Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa
File: 3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier: fKYjPgvHVSj2DUgPGtuhb9P8xrnHk4ShMPSBcF2n5Lg=
Subject key identifier: 68:18:3D:F4:91:CB:10:D7:D1:98:6F:AC:2D:AE:49:A5:2E:B8:B5:02
Certificate issuer: /CN=32511338FC4EB1C67F8A3C1EFE0E693913272E1F
Certificate serial: 39E1C350EAE5AFECF22E3C11B0E23E64270F050E
Authority key identifier: 32:51:13:38:FC:4E:B1:C6:7F:8A:3C:1E:FE:0E:69:39:13:27:2E:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa
Signing time: Tue 30 Jan 2024 12:05:44 +0000
ROA not before: Tue 30 Jan 2024 12:00:44 +0000
ROA not after: Tue 28 Jan 2025 12:05:44 +0000
asID: 270595
IP address blocks: 177.152.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e1:c3:50:ea:e5:af:ec:f2:2e:3c:11:b0:e2:3e:64:27:0f:05:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32511338FC4EB1C67F8A3C1EFE0E693913272E1F
Validity
Not Before: Jan 30 12:00:44 2024 GMT
Not After : Jan 28 12:05:44 2025 GMT
Subject: CN=68183DF491CB10D7D1986FAC2DAE49A52EB8B502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:f6:d3:c1:7f:42:4e:16:34:c5:1e:4e:d1:
91:4b:58:7d:6c:25:0a:f6:f1:5c:ce:66:bd:28:97:
e2:b1:14:05:42:61:4e:49:e3:9e:c0:63:2b:f8:1f:
63:f1:45:1b:10:99:2b:be:96:a2:3e:1d:c5:b8:25:
9b:25:e4:ff:05:e0:cd:4e:45:76:a9:de:35:f2:2f:
2b:fb:53:0d:2a:5f:05:d4:6b:6a:18:04:77:20:71:
6f:45:3d:13:00:14:a3:47:2d:b5:36:b4:45:73:1a:
10:1b:fa:e2:2b:60:1c:b1:48:ce:c3:3a:d0:43:4f:
4f:02:37:43:c9:56:79:68:50:76:b3:75:68:25:b5:
31:87:51:89:33:e3:4c:6e:c2:a4:6a:3c:42:24:d5:
cb:52:ee:f5:5c:78:ee:ca:60:ea:0d:94:17:29:fb:
41:73:c3:24:50:8d:6a:a1:04:5f:5e:da:39:c9:b1:
72:98:53:a2:57:bf:ad:84:6c:6a:89:f9:31:7e:07:
b2:3b:30:a3:b1:78:1a:38:20:ba:f7:51:6f:28:e7:
67:d7:a7:5d:7e:93:53:ae:c0:1b:80:17:0a:05:88:
5e:1d:85:5a:1f:11:47:20:eb:66:a4:15:db:3d:b7:
8e:e2:81:70:10:f6:38:11:99:50:cf:54:5a:4b:ad:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:3D:F4:91:CB:10:D7:D1:98:6F:AC:2D:AE:49:A5:2E:B8:B5:02
X509v3 Authority Key Identifier:
keyid:32:51:13:38:FC:4E:B1:C6:7F:8A:3C:1E:FE:0E:69:39:13:27:2E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:a9:00:59:4f:63:31:d9:43:63:f7:1e:00:a8:a0:7b:66:
21:fa:3f:d8:c0:85:b6:3f:03:5b:fc:1d:eb:81:4c:cc:9a:16:
c2:56:bc:fb:e4:55:c3:55:bd:e2:0a:16:53:cd:b1:68:bc:cc:
da:e4:55:17:1e:b5:bf:09:df:00:bf:1c:72:fa:dc:34:de:d6:
