Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa
File: 3133382e35392e34342e302f32322d3232203d3e20323634353935.roa (raw, json)
Hash identifier: sN/NiA/FYibc9zviCxQzmMtBqQsFcdZvTjHH8hegnEY=
Subject key identifier: 8B:84:BC:AB:D7:D8:76:26:C0:05:18:9A:00:2F:DF:6E:62:1D:85:CF
Certificate issuer: /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial: 31DDD80F3FA0C44B169EF7FAB83519F72BCE760D
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa
Signing time: Mon 01 Apr 2024 14:40:09 +0000
ROA not before: Mon 01 Apr 2024 14:35:09 +0000
ROA not after: Mon 31 Mar 2025 14:40:09 +0000
asID: 264595
IP address blocks: 138.59.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:d8:0f:3f:a0:c4:4b:16:9e:f7:fa:b8:35:19:f7:2b:ce:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
Validity
Not Before: Apr 1 14:35:09 2024 GMT
Not After : Mar 31 14:40:09 2025 GMT
Subject: CN=8B84BCABD7D87626C005189A002FDF6E621D85CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:b6:60:eb:68:ac:e9:32:58:7f:b9:95:d9:
0c:03:a4:35:f6:a3:c5:a3:9d:a0:6c:ab:53:b7:67:
a5:4d:bf:9a:c8:95:79:d0:c2:e9:df:67:ae:08:4b:
80:0b:21:cb:12:e8:8b:b9:c9:24:69:47:2a:5e:a7:
ca:ab:19:7b:d8:01:1d:cc:32:ea:cf:ce:6a:99:0d:
a9:96:90:6e:ad:6c:72:e2:2e:7f:6b:2b:24:75:5b:
b7:b4:ce:d8:8f:2b:2b:86:fe:30:46:b2:03:ed:09:
e6:35:62:61:12:f2:17:2d:ef:ce:1f:33:93:e1:f3:
72:85:f4:2b:87:26:53:89:d4:e3:bc:cd:63:cc:47:
d8:2d:2f:1e:c9:3a:91:31:e1:39:90:86:41:98:8d:
6e:88:5d:a8:34:9a:6a:fd:0f:0e:04:30:56:f9:8e:
11:56:a9:65:40:2b:75:ce:66:84:42:18:dd:12:57:
c5:e7:3a:18:07:d4:e5:85:fe:1f:62:81:b6:ca:bf:
7a:f4:8f:ed:b3:99:c2:de:40:ed:88:e9:04:46:15:
5e:b4:c0:a7:b4:e3:25:85:1a:68:98:74:6c:2e:68:
3c:2b:e8:f8:f2:25:8d:0c:53:1a:ed:0c:d0:4d:27:
48:f0:f4:54:d7:24:8c:07:73:28:27:cc:31:ff:0c:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:BC:AB:D7:D8:76:26:C0:05:18:9A:00:2F:DF:6E:62:1D:85:CF
X509v3 Authority Key Identifier:
keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3232203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.44.0/22
Signature Algorithm: sha256WithRSAEncryption
92:92:69:f6:52:50:2a:61:cd:56:5c:24:b6:70:cb:56:53:93:
06:8f:e3:e2:b6:9e:8c:65:20:f8:c3:9d:77:1f:a6:12:9a:fd:
20:49:c3:af:20:e3:e5:1c:3d:86:3b:f5:6a:2c:48:0b:31:de:
96:aa:25:18:6c:eb:f5:da:13:f0:30:08:0b:9b:e2:0a:11:89:
28:b7:18:47:75:78:b1:3e:35:26:64:34:a4:3c:53:df:bd:8f:
4b:81:5a:73:30:17:b0:c1:dd:aa:e6:fe:f9:ad:6e:20:61:79:
c4:10:92:34:d1:2a:b3:27:cf:38:da:94:0c:95:e2:e1:a1:a1:
af:56:6f:fc:ce:d3:7a:58:00:16:14:26:52:4b:68:4d:49:18:
86:cf:b9:24:2f:7c:0a:05:51:29:ad:8a:b5:49:4d:03:ad:7a:
6d:09:da:a7:0d:19:6b:91:63:c3:8a:bf:f2:38:bf:5f:ef:16:
24:dc:74:9a:91:6a:da:06:da:c4:da:51:1d:c3:ae:e5:27:f1:
97:a0:18:d2:ac:7e:61:22:a8:78:cf:91:79:f0:9d:85:e7:e5:
98:cc:32:fe:e6:cd:6e:57:45:af:80:ab:63:48:08:15:34:b8:
a5:84:33:d4:1a:bd:bf:47:a3:19:f6:f7:ef:be:01:2a:da:13:
0c:9e:4e:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMd3YDz+gxEsWnvf6uDUZ9yvOdg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc0NzQ4RDhCRjMxQzE3RjQwNkFEQ0ZBQkQ5ODM5NTY2
ODAyOUI3RjAeFw0yNDA0MDExNDM1MDlaFw0yNTAzMzExNDQwMDlaMDMxMTAvBgNV
BAMTKDhCODRCQ0FCRDdEODc2MjZDMDA1MTg5QTAwMkZERjZFNjIxRDg1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEbZg62is6TJYf7mV2QwDpDX2
o8WjnaBsq1O3Z6VNv5rIlXnQwunfZ64IS4ALIcsS6Iu5ySRpRypep8qrGXvYAR3M
MurPzmqZDamWkG6tbHLiLn9rKyR1W7e0ztiPKyuG/jBGsgPtCeY1YmES8hct784f
M5Ph83KF9CuHJlOJ1OO8zWPMR9gtLx7JOpEx4TmQhkGYjW6IXag0mmr9Dw4EMFb5
jhFWqWVAK3XOZoRCGN0SV8XnOhgH1OWF/h9igbbKv3r0j+2zmcLeQO2I6QRGFV60
wKe04yWFGmiYdGwuaDwr6PjyJY0MUxrtDNBNJ0jw9FTXJIwHcygnzDH/DE1lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUi4S8q9fYdibABRiaAC/fbmIdhc8wHwYDVR0j
BBgwFoAUV0dI2L8xwX9Aatz6vZg5VmgCm38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMC81NzQ3NDhEOEJGMzFDMTdGNDA2QURDRkFCRDk4Mzk1NjY4MDI5QjdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3NDc0OEQ4QkYzMUMxN0Y0
MDZBRENGQUJEOTgzOTU2NjgwMjlCN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzAv
MzEzMzM4MmUzNTM5MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijssMA0GCSqGSIb3DQEBCwUAA4IBAQCSkmn2UlAq
Yc1WXCS2cMtWU5MGj+Pitp6MZSD4w513H6YSmv0gScOvIOPlHD2GO/VqLEgLMd6W
qiUYbOv12hPwMAgLm+IKEYkotxhHdXixPjUmZDSkPFPfvY9LgVpzMBewwd2q5v75
rW4gYXnEEJI00SqzJ8842pQMleLhoaGvVm/8ztN6WAAWFCZSS2hNSRiGz7kkL3wK
BVEprYq1SU0DrXptCdqnDRlrkWPDir/yOL9f7xYk3HSakWraBtrE2lEdw67lJ/GX
oBjSrH5hIqh4z5F58J2F5+WYzDL+5s1uV0WvgKtjSAgVNLilhDPUGr2/R6MZ9vfv
vgEq2hMMnk5o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org