Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
File: 3133382e39392e34322e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier: +Pg1QmsfYukYCCWHBcfcWzRIVrPBzAIviofaA8puxHk=
Subject key identifier: C4:DD:F4:3A:68:15:2A:DC:D9:99:EA:30:91:87:DF:A7:3C:F9:D5:2D
Certificate issuer: /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial: 6CD5D6F412F761B1E36C0DEC05F1F905F5916671
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
Signing time: Wed 20 Mar 2024 18:57:29 +0000
ROA not before: Wed 20 Mar 2024 18:52:29 +0000
ROA not after: Wed 19 Mar 2025 18:57:29 +0000
asID: 263086
IP address blocks: 138.99.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d5:d6:f4:12:f7:61:b1:e3:6c:0d:ec:05:f1:f9:05:f5:91:66:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Validity
Not Before: Mar 20 18:52:29 2024 GMT
Not After : Mar 19 18:57:29 2025 GMT
Subject: CN=C4DDF43A68152ADCD999EA309187DFA73CF9D52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:d7:5a:f8:e1:f3:c6:28:a1:88:36:b0:5c:
99:b8:79:e5:6d:d4:05:2a:ff:27:98:32:0b:6e:45:
65:6c:e7:06:87:ec:bc:68:55:b5:19:e5:7a:24:d8:
38:29:83:de:91:e0:78:76:91:bc:fa:28:39:ef:87:
79:db:c8:f1:90:cb:30:0b:c2:48:55:ce:b6:8e:9f:
02:8c:05:e1:8f:72:c0:84:6e:a3:51:2f:9b:06:ff:
fb:99:1b:d9:c2:b0:7b:37:3e:28:78:ba:7f:42:b5:
72:11:00:08:ed:f9:4e:09:62:69:f3:ce:9d:da:d1:
1e:f1:89:0b:42:a0:ad:51:b1:22:6b:2a:cb:dd:db:
bb:02:d2:70:b0:ed:5d:a1:1f:26:21:fc:77:92:9a:
dc:ef:90:0d:22:4a:f6:56:02:e7:d2:b6:61:56:c7:
1b:7c:51:ea:c4:b7:c6:b1:af:33:89:b0:c0:ba:b0:
ce:0c:75:60:b5:96:89:2e:3d:ca:c8:2e:1f:d5:72:
ae:ba:56:8c:91:6d:e7:09:64:4b:83:9d:4d:61:8a:
a5:f6:3e:83:f2:4f:5b:ad:5b:79:13:08:6f:25:ff:
3d:06:37:73:16:27:99:b2:4a:a1:e3:52:fe:0e:f3:
09:4f:9a:57:16:07:49:35:91:d1:ca:12:96:65:74:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:F4:3A:68:15:2A:DC:D9:99:EA:30:91:87:DF:A7:3C:F9:D5:2D
X509v3 Authority Key Identifier:
keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32332d3233203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.42.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1a:c7:6d:71:5a:98:a6:d2:df:b8:88:ae:ad:ab:95:6b:f8:
d0:26:78:59:63:52:e5:1a:42:e4:ee:9b:eb:ed:40:6d:ab:47:
43:79:b0:13:dd:d7:bb:f4:b3:c9:36:e9:f3:c9:6a:e1:7d:9f:
9e:24:5f:1d:b8:e3:62:42:9d:06:84:d0:fd:23:4c:86:bc:1b:
d9:ce:4f:fc:b7:51:ca:a2:f2:d4:07:ac:96:e8:b1:31:ef:eb:
48:5c:da:33:77:06:6a:0f:62:5f:a1:80:68:0d:38:93:97:96:
cd:ab:8c:bf:57:a1:37:12:1f:5d:e6:41:bb:c8:6d:6e:c6:87:
ab:10:7b:cf:cc:d0:c4:61:3a:52:0a:93:3d:08:2c:ed:b1:cb:
71:4f:63:36:eb:02:6e:3e:c1:d4:fa:f9:4d:f6:69:a7:c3:43:
15:8b:fa:b6:35:39:88:10:22:2d:02:b7:02:19:bc:2c:fb:e2:
53:0b:02:91:7b:3a:a4:8c:83:4c:f9:48:4e:8a:92:18:f0:99:
a9:fc:53:7d:bd:75:8f:bb:2a:b9:d2:3d:c7:2b:6d:34:76:55:
d3:b0:71:c0:d2:87:e5:e7:9b:e0:2a:79:1e:b7:4e:34:e4:ea:
64:b1:3f:94:c4:ed:8a:3c:cf:7f:dd:2c:35:67:ee:c6:cc:fd:
5e:cd:c1:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbNXW9BL3YbHjbA3sBfH5BfWRZnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYyQ0IyM0EyNEM3QUQzRTVGRDk0M0EzNDcyRTdFNkE5
QzUxNDU0OTAeFw0yNDAzMjAxODUyMjlaFw0yNTAzMTkxODU3MjlaMDMxMTAvBgNV
BAMTKEM0RERGNDNBNjgxNTJBRENEOTk5RUEzMDkxODdERkE3M0NGOUQ1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKdda+OHzxiihiDawXJm4eeVt
1AUq/yeYMgtuRWVs5waH7LxoVbUZ5Xok2Dgpg96R4Hh2kbz6KDnvh3nbyPGQyzAL
wkhVzraOnwKMBeGPcsCEbqNRL5sG//uZG9nCsHs3Pih4un9CtXIRAAjt+U4JYmnz
zp3a0R7xiQtCoK1RsSJrKsvd27sC0nCw7V2hHyYh/HeSmtzvkA0iSvZWAufStmFW
xxt8UerEt8axrzOJsMC6sM4MdWC1lokuPcrILh/Vcq66VoyRbecJZEuDnU1hiqX2
PoPyT1utW3kTCG8l/z0GN3MWJ5mySqHjUv4O8wlPmlcWB0k1kdHKEpZldLYfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxN30OmgVKtzZmeowkYffpzz51S0wHwYDVR0j
BBgwFoAUHyyyOiTHrT5f2UOjRy5+apxRRUkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMC8xRjJDQjIzQTI0QzdBRDNFNUZEOTQzQTM0NzJFN0U2QTlDNTE0NTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGMkNCMjNBMjRDN0FEM0U1
RkQ5NDNBMzQ3MkU3RTZBOUM1MTQ1NDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAv
MzEzMzM4MmUzOTM5MmUzNDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimMqMA0GCSqGSIb3DQEBCwUAA4IBAQCrGsdtcVqY
ptLfuIiurauVa/jQJnhZY1LlGkLk7pvr7UBtq0dDebAT3de79LPJNunzyWrhfZ+e
JF8duONiQp0GhND9I0yGvBvZzk/8t1HKovLUB6yW6LEx7+tIXNozdwZqD2JfoYBo
DTiTl5bNq4y/V6E3Eh9d5kG7yG1uxoerEHvPzNDEYTpSCpM9CCztsctxT2M26wJu
PsHU+vlN9mmnw0MVi/q2NTmIECItArcCGbws++JTCwKRezqkjINM+UhOipIY8Jmp
/FN9vXWPuyq50j3HK200dlXTsHHA0ofl55vgKnket0405OpksT+UxO2KPM9/3Sw1
Z+7GzP1ezcHa
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:48 2025 by rpki-client