Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36372e302f32342d3234203d3e20323633363531.roa
File: 3133382e3231392e36372e302f32342d3234203d3e20323633363531.roa (raw, json)
Hash identifier: b7YgiIkbjSJJO9O84gmNHr7wPVxoLH/tn+tTpn7WiY4=
Subject key identifier: 39:03:D5:D5:4B:D2:72:E1:76:39:73:C2:E1:00:56:4C:37:6A:C8:DC
Certificate issuer: /CN=61F3EB8033C3AB97E67010B908F239970A644384
Certificate serial: 358B082EC275ADAF42CD7FF5ACFA88490A0D9A12
Authority key identifier: 61:F3:EB:80:33:C3:AB:97:E6:70:10:B9:08:F2:39:97:0A:64:43:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F3EB8033C3AB97E67010B908F239970A644384.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36372e302f32342d3234203d3e20323633363531.roa
Signing time: Thu 20 Jan 2022 01:02:04 +0000
ROA not before: Thu 20 Jan 2022 00:57:04 +0000
ROA not after: Thu 19 Jan 2023 01:02:04 +0000
asID: 263651
IP address blocks: 138.219.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8b:08:2e:c2:75:ad:af:42:cd:7f:f5:ac:fa:88:49:0a:0d:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61F3EB8033C3AB97E67010B908F239970A644384
Validity
Not Before: Jan 20 00:57:04 2022 GMT
Not After : Jan 19 01:02:04 2023 GMT
Subject: CN=3903D5D54BD272E1763973C2E100564C376AC8DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:87:f0:e9:0c:d5:dc:74:3e:2c:5d:fa:b1:
9e:4a:b9:e5:62:9f:f7:c1:10:63:cd:7a:6e:39:c5:
ed:82:67:9c:ad:56:58:eb:76:9d:1f:f0:fe:17:e6:
e7:73:d5:1f:3c:c1:82:1e:0e:bc:6b:78:ab:2f:14:
d4:51:c7:71:ee:82:a1:b9:f5:72:5d:86:11:d1:0e:
07:10:80:e0:89:0c:c4:6d:43:27:56:0e:f0:c7:55:
2f:3e:4a:1a:47:e2:d8:c2:10:f5:1b:80:b1:98:25:
df:eb:0b:e1:d7:ca:b2:8b:d1:34:7f:18:01:4e:8b:
3a:bd:1d:dd:f2:2f:25:3d:66:37:ac:96:8a:61:4a:
32:c4:c9:23:d5:26:61:d0:c4:7b:17:28:3c:a9:e8:
8a:99:5c:09:15:3d:54:eb:1b:a9:5a:ca:6c:5e:54:
d8:4b:e2:83:e6:12:d2:df:ab:1d:f2:ba:e4:5a:c4:
be:e0:3a:8a:5e:5c:8d:3a:a2:b4:59:b1:70:f4:c2:
f9:da:7b:1f:1b:ad:f2:d6:8d:75:13:59:71:af:42:
53:dd:3b:18:b5:1c:ed:f9:b4:d6:32:6f:58:fe:40:
39:58:38:21:ad:98:10:2d:b2:84:01:bf:a2:1d:38:
d6:30:e2:30:9d:15:e0:f8:e4:a2:30:39:72:97:b9:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:D5:D5:4B:D2:72:E1:76:39:73:C2:E1:00:56:4C:37:6A:C8:DC
X509v3 Authority Key Identifier:
keyid:61:F3:EB:80:33:C3:AB:97:E6:70:10:B9:08:F2:39:97:0A:64:43:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/61F3EB8033C3AB97E67010B908F239970A644384.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F3EB8033C3AB97E67010B908F239970A644384.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36372e302f32342d3234203d3e20323633363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.67.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6f:c3:69:20:6f:c9:3a:f7:df:15:7b:f3:eb:56:7f:0f:cc:
