Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa
File: 3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier: JeM+SOqI/bnIuXETeWoP506n3+kfmJoAQlG8jQVpHO8=
Subject key identifier: E4:95:49:A9:A0:C5:01:79:6D:E2:82:DA:87:79:FF:A3:A9:E1:A1:BE
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 2519CDDF4A5071893928B6684720E8F0AFA35DA8
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 21:00:02 +0000
ROA not before: Sat 04 Nov 2023 20:55:02 +0000
ROA not after: Sat 02 Nov 2024 21:00:02 +0000
asID: 264247
IP address blocks: 138.118.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:19:cd:df:4a:50:71:89:39:28:b6:68:47:20:e8:f0:af:a3:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 20:55:02 2023 GMT
Not After : Nov 2 21:00:02 2024 GMT
Subject: CN=E49549A9A0C501796DE282DA8779FFA3A9E1A1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:07:25:ea:c0:27:4b:8a:47:d3:aa:00:37:
8a:7f:a1:c4:86:6f:0d:5a:ff:97:60:09:aa:27:c9:
e1:4b:3c:4d:5d:71:2b:f0:4e:3e:b9:c4:73:1c:fb:
0e:a1:8b:5d:a2:32:d2:33:03:9e:c2:51:82:d1:a1:
a5:ac:d2:95:6e:4a:26:af:a2:ad:1e:b3:e2:04:6f:
2b:04:6c:09:3b:6e:6d:8c:56:fd:cc:47:47:46:f2:
b3:85:8f:c7:b4:1e:a9:94:70:29:80:aa:94:8c:45:
35:2c:5a:2f:f6:12:ba:65:d9:30:0c:d3:e1:58:a9:
13:b3:84:d0:fd:75:bf:4d:f1:e9:6f:56:3e:3b:f5:
53:c2:17:2a:34:04:91:ab:a9:64:f9:74:0f:d8:4f:
26:1e:5d:3d:5d:25:fa:52:04:4a:0c:4a:bc:1c:c3:
21:de:14:ea:94:13:89:7e:40:11:4d:fc:1e:10:a6:
4e:b5:3c:fa:be:8e:57:3d:a7:1b:be:eb:2f:96:2a:
eb:b9:be:97:c2:71:70:0b:c2:08:11:dd:24:1c:e5:
22:fd:64:88:19:94:1f:87:a0:3e:fd:44:b8:d9:c7:
64:91:92:21:f2:36:92:c7:ab:96:48:36:85:df:5e:
2a:c7:54:8b:49:ae:f8:c8:d6:6a:a3:bd:2d:08:28:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:49:A9:A0:C5:01:79:6D:E2:82:DA:87:79:FF:A3:A9:E1:A1:BE
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.35.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fe:f4:b5:bf:fe:ec:ec:6f:39:78:02:1e:5b:ab:c6:03:6d:
a2:8e:05:e4:0e:5e:05:0c:1c:72:b6:77:8b:64:d1:36:ea:ee:
87:4b:39:85:ad:3d:e1:78:d1:72:7d:40:11:d7:8a:2f:e9:cc:
6b:d7:82:54:79:34:51:75:92:ab:e1:ab:cd:b0:c2:ed:a5:1e:
12:a9:9a:2c:ad:40:b9:dc:99:72:bc:17:1d:16:ce:e0:f1:1f:
52:20:a9:78:e7:7f:bc:f6:72:e1:20:04:3e:8a:a4:92:a2:fc:
bc:37:aa:c8:2f:34:24:6b:1d:d2:04:df:33:4f:2f:62:a3:2b:
b1:8c:cb:17:34:35:98:9b:e1:96:93:4d:e5:62:48:04:17:32:
51:f7:06:98:84:09:4a:6e:f9:af:19:4b:3e:9c:f1:6a:4f:b8:
cb:ae:19:45:a3:e2:2f:06:84:74:5f:e8:c3:b7:79:2f:0e:02:
01:b3:82:07:be:87:53:08:92:72:05:a0:0f:80:24:42:e5:d9:
d7:8b:48:66:98:e7:b9:5d:6c:8b:3a:c6:02:d1:94:f5:77:b7:
ab:f3:10:c7:e1:89:83:3f:47:23:09:70:b7:c3:a9:9b:8d:54:
60:89:e0:4d:e0:34:b1:3c:a5:ed:81:6f:63:a7:22:e4:2c:c4:
fe:cc:14:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJRnN30pQcYk5KLZoRyDo8K+jXagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQzI5NUIyMDYyQ0Y3MTcyQzcxMDZBNTNCNzYxRTcw
QUFFMDJFQjAeFw0yMzExMDQyMDU1MDJaFw0yNDExMDIyMTAwMDJaMDMxMTAvBgNV
BAMTKEU0OTU0OUE5QTBDNTAxNzk2REUyODJEQTg3NzlGRkEzQTlFMUExQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsQcl6sAnS4pH06oAN4p/ocSG
bw1a/5dgCaonyeFLPE1dcSvwTj65xHMc+w6hi12iMtIzA57CUYLRoaWs0pVuSiav
oq0es+IEbysEbAk7bm2MVv3MR0dG8rOFj8e0HqmUcCmAqpSMRTUsWi/2Erpl2TAM
0+FYqROzhND9db9N8elvVj479VPCFyo0BJGrqWT5dA/YTyYeXT1dJfpSBEoMSrwc
wyHeFOqUE4l+QBFN/B4Qpk61PPq+jlc9pxu+6y+WKuu5vpfCcXALwggR3SQc5SL9
ZIgZlB+HoD79RLjZx2SRkiHyNpLHq5ZINoXfXirHVItJrvjI1mqjvS0IKBo5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5JVJqaDFAXlt4oLah3n/o6nhob4wHwYDVR0j
BBgwFoAULRwpWyBiz3FyxxBqU7dh5wquAuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMC8yRDFDMjk1QjIwNjJDRjcxNzJDNzEwNkE1M0I3NjFFNzBBQUUwMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMUMyOTVCMjA2MkNGNzE3
MkM3MTA2QTUzQjc2MUU3MEFBRTAyRUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzAv
MzEzMzM4MmUzMTMxMzgyZTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdiMwDQYJKoZIhvcNAQELBQADggEBAAD+9LW/
/uzsbzl4Ah5bq8YDbaKOBeQOXgUMHHK2d4tk0Tbq7odLOYWtPeF40XJ9QBHXii/p
zGvXglR5NFF1kqvhq82wwu2lHhKpmiytQLncmXK8Fx0WzuDxH1IgqXjnf7z2cuEg
BD6KpJKi/Lw3qsgvNCRrHdIE3zNPL2KjK7GMyxc0NZib4ZaTTeViSAQXMlH3BpiE
CUpu+a8ZSz6c8WpPuMuuGUWj4i8GhHRf6MO3eS8OAgGzgge+h1MIknIFoA+AJELl
2deLSGaY57ldbIs6xgLRlPV3t6vzEMfhiYM/RyMJcLfDqZuNVGCJ4E3gNLE8pe2B
b2OnIuQsxP7MFC4=
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:50 2025 by rpki-client