d4:75:6b:3d:30:66:ae:39:49:59:47:a8:db:9d:70:21:08:0a:
49:ca:ae:71:08:b1:98:f3:ed:8f:37:23:43:4a:29:be:c0:ce:
b8:0c:7e:6d:09:27:ef:2d:4f:a4:b0:a5:27:59:39:aa:38:a9:
7b:51:a2:b4:0c:f5:ce:ca:c4:1c:92:3c:09:a3:d2:1a:cb:21:
72:f1:64:be:da:59:80:65:9d:8a:06:ed:8f:db:91:89:f9:c8:
21:e9:4c:d6:40:58:30:c9:2c:90:4f:28:47:c1:2e:83:8c:d9:
60:99:30:9b:af:36:37:66:18:41:fd:3d:9d:97:88:5f:b6:06:
e2:24:54:4a:1c:8f:2c:37:2a:6f:d8:a9:ea:0d:9e:9c:47:e6:
6b:4e:fe:3c:24:2b:f6:40:29:8a:a6:68:7c:7f:a2:7c:ef:5b:
a1:1c:73:fc:cf:6b:e9:1d:a0:49:27:2c:c5:6c:b1:73:cf:be:
ca:d1:bd:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOeHDUOrlr+zyLjwRsOI+ZCcPBQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1MTEzMzhGQzRFQjFDNjdGOEEzQzFFRkUwRTY5Mzkx
MzI3MkUxRjAeFw0yNDAxMzAxMjAwNDRaFw0yNTAxMjgxMjA1NDRaMDMxMTAvBgNV
BAMTKDY4MTgzREY0OTFDQjEwRDdEMTk4NkZBQzJEQUU0OUE1MkVCOEI1MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxS/bTwX9CThY0xR5O0ZFLWH1s
JQr28VzOZr0ol+KxFAVCYU5J457AYyv4H2PxRRsQmSu+lqI+HcW4JZsl5P8F4M1O
RXap3jXyLyv7Uw0qXwXUa2oYBHcgcW9FPRMAFKNHLbU2tEVzGhAb+uIrYByxSM7D
OtBDT08CN0PJVnloUHazdWgltTGHUYkz40xuwqRqPEIk1ctS7vVceO7KYOoNlBcp
+0FzwyRQjWqhBF9e2jnJsXKYU6JXv62EbGqJ+TF+B7I7MKOxeBo4ILr3UW8o52fX
p11+k1OuwBuAFwoFiF4dhVofEUcg62akFds9t47igXAQ9jgRmVDPVFpLrZkjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaBg99JHLENfRmG+sLa5JpS64tQIwHwYDVR0j
BBgwFoAUMlETOPxOscZ/ijwe/g5pORMnLh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhZM1lDRFgzN3g5dkxUR1NNNHhtOHBTcW5GNWdVWjU4d3U1UUhKQ3FS
VDgvMC8zMjUxMTMzOEZDNEVCMUM2N0Y4QTNDMUVGRTBFNjkzOTEzMjcyRTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyNTExMzM4RkM0RUIxQzY3
RjhBM0MxRUZFMEU2OTM5MTMyNzJFMUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoWTNZQ0RYMzd4OXZMVEdTTTR4bThwU3FuRjVnVVo1OHd1NVFISkNxUlQ4LzAv
MzEzNzM3MmUzMTM1MzIyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM1MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGYbzANBgkqhkiG9w0BAQsFAAOCAQEAm+Op
AFlPYzHZQ2P3HgCooHtmIfo/2MCFtj8DW/wd64FMzJoWwla8++RVw1W94goWU82x
aLzM2uRVFx61vwnfAL8ccvrcNN7W1HVrPTBmrjlJWUeo251wIQgKScqucQixmPPt
jzcjQ0opvsDOuAx+bQkn7y1PpLClJ1k5qjipe1GitAz1zsrEHJI8CaPSGsshcvFk
vtpZgGWdigbtj9uRifnIIelM1kBYMMkskE8oR8Eug4zZYJkwm682N2YYQf09nZeI
X7YG4iRUShyPLDcqb9ip6g2enEfma07+PCQr9kApiqZofH+ifO9boRxz/M9r6R2g
SScsxWyxc8++ytG9iw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org