c4:4f:04:9a:51:75:df:88:c6:3d:cb:71:10:93:4c:2a:25:2f:
8a:1e:7c:67:35:3d:41:de:55:e7:4e:3b:90:9e:78:19:8e:0f:
f1:d9:b4:5e:e0:76:81:ab:e8:78:a7:55:8d:b6:04:4b:da:64:
1d:44:78:b9:9a:58:cc:b8:ad:ac:62:84:69:d2:a3:86:9f:a1:
43:d8:d9:70:4f:48:b5:47:62:f9:90:17:96:a4:e7:35:ca:c8:
87:7c:45:a9:f2:9f:70:59:43:97:46:99:29:dc:ee:59:fc:da:
4f:e5:30:8f:66:5c:cb:a8:ce:f4:46:2c:13:6c:82:77:a6:0d:
d6:e1:50:c8:dd:37:42:a6:8e:1a:02:69:df:f9:5a:11:01:c6:
97:76:0c:eb:93:c9:30:10:9a:64:d6:04:4c:9b:29:21:d0:ec:
5a:9b:90:91:7f:cf:6a:6c:fd:53:63:89:b8:bb:cb:e0:83:d5:
d4:96:60:ed:61:3a:16:cf:68:79:61:27:17:42:fa:c5:1a:3d:
82:40:e9:3e:c4:e9:96:dc:ed:7d:5d:72:41:b2:7d:bd:d9:58:
1c:25:58:3c:7d:99:e9:e4:0f:44:1d:97:a6:b5:97:14:6a:79:
b2:e9:4b:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNYsILsJ1ra9CzX/1rPqISQoNmhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFGM0VCODAzM0MzQUI5N0U2NzAxMEI5MDhGMjM5OTcw
QTY0NDM4NDAeFw0yMjAxMjAwMDU3MDRaFw0yMzAxMTkwMTAyMDRaMDMxMTAvBgNV
BAMTKDM5MDNENUQ1NEJEMjcyRTE3NjM5NzNDMkUxMDA1NjRDMzc2QUM4REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W4fw6QzV3HQ+LF36sZ5KueVi
n/fBEGPNem45xe2CZ5ytVljrdp0f8P4X5udz1R88wYIeDrxreKsvFNRRx3HugqG5
9XJdhhHRDgcQgOCJDMRtQydWDvDHVS8+ShpH4tjCEPUbgLGYJd/rC+HXyrKL0TR/
GAFOizq9Hd3yLyU9ZjeslophSjLEySPVJmHQxHsXKDyp6IqZXAkVPVTrG6laymxe
VNhL4oPmEtLfqx3yuuRaxL7gOopeXI06orRZsXD0wvnaex8brfLWjXUTWXGvQlPd
Oxi1HO35tNYyb1j+QDlYOCGtmBAtsoQBv6IdONYw4jCdFeD45KIwOXKXudOFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOQPV1UvScuF2OXPC4QBWTDdqyNwwHwYDVR0j
BBgwFoAUYfPrgDPDq5fmcBC5CPI5lwpkQ4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1d3dkTkZDZ3FFallkZGNGeW9pTEJMVmhLalVaanJWbnF6R1Rwc05K
QUQvMC82MUYzRUI4MDMzQzNBQjk3RTY3MDEwQjkwOEYyMzk5NzBBNjQ0Mzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxRjNFQjgwMzNDM0FCOTdF
NjcwMTBCOTA4RjIzOTk3MEE2NDQzODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4NXd3ZE5GQ2dxRWpZZGRjRnlvaUxCTFZoS2pVWmpyVm5xekdUcHNOSkFELzAv
MzEzMzM4MmUzMjMxMzkyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK20MwDQYJKoZIhvcNAQELBQADggEBAEVvw2kg
b8k6998Ve/PrVn8PzMRPBJpRdd+Ixj3LcRCTTColL4oefGc1PUHeVedOO5CeeBmO
D/HZtF7gdoGr6HinVY22BEvaZB1EeLmaWMy4raxihGnSo4afoUPY2XBPSLVHYvmQ
F5ak5zXKyId8Ranyn3BZQ5dGmSnc7ln82k/lMI9mXMuozvRGLBNsgnemDdbhUMjd
N0KmjhoCad/5WhEBxpd2DOuTyTAQmmTWBEybKSHQ7FqbkJF/z2ps/VNjibi7y+CD
1dSWYO1hOhbPaHlhJxdC+sUaPYJA6T7E6Zbc7X1dckGyfb3ZWBwlWDx9menkD0Qd
l6a1lxRqebLpSwA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org