Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
File: 3138392e312e3137362e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: 87+u0lxY+mLreoaWxqt/iMH0yYFzc2/it2m2jWuWTD4=
Subject key identifier: 8F:99:1C:34:36:B0:D1:6F:12:0D:6E:37:ED:DA:F1:FD:C1:3D:FA:6A
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 5C9B1DCEBDC771C7F16ADFDA685DE79B9C32D442
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:10:50 +0000
ROA not before: Fri 03 May 2024 20:05:50 +0000
ROA not after: Fri 02 May 2025 20:10:50 +0000
asID: 28667
IP address blocks: 189.1.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9b:1d:ce:bd:c7:71:c7:f1:6a:df:da:68:5d:e7:9b:9c:32:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:05:50 2024 GMT
Not After : May 2 20:10:50 2025 GMT
Subject: CN=8F991C3436B0D16F120D6E37EDDAF1FDC13DFA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:3b:f9:63:29:1e:9e:74:fb:53:77:9e:a1:
73:bc:56:81:0d:4f:d1:f9:68:ec:e4:a4:24:b4:a5:
21:f3:d8:9e:27:21:dc:14:75:d9:a7:6f:e0:3a:81:
cd:5e:a4:59:0e:d5:f6:d2:14:9f:6b:84:63:73:eb:
a1:12:96:26:47:b4:b6:4f:af:67:8a:bf:a3:a9:c7:
54:e3:35:5e:c5:5a:9e:77:a4:58:39:b3:ad:d2:f1:
0d:d3:ba:26:36:0a:3d:62:ea:6d:ea:c2:b5:e3:77:
bc:42:f3:91:0f:76:92:20:71:b2:52:04:77:9e:e2:
f5:6e:3a:95:9c:f0:10:67:16:ed:f8:aa:ff:1c:6a:
83:8f:19:98:56:65:56:5d:48:24:c5:17:44:03:55:
88:b2:bb:f7:1e:99:8b:10:33:6c:00:01:8f:3e:98:
a2:17:4f:85:76:77:cd:30:5d:9e:f0:03:1f:9e:05:
77:d2:e4:55:cb:a6:ec:dd:6c:ce:94:6f:e1:5b:67:
82:7e:95:63:1e:bf:77:98:7f:1a:cc:fc:a1:ed:4b:
72:ca:25:f8:bc:bf:cb:5a:f5:19:26:3d:87:fd:0b:
3a:1f:53:06:c3:31:55:71:d9:fd:49:49:00:71:17:
eb:07:57:49:54:90:87:b0:cb:ec:6b:28:b5:a8:92:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:1C:34:36:B0:D1:6F:12:0D:6E:37:ED:DA:F1:FD:C1:3D:FA:6A
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:86:07:0b:f9:b0:b9:65:19:c0:36:5f:15:f7:51:3b:24:bc:
56:55:96:01:87:05:4e:cd:43:ff:31:a4:2d:76:8e:8f:b9:72:
b5:34:9a:1c:96:70:8d:e8:33:2f:5d:9c:ef:55:78:e6:e9:0a:
2a:45:e5:6f:26:54:e1:e2:33:ca:87:01:71:f3:b1:2f:e8:1a:
36:01:b4:ed:03:30:f2:20:d9:d8:c5:84:78:76:7a:3d:09:0b:
9d:73:92:54:02:8a:bf:3a:8d:51:4c:5d:46:0e:36:4a:6e:ab:
4c:13:b2:83:30:a3:33:5c:38:d0:71:8f:3c:8c:2d:e3:88:76:
5d:02:bf:84:7e:8f:5d:2f:75:bc:bb:dc:e8:3e:aa:35:a0:e9:
44:7f:de:65:2d:d1:8b:f5:8c:93:34:0e:07:c6:57:da:b6:3c:
0e:cb:3f:01:24:df:9a:b0:8f:46:1f:d3:9a:93:b4:c4:72:2b:
a2:32:f2:21:29:07:08:32:b0:90:69:05:14:5b:2f:14:0a:9e:
f2:b6:43:98:6f:dc:03:6f:98:fd:4f:fc:89:c3:67:da:51:0d:
72:6d:7d:2c:b9:5f:64:d4:91:29:2d:85:d5:72:b3:d6:d6:2a:
68:af:8a:f7:29:04:6e:4f:84:c0:60:55:62:96:db:6a:08:c1:
52:e4:e9:5f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXJsdzr3Hccfxat/aaF3nm5wy1EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjRGRTI4RTBCQjhERkNCMzJGRjI3RkQ3NEVFREVG
MzYzNDJEMzAeFw0yNDA1MDMyMDA1NTBaFw0yNTA1MDIyMDEwNTBaMDMxMTAvBgNV
BAMTKDhGOTkxQzM0MzZCMEQxNkYxMjBENkUzN0VEREFGMUZEQzEzREZBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqzv5YykennT7U3eeoXO8VoEN
T9H5aOzkpCS0pSHz2J4nIdwUddmnb+A6gc1epFkO1fbSFJ9rhGNz66ESliZHtLZP
r2eKv6Opx1TjNV7FWp53pFg5s63S8Q3TuiY2Cj1i6m3qwrXjd7xC85EPdpIgcbJS
BHee4vVuOpWc8BBnFu34qv8caoOPGZhWZVZdSCTFF0QDVYiyu/cemYsQM2wAAY8+
mKIXT4V2d80wXZ7wAx+eBXfS5FXLpuzdbM6Ub+FbZ4J+lWMev3eYfxrM/KHtS3LK
Jfi8v8ta9RkmPYf9CzofUwbDMVVx2f1JSQBxF+sHV0lUkIewy+xrKLWoktUlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUj5kcNDaw0W8SDW437drx/cE9+mowHwYDVR0j
BBgwFoAUnAtP4o4LuN/LMv8n/XTu3vNjQtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMC85QzBCNEZFMjhFMEJCOERGQ0IzMkZGMjdGRDc0RUVERUYzNjM0MkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEI0RkUyOEUwQkI4REZD
QjMyRkYyN0ZENzRFRURFRjM2MzQyRDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzAv
MzEzODM5MmUzMTJlMzEzNzM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0BsDANBgkqhkiG9w0BAQsFAAOCAQEAm4YHC/mwuWUZ
wDZfFfdROyS8VlWWAYcFTs1D/zGkLXaOj7lytTSaHJZwjegzL12c71V45ukKKkXl
byZU4eIzyocBcfOxL+gaNgG07QMw8iDZ2MWEeHZ6PQkLnXOSVAKKvzqNUUxdRg42
Sm6rTBOygzCjM1w40HGPPIwt44h2XQK/hH6PXS91vLvc6D6qNaDpRH/eZS3Ri/WM
kzQOB8ZX2rY8Dss/ASTfmrCPRh/TmpO0xHIrojLyISkHCDKwkGkFFFsvFAqe8rZD
mG/cA2+Y/U/8icNn2lENcm19LLlfZNSRKS2F1XKz1tYqaK+K9ykEbk+EwGBVYpbb
agjBUuTpXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org