Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
File: 3133382e39392e34302e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier: z/f1UNTKX4vcFtT9wzsOF6SWi37aHiXT46OeDz/ZBro=
Subject key identifier: A2:AE:1F:C6:B7:5C:18:72:CB:54:32:8D:85:A1:40:36:97:E7:A7:FF
Certificate issuer: /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial: 3E67A02A63FDE37F23AD52108E655E27B5D0A44D
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
Signing time: Wed 20 Mar 2024 18:57:29 +0000
ROA not before: Wed 20 Mar 2024 18:52:29 +0000
ROA not after: Wed 19 Mar 2025 18:57:29 +0000
asID: 263086
IP address blocks: 138.99.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:67:a0:2a:63:fd:e3:7f:23:ad:52:10:8e:65:5e:27:b5:d0:a4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Validity
Not Before: Mar 20 18:52:29 2024 GMT
Not After : Mar 19 18:57:29 2025 GMT
Subject: CN=A2AE1FC6B75C1872CB54328D85A1403697E7A7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:4c:a4:1d:b0:03:7f:7a:26:6f:62:59:38:
99:08:45:fc:06:5b:ae:48:4d:c3:e0:0e:fc:f4:24:
25:d6:61:49:da:5b:a0:ac:d4:3b:ff:b9:21:65:38:
15:c9:d8:3f:b7:fa:7e:e9:3b:37:33:80:e5:78:47:
46:6c:83:36:2f:14:71:ef:cf:a3:ff:94:af:a0:55:
88:c8:2d:09:30:cb:43:82:67:f0:e4:19:9e:0d:a3:
a5:3c:5b:c8:cd:45:c0:e3:37:8b:0d:b6:94:ff:14:
ef:ca:00:dc:87:a2:5f:fa:85:66:ea:26:4e:56:0e:
c6:87:ed:25:e9:97:67:6a:74:b2:f8:9a:19:27:fc:
41:60:be:6f:33:de:62:09:60:4d:20:40:ef:c1:24:
72:61:66:2e:69:9b:00:6d:11:b2:e6:73:e3:76:b9:
8f:f2:66:e7:8b:d6:94:f6:3f:25:7a:da:6f:ed:18:
a2:95:59:c0:3d:b3:05:a5:54:2d:d4:a8:e9:fa:e7:
bb:25:7b:eb:ad:41:8a:43:cf:55:b1:28:44:b5:26:
8e:f5:a1:fd:b4:fb:6e:48:b9:97:a9:43:72:83:35:
20:c4:ec:f2:a2:6b:b9:a2:11:31:1c:b8:6a:a6:f0:
47:08:b0:6c:b3:cb:84:b0:9b:55:4f:e8:13:7b:67:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:1F:C6:B7:5C:18:72:CB:54:32:8D:85:A1:40:36:97:E7:A7:FF
X509v3 Authority Key Identifier:
keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32332d3233203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.40.0/23
Signature Algorithm: sha256WithRSAEncryption
37:4c:02:d9:a4:6c:2f:39:f5:3a:07:b1:af:53:37:73:9d:33:
af:16:88:03:48:8e:f2:66:41:30:3e:79:f5:b5:18:28:5d:59:
42:a1:df:77:3d:da:60:dc:be:ab:eb:7f:fc:04:eb:04:1d:0d:
57:1b:ce:10:2b:b4:c9:05:d5:a2:f7:3e:f7:87:81:81:3a:1f:
9a:31:df:b2:26:42:17:63:22:b2:fe:34:70:17:98:be:a7:00:
60:96:17:2a:46:3c:1a:00:ae:0d:41:9b:d7:e9:ba:53:e7:d9:
41:ac:91:d0:e3:b4:23:72:f4:da:6e:59:79:e1:cc:60:81:4d:
39:99:6b:a6:31:93:c4:55:9b:16:70:1d:d4:6e:42:e2:3f:0d:
45:2a:4b:ed:fd:c7:81:b2:c8:b4:60:62:dc:8f:8a:da:d2:80:
53:4d:fd:0c:c6:e1:2b:60:b1:ee:45:9f:00:c2:b1:69:51:6d:
45:27:f6:41:26:8b:3e:92:ca:d0:e1:f2:44:16:86:b9:e6:9e:
a3:e3:28:e5:c4:f4:54:a9:68:3f:ac:06:ee:39:c8:19:25:1f:
2f:10:a4:c1:27:61:6d:d2:ca:a7:58:86:7c:37:7e:24:7c:ed:
d5:7c:a4:22:ac:a3:aa:75:8b:e8:55:05:b1:8c:29:47:65:55:
e8:f1:97:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPmegKmP9438jrVIQjmVeJ7XQpE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYyQ0IyM0EyNEM3QUQzRTVGRDk0M0EzNDcyRTdFNkE5
QzUxNDU0OTAeFw0yNDAzMjAxODUyMjlaFw0yNTAzMTkxODU3MjlaMDMxMTAvBgNV
BAMTKEEyQUUxRkM2Qjc1QzE4NzJDQjU0MzI4RDg1QTE0MDM2OTdFN0E3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsh0ykHbADf3omb2JZOJkIRfwG
W65ITcPgDvz0JCXWYUnaW6Cs1Dv/uSFlOBXJ2D+3+n7pOzczgOV4R0ZsgzYvFHHv
z6P/lK+gVYjILQkwy0OCZ/DkGZ4No6U8W8jNRcDjN4sNtpT/FO/KANyHol/6hWbq
Jk5WDsaH7SXpl2dqdLL4mhkn/EFgvm8z3mIJYE0gQO/BJHJhZi5pmwBtEbLmc+N2
uY/yZueL1pT2PyV62m/tGKKVWcA9swWlVC3UqOn657sle+utQYpDz1WxKES1Jo71
of20+25IuZepQ3KDNSDE7PKia7miETEcuGqm8EcIsGyzy4Swm1VP6BN7Z1cdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoq4fxrdcGHLLVDKNhaFANpfnp/8wHwYDVR0j
BBgwFoAUHyyyOiTHrT5f2UOjRy5+apxRRUkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMC8xRjJDQjIzQTI0QzdBRDNFNUZEOTQzQTM0NzJFN0U2QTlDNTE0NTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGMkNCMjNBMjRDN0FEM0U1
RkQ5NDNBMzQ3MkU3RTZBOUM1MTQ1NDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAv
MzEzMzM4MmUzOTM5MmUzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimMoMA0GCSqGSIb3DQEBCwUAA4IBAQA3TALZpGwv
OfU6B7GvUzdznTOvFogDSI7yZkEwPnn1tRgoXVlCod93Pdpg3L6r63/8BOsEHQ1X
G84QK7TJBdWi9z73h4GBOh+aMd+yJkIXYyKy/jRwF5i+pwBglhcqRjwaAK4NQZvX
6bpT59lBrJHQ47QjcvTabll54cxggU05mWumMZPEVZsWcB3UbkLiPw1FKkvt/ceB
ssi0YGLcj4ra0oBTTf0MxuErYLHuRZ8AwrFpUW1FJ/ZBJos+ksrQ4fJEFoa55p6j
4yjlxPRUqWg/rAbuOcgZJR8vEKTBJ2Ft0sqnWIZ8N34kfO3VfKQirKOqdYvoVQWx
jClHZVXo8ZfP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org