Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
File: 3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier: ZGdRMETrNonPgcqr+sJ/HpPYCt2oC+fv3j2VNbJhGVo=
Subject key identifier: BD:AA:52:E8:38:A8:1B:8B:5B:3C:AB:2C:9D:5B:68:90:AF:DF:4B:E5
Certificate issuer: /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial: 632DD314463C8F66894C73A957C43DCDE3411039
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
Signing time: Thu 07 Dec 2023 19:14:39 +0000
ROA not before: Thu 07 Dec 2023 19:09:39 +0000
ROA not after: Thu 05 Dec 2024 19:14:39 +0000
asID: 266312
IP address blocks: 170.238.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:d3:14:46:3c:8f:66:89:4c:73:a9:57:c4:3d:cd:e3:41:10:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Validity
Not Before: Dec 7 19:09:39 2023 GMT
Not After : Dec 5 19:14:39 2024 GMT
Subject: CN=BDAA52E838A81B8B5B3CAB2C9D5B6890AFDF4BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:d8:5c:ae:5b:db:c4:82:c7:ef:28:e7:85:
57:bf:73:7e:d2:d8:74:6d:7b:0c:3b:0e:53:b6:4d:
ec:6b:aa:42:de:e0:cd:85:ed:e0:7f:69:28:db:58:
3c:57:1f:fa:c8:8f:31:5c:7d:94:cc:93:4f:94:6c:
1e:73:c3:18:cc:d9:36:e2:3e:22:ff:42:7e:05:66:
99:5d:f4:c1:f2:38:04:69:06:8d:d2:c6:b8:43:16:
70:d8:c1:ff:50:aa:24:2b:98:30:2d:3f:4f:cd:7f:
93:69:5d:e4:0f:81:ce:8e:f0:9d:43:c7:4c:8d:16:
24:c2:b2:28:38:ea:97:2e:f1:b7:95:6a:8e:44:26:
e1:0b:d6:50:00:28:b0:f2:8d:bc:47:38:fc:89:48:
06:56:60:7e:d2:59:56:19:99:c2:28:1f:27:6e:1d:
4f:a7:7c:f5:fb:65:bf:f5:cb:a6:20:77:f8:a9:23:
9a:38:40:b9:6c:67:f4:7c:05:83:11:61:bf:0b:ca:
d0:4f:f7:9d:64:93:b8:39:2a:82:e7:ee:44:63:67:
d3:66:8a:cb:47:25:75:70:33:0d:13:a7:99:1f:07:
df:f0:50:68:71:15:65:2f:4a:3a:ae:ca:fd:29:2b:
d0:cd:63:fd:8a:6d:16:c2:08:ff:49:3e:90:04:05:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:52:E8:38:A8:1B:8B:5B:3C:AB:2C:9D:5B:68:90:AF:DF:4B:E5
X509v3 Authority Key Identifier:
keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.56.0/22
Signature Algorithm: sha256WithRSAEncryption
03:68:a5:8c:8d:78:ca:e0:f5:a0:af:0c:84:ae:9d:13:27:a0:
05:e9:4a:0c:d8:2b:79:e3:ff:ec:82:b8:27:7a:c3:94:18:6e:
38:6c:f3:d9:bf:6a:57:bb:f8:48:17:52:5f:7c:ad:f0:34:88:
1c:7f:b3:f2:bd:3d:c9:2d:e8:20:82:60:5a:8e:eb:00:1c:57:
26:97:d9:4e:ab:76:0e:20:ff:eb:40:fa:aa:5b:f1:03:ac:d2:
f2:e3:86:02:d0:0e:96:62:3f:a8:ca:26:cc:a3:21:63:f8:bc:
ea:ec:5f:58:c4:d1:bb:49:7f:41:5c:98:f9:e3:91:7a:d3:dd:
37:9c:76:5e:74:eb:9c:cc:f6:55:15:f1:02:72:f1:c9:ac:9d:
c2:0b:19:a9:e7:fb:cc:86:e0:da:97:6d:c7:93:90:39:2c:60:
2a:9f:61:57:86:25:34:e0:1c:15:29:ed:81:51:20:e0:9a:55:
53:1f:e7:f9:65:ab:64:ab:af:a2:33:dc:14:ab:4d:d9:c1:cf:
9e:47:ca:df:2a:ed:7b:2a:86:bc:d6:94:dd:05:0f:82:01:7c:
2f:4e:7f:dc:db:a2:0e:a2:ac:b9:21:c1:3f:19:34:d5:68:65:
f4:b3:3d:28:75:5f:af:45:2c:33:93:f7:f3:ec:76:4a:3e:93:
fb:58:ab:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYy3TFEY8j2aJTHOpV8Q9zeNBEDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQyNTYyMEFFNzQwREZDRDlGNjdFOTk0MUE2RjlERjA4
OTM4QjUwMTAeFw0yMzEyMDcxOTA5MzlaFw0yNDEyMDUxOTE0MzlaMDMxMTAvBgNV
BAMTKEJEQUE1MkU4MzhBODFCOEI1QjNDQUIyQzlENUI2ODkwQUZERjRCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4thcrlvbxILH7yjnhVe/c37S
2HRteww7DlO2TexrqkLe4M2F7eB/aSjbWDxXH/rIjzFcfZTMk0+UbB5zwxjM2Tbi
PiL/Qn4FZpld9MHyOARpBo3SxrhDFnDYwf9QqiQrmDAtP0/Nf5NpXeQPgc6O8J1D
x0yNFiTCsig46pcu8beVao5EJuEL1lAAKLDyjbxHOPyJSAZWYH7SWVYZmcIoHydu
HU+nfPX7Zb/1y6Ygd/ipI5o4QLlsZ/R8BYMRYb8LytBP951kk7g5KoLn7kRjZ9Nm
istHJXVwMw0Tp5kfB9/wUGhxFWUvSjquyv0pK9DNY/2KbRbCCP9JPpAEBatHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvapS6DioG4tbPKssnVtokK/fS+UwHwYDVR0j
BBgwFoAUDSViCudA382fZ+mUGm+d8Ik4tQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMC8wRDI1NjIwQUU3NDBERkNEOUY2N0U5OTQxQTZGOURGMDg5MzhCNTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEMjU2MjBBRTc0MERGQ0Q5
RjY3RTk5NDFBNkY5REYwODkzOEI1MDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzAv
MzEzNzMwMmUzMjMzMzgyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq7jgwDQYJKoZIhvcNAQELBQADggEBAANopYyN
eMrg9aCvDISunRMnoAXpSgzYK3nj/+yCuCd6w5QYbjhs89m/ale7+EgXUl98rfA0
iBx/s/K9Pckt6CCCYFqO6wAcVyaX2U6rdg4g/+tA+qpb8QOs0vLjhgLQDpZiP6jK
JsyjIWP4vOrsX1jE0btJf0FcmPnjkXrT3Tecdl5065zM9lUV8QJy8cmsncILGann
+8yG4NqXbceTkDksYCqfYVeGJTTgHBUp7YFRIOCaVVMf5/llq2Srr6Iz3BSrTdnB
z55Hyt8q7XsqhrzWlN0FD4IBfC9Of9zbog6irLkhwT8ZNNVoZfSzPSh1X69FLDOT
9/Psdko+k/tYq4A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:07 2025 by rpki-client