a4:1b:56:2c:61:3c:e4:f2:f3:d8:6a:15:8f:ca:59:
bc:70:74:3d:ce:74:69:b2:c4:0b:e6:2f:8f:22:64:8b:d2:56:
2b:91:c9:c9:22:f9:6d:6b:df:4c:22:37:3f:7d:bf:98:55:dd:
52:70:2d:7d:f4:c7:c0:af:44:43:f1:59:0c:ed:5f:85:8f:18:
c5:39:eb:a0:8f:7e:a4:be:af:ca:f6:2e:0b:d0:d1:be:b0:5a:
3f:5f:14:f7:e2:71:c9:95:56:7c:50:d7:cd:4f:d3:04:78:31:
7a:86:b2:ae:e8:0e:6c:87:d4:fa:e8:51:4a:db:27:bc:61:48:
7d:de:a4:41:86:87:cc:ae:1f:89:de:64:f5:cb:e8:fc:2e:f6:
ff:eb:58:69:30:77:2b:84:79:7a:9e:8d:df:f3:ad:bf:e0:28:
9e:68:a9:2d:07:ba:b8:00:c4:5a:f1:f1:76:8e:b4:ac:60:0c:
f0:67:a6:f8:87:06:78:1e:07:aa:f2:ed:91:12:03:7a:ac:45:
0a:e5:79:ec:b2:5f:67:77:3a:d5:cc:b1:35:88:14:32:e3:cf:
51:9f:c7:d5:65:a4:26:c4:32:e5:8b:ee:4a:0e:08:3a:41:79:
02:dd:d2:2a:cb:56:14:32:49:5d:77:25:f7:0f:b1:3e:07:58:
ee:44:db:07
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZpM4PhBAdvRAbaRG2Nnt+6eVCMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEOUMzN0Y1NjE3NjAzMTdEQTc3MERBNkI2RTVFM0ND
NzJBOUZFMTAeFw0yMzExMTUxNjUwMjlaFw0yNDExMTMxNjU1MjlaMDMxMTAvBgNV
BAMTKEI4ODE1MzMwRTI5Q0VCNEU5RUJFMzEwMkQ3RjA4QjNFNjg3RDMzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Nm29y5jhIrFM8PdM4t9c1Qgw
RykA7FlJx0hH9J5flFQndnw8OZUFThDduuAVlecB4l4aXYoXgKd4RarFd2bfuB9L
GHh+I5p4mzZV/1yiGRwXFUBgf+whdm8d4exgtXrQuXlq3iBLH+EK99zOvrmPXOnv
/pWdkSrs17Pt0FK1vNYaR8fdx71nj5a2NKtx+WLyMjKx2W4TA1SYJpmLSOrz6HFc
K5J0PGLMU0nEhtkklbPGLCYa5hcBFSSGKcyfxADLQC8+qZxpK0pP9/EznZpibkBF
5GmYaHZIVm3bPTsQAfssxoU7wwtRqnRDgffn111iJl46w8ToU9lJSKN8SdftAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuIFTMOKc606evjEC1/CLPmh9M4AwHwYDVR0j
BBgwFoAUW9nDf1YXYDF9p3Daa25ePMcqn+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREc5cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlC
OGovMC81QkQ5QzM3RjU2MTc2MDMxN0RBNzcwREE2QjZFNUUzQ0M3MkE5RkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCRDlDMzdGNTYxNzYwMzE3
REE3NzBEQTZCNkU1RTNDQzcyQTlGRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHOXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzAv
MzEzNzMwMmUzMDJlMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDMw
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqoAGDANBgkqhkiG9w0BAQsFAAOCAQEAAtN3pBtWLGE8
5PLz2GoVj8pZvHB0Pc50abLEC+YvjyJki9JWK5HJySL5bWvfTCI3P32/mFXdUnAt
ffTHwK9EQ/FZDO1fhY8YxTnroI9+pL6vyvYuC9DRvrBaP18U9+JxyZVWfFDXzU/T
BHgxeoayrugObIfU+uhRStsnvGFIfd6kQYaHzK4fid5k9cvo/C72/+tYaTB3K4R5
ep6N3/Otv+AonmipLQe6uADEWvHxdo60rGAM8Gem+IcGeB4HqvLtkRIDeqxFCuV5
7LJfZ3c61cyxNYgUMuPPUZ/H1WWkJsQy5YvuSg4IOkF5At3SKstWFDJJXXcl9w+x
PgdY7kTbBw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:25 2025 by rpki-client