Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32322d3332203d3e20323731303232.roa
File: 3230302e34392e32342e302f32322d3332203d3e20323731303232.roa (raw, json)
Hash identifier: 1gZfVdwEroqo+2QFfQjRlQw5afkQ9x3G28oMN+K8Z9k=
Subject key identifier: F5:45:9A:DA:72:73:9F:51:7C:D6:49:8F:69:60:BA:91:9F:84:7D:8E
Certificate issuer: /CN=2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C
Certificate serial: 3E78A02A727C32740EAAE635E63DDD4E93802289
Authority key identifier: 2A:C5:BD:DE:C0:D2:61:35:EE:BA:D9:2B:ED:76:87:5C:3A:E4:39:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32322d3332203d3e20323731303232.roa
Signing time: Thu 09 May 2024 13:09:33 +0000
ROA not before: Thu 09 May 2024 13:04:33 +0000
ROA not after: Thu 08 May 2025 13:09:33 +0000
asID: 271022
IP address blocks: 200.49.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:78:a0:2a:72:7c:32:74:0e:aa:e6:35:e6:3d:dd:4e:93:80:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C
Validity
Not Before: May 9 13:04:33 2024 GMT
Not After : May 8 13:09:33 2025 GMT
Subject: CN=F5459ADA72739F517CD6498F6960BA919F847D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:93:5c:2d:fd:3f:15:5f:98:db:0a:b2:74:
38:5c:b9:c1:aa:9f:14:0c:79:20:e7:a6:2b:eb:b8:
72:16:c4:ab:ac:fb:d4:ea:03:78:37:90:98:df:c3:
cf:37:5b:31:a7:2e:d2:37:e9:12:a3:fe:94:28:d4:
da:a5:d2:7a:91:8a:a6:0b:d5:f8:3c:c1:b5:ec:e9:
dd:4a:44:5c:5c:51:d6:ca:60:c1:6a:60:af:40:5b:
dc:a4:5f:b4:ad:88:bb:6d:de:f5:2a:ea:2e:69:de:
6e:27:8d:ad:dc:d2:7c:9f:66:f0:0e:97:36:32:8b:
37:d2:9c:8a:07:4a:5c:82:b0:15:d4:78:f3:00:96:
6d:4c:f5:30:e6:25:b4:50:2a:ae:43:b4:3d:44:ab:
80:3e:04:63:fb:72:9e:60:12:e9:69:6c:aa:44:45:
ee:ee:57:98:ba:21:bc:8b:5b:38:97:f6:14:1b:1d:
c2:de:bc:60:91:47:ad:fe:32:89:21:52:44:b8:25:
aa:26:e7:02:1e:41:24:1d:0d:42:14:d9:90:f7:82:
9d:5b:77:6a:2f:a6:c5:7e:f9:58:07:60:e8:47:10:
41:6c:d1:55:3d:1f:08:25:5f:8c:b7:a7:94:7e:cd:
95:4c:8d:8c:61:cc:31:ae:cd:e1:b5:cd:d1:5a:d8:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:9A:DA:72:73:9F:51:7C:D6:49:8F:69:60:BA:91:9F:84:7D:8E
X509v3 Authority Key Identifier:
keyid:2A:C5:BD:DE:C0:D2:61:35:EE:BA:D9:2B:ED:76:87:5C:3A:E4:39:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/3230302e34392e32342e302f32322d3332203d3e20323731303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.24.0/22
Signature Algorithm: sha256WithRSAEncryption
15:5a:bc:2e:61:63:24:94:91:e6:d8:53:6c:57:af:28:60:01:
62:23:82:d9:a5:a1:d9:cb:9d:c2:21:5d:5b:12:02:d4:e7:ee:
