Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
File: 3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier: b85PCP7h+eARUG6JOk4LG604Ei8/JK9i1bhY5CmYslY=
Subject key identifier: 02:E7:59:10:5D:D4:7D:40:80:E9:01:9C:6D:36:E6:9B:19:80:44:FA
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 781C8AD68D71D61AD19DBBD16474CE5A1F9AEE2A
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 21:00:00 +0000
ROA not before: Sat 04 Nov 2023 20:55:00 +0000
ROA not after: Sat 02 Nov 2024 21:00:00 +0000
asID: 264247
IP address blocks: 138.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1c:8a:d6:8d:71:d6:1a:d1:9d:bb:d1:64:74:ce:5a:1f:9a:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 20:55:00 2023 GMT
Not After : Nov 2 21:00:00 2024 GMT
Subject: CN=02E759105DD47D4080E9019C6D36E69B198044FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:3f:24:98:3e:ef:37:bb:0a:bc:da:76:76:
23:32:0c:da:1a:d0:82:2b:44:f4:bc:7e:ca:36:fb:
8a:aa:21:72:aa:c9:3d:c1:f5:69:be:b8:5a:7f:4c:
dc:dd:fc:3e:be:7e:08:44:21:75:62:d7:29:24:3d:
23:9c:96:19:5b:79:6a:a8:11:e1:29:2f:00:69:f8:
77:b6:0f:ee:db:47:92:06:97:5f:67:22:d5:d7:84:
3f:45:38:13:a7:d0:55:64:6e:44:d2:cb:e7:a1:f3:
e4:11:5c:31:41:d8:f1:14:10:64:c1:99:85:21:5c:
f9:8d:87:26:2b:9e:db:9b:26:da:b1:f9:f0:19:f9:
89:3c:7b:f0:37:62:4e:c7:1a:85:1b:4c:e9:41:3c:
ef:21:af:d4:51:9e:b7:f6:e2:14:ae:e7:f8:69:d0:
50:4a:30:3f:09:16:0a:d6:9c:a8:f6:92:40:c0:21:
13:4d:6d:27:8c:69:03:27:c3:19:48:80:d1:bd:f9:
01:d7:45:f7:a3:8c:df:7c:c3:98:c8:b3:93:e2:1f:
e5:d1:9d:ed:55:fa:0a:7f:e3:ea:90:3d:7e:df:6c:
fe:34:04:b3:b7:73:07:40:24:05:93:74:4c:20:a1:
8e:7c:e5:28:c7:9a:9c:eb:79:00:08:5c:e5:aa:5d:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E7:59:10:5D:D4:7D:40:80:E9:01:9C:6D:36:E6:9B:19:80:44:FA
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f1:c1:07:f1:7f:b5:63:ec:91:d2:10:87:90:99:0e:ff:b0:
ca:be:a7:7f:a6:bf:ed:c9:1a:f6:0a:ba:0f:bf:bc:ab:f1:49:
6d:f0:e8:ad:b8:54:07:b8:13:2e:54:94:94:2c:89:ac:4e:13:
dc:70:72:a7:79:fb:67:80:7c:cd:5c:4b:85:8e:97:24:a0:07:
ee:ce:dc:09:40:0f:59:f6:f1:2b:93:c0:8c:6c:37:07:09:c6:
3e:54:63:d0:73:34:61:c9:4c:47:03:e2:9e:db:49:f9:26:a7:
84:9b:25:73:24:cd:25:0d:74:0d:12:9e:28:2b:d8:65:42:06:
d6:82:0b:f5:54:97:0b:62:a5:40:4f:04:3d:89:72:17:a6:ea:
94:89:bd:cd:89:6b:cb:92:09:21:59:2b:f6:91:dc:40:12:fe:
04:ce:6f:74:f4:d2:c5:23:12:be:23:71:b3:a3:91:77:0e:64:
8c:cb:24:26:d5:43:5b:5a:50:ca:80:a6:6c:7f:95:e6:50:1a:
92:c5:6c:3f:bc:f6:eb:bd:aa:d2:e6:ec:8c:54:8f:b4:08:e9:
59:4c:42:84:67:a4:78:e5:da:c1:e3:ed:a4:18:e1:97:3d:13:
bb:b2:22:a3:c8:c2:00:5f:58:de:5d:2d:18:da:b3:43:c8:96:
0d:18:f4:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeByK1o1x1hrRnbvRZHTOWh+a7iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQzI5NUIyMDYyQ0Y3MTcyQzcxMDZBNTNCNzYxRTcw
QUFFMDJFQjAeFw0yMzExMDQyMDU1MDBaFw0yNDExMDIyMTAwMDBaMDMxMTAvBgNV
BAMTKDAyRTc1OTEwNURENDdENDA4MEU5MDE5QzZEMzZFNjlCMTk4MDQ0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIj8kmD7vN7sKvNp2diMyDNoa
0IIrRPS8fso2+4qqIXKqyT3B9Wm+uFp/TNzd/D6+fghEIXVi1ykkPSOclhlbeWqo
EeEpLwBp+He2D+7bR5IGl19nItXXhD9FOBOn0FVkbkTSy+eh8+QRXDFB2PEUEGTB
mYUhXPmNhyYrntubJtqx+fAZ+Yk8e/A3Yk7HGoUbTOlBPO8hr9RRnrf24hSu5/hp
0FBKMD8JFgrWnKj2kkDAIRNNbSeMaQMnwxlIgNG9+QHXRfejjN98w5jIs5PiH+XR
ne1V+gp/4+qQPX7fbP40BLO3cwdAJAWTdEwgoY585SjHmpzreQAIXOWqXd89AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAudZEF3UfUCA6QGcbTbmmxmARPowHwYDVR0j
BBgwFoAULRwpWyBiz3FyxxBqU7dh5wquAuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMC8yRDFDMjk1QjIwNjJDRjcxNzJDNzEwNkE1M0I3NjFFNzBBQUUwMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMUMyOTVCMjA2MkNGNzE3
MkM3MTA2QTUzQjc2MUU3MEFBRTAyRUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzAv
MzEzMzM4MmUzMTMxMzgyZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdiEwDQYJKoZIhvcNAQELBQADggEBAJfxwQfx
f7Vj7JHSEIeQmQ7/sMq+p3+mv+3JGvYKug+/vKvxSW3w6K24VAe4Ey5UlJQsiaxO
E9xwcqd5+2eAfM1cS4WOlySgB+7O3AlAD1n28SuTwIxsNwcJxj5UY9BzNGHJTEcD
4p7bSfkmp4SbJXMkzSUNdA0Snigr2GVCBtaCC/VUlwtipUBPBD2Jchem6pSJvc2J
a8uSCSFZK/aR3EAS/gTOb3T00sUjEr4jcbOjkXcOZIzLJCbVQ1taUMqApmx/leZQ
GpLFbD+89uu9qtLm7IxUj7QI6VlMQoRnpHjl2sHj7aQY4Zc9E7uyIqPIwgBfWN5d
LRjas0PIlg0Y9Gg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org