ba:ba:0a:c8:3b:99:fe:ff:96:fd:4c:e8:a8:03:66:f0:2f:97:
8e:74:bc:1c:82:23:1a:02:15:c9:8d:82:ed:cd:00:9e:7e:f1:
17:f6:7f:ac:ce:01:f5:ba:c6:d9:8d:f0:f0:1a:06:a1:58:e1:
1c:b8:6d:42:fb:8f:00:b6:dd:ca:cf:44:7a:bd:3f:88:75:cb:
63:a2:90:16:ec:8b:0f:d1:7f:19:99:b2:77:66:de:a4:c9:9e:
3d:87:11:5d:fd:97:88:c7:5d:0a:e5:f5:53:82:62:b1:50:04:
3a:de:34:11:77:de:e7:2b:54:bc:6b:f5:1c:1d:a6:54:4e:8e:
b7:77:10:3e:da:ee:84:4d:5a:09:d6:5f:fb:21:12:ed:bf:07:
53:cd:8c:38:c9:e7:bf:4f:e0:60:a3:8a:6e:9f:02:70:4d:b4:
72:2e:8a:ea:11:22:08:a7:57:ac:2e:40:f7:b2:2b:a6:35:16:
83:d4:a6:7b:00:b7:c4:57:5c:e5:32:1d:af:6c:9a:dd:dd:e2:
28:49:ce:2e:51:69:3d:2b:f0:ea:9b:ef:08:c3:21:7f:c4:35:
af:c1:27:57
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPnigKnJ8MnQOquY15j3dTpOAIokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDNUJEREVDMEQyNjEzNUVFQkFEOTJCRUQ3Njg3NUMz
QUU0MzkwQzAeFw0yNDA1MDkxMzA0MzNaFw0yNTA1MDgxMzA5MzNaMDMxMTAvBgNV
BAMTKEY1NDU5QURBNzI3MzlGNTE3Q0Q2NDk4RjY5NjBCQTkxOUY4NDdEOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUJNcLf0/FV+Y2wqydDhcucGq
nxQMeSDnpivruHIWxKus+9TqA3g3kJjfw883WzGnLtI36RKj/pQo1Nql0nqRiqYL
1fg8wbXs6d1KRFxcUdbKYMFqYK9AW9ykX7StiLtt3vUq6i5p3m4nja3c0nyfZvAO
lzYyizfSnIoHSlyCsBXUePMAlm1M9TDmJbRQKq5DtD1Eq4A+BGP7cp5gEulpbKpE
Re7uV5i6IbyLWziX9hQbHcLevGCRR63+MokhUkS4Jaom5wIeQSQdDUIU2ZD3gp1b
d2ovpsV++VgHYOhHEEFs0VU9HwglX4y3p5R+zZVMjYxhzDGuzeG1zdFa2BMNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9UWa2nJzn1F81kmPaWC6kZ+EfY4wHwYDVR0j
BBgwFoAUKsW93sDSYTXuutkr7XaHXDrkOQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1WUUs4VVZHR3RMZmJoektra1FYY3hSRXBzOEc5aGZhMnRqcVpqNkJS
ODgvMC8yQUM1QkRERUMwRDI2MTM1RUVCQUQ5MkJFRDc2ODc1QzNBRTQzOTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQzVCRERFQzBEMjYxMzVF
RUJBRDkyQkVENzY4NzVDM0FFNDM5MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNVlFLOFVWR0d0TGZiaHpLa2tRWGN4UkVwczhHOWhmYTJ0anFaajZCUjg4LzAv
MzIzMDMwMmUzNDM5MmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyDEYMA0GCSqGSIb3DQEBCwUAA4IBAQAVWrwuYWMk
lJHm2FNsV68oYAFiI4LZpaHZy53CIV1bEgLU5+66ugrIO5n+/5b9TOioA2bwL5eO
dLwcgiMaAhXJjYLtzQCefvEX9n+szgH1usbZjfDwGgahWOEcuG1C+48Att3Kz0R6
vT+IdctjopAW7IsP0X8ZmbJ3Zt6kyZ49hxFd/ZeIx10K5fVTgmKxUAQ63jQRd97n
K1S8a/UcHaZUTo63dxA+2u6ETVoJ1l/7IRLtvwdTzYw4yee/T+Bgo4punwJwTbRy
LorqESIIp1esLkD3siumNRaD1KZ7ALfEV1zlMh2vbJrd3eIoSc4uUWk9K/Dqm+8I
wyF/xDWvwSdX
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:30 2025 by rpki-client