Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa
File: 3133382e35392e34342e302f32332d3233203d3e20323634353935.roa (raw, json)
Hash identifier: 7Ns6yRqnXde8IZTSmetELgaIn6o5aLG0WQ1hgrCiOIY=
Subject key identifier: D3:FB:C0:6D:59:EF:09:08:58:AF:D0:05:8A:55:00:5C:B2:62:34:2A
Certificate issuer: /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial: 5F5AD7ED9967D090C59D937D943A07AC383C7FFE
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa
Signing time: Mon 01 Apr 2024 14:40:10 +0000
ROA not before: Mon 01 Apr 2024 14:35:10 +0000
ROA not after: Mon 31 Mar 2025 14:40:10 +0000
asID: 264595
IP address blocks: 138.59.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5a:d7:ed:99:67:d0:90:c5:9d:93:7d:94:3a:07:ac:38:3c:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
Validity
Not Before: Apr 1 14:35:10 2024 GMT
Not After : Mar 31 14:40:10 2025 GMT
Subject: CN=D3FBC06D59EF090858AFD0058A55005CB262342A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:36:a4:dc:56:df:47:9e:93:93:f6:7e:0b:
79:74:37:e0:5a:12:c6:dc:41:97:6d:38:96:83:3c:
d4:07:0f:82:bd:18:cc:ea:cd:c7:b6:30:2a:a9:91:
78:f1:73:1a:a4:ce:dd:d3:f8:32:75:68:2a:d3:45:
5d:9d:f9:31:cc:66:ee:b6:c2:8e:8c:9b:45:3f:51:
32:b1:dd:5b:e2:92:00:e7:b5:f2:74:46:ac:5c:e4:
c2:73:e5:11:0c:47:f8:e6:f9:ee:7c:27:d8:98:e3:
88:63:97:52:1a:96:87:5b:0f:71:f8:79:4e:c8:a3:
c0:09:d1:6a:4c:8a:41:6e:27:d9:5b:3a:fc:6f:63:
6d:37:0f:16:d9:63:a6:d4:08:ce:94:4b:95:bb:99:
e3:9c:97:6e:dc:5d:6a:58:f7:d2:e7:53:c7:f1:fb:
8f:2a:75:33:0f:5c:18:79:6e:99:5e:f0:3f:fd:e7:
f2:8e:6e:f5:74:00:ea:36:43:2e:44:29:b8:e5:b2:
e9:74:78:65:cf:23:25:31:32:da:18:7f:49:95:42:
36:43:8e:8a:b4:6b:3c:d1:ba:44:b2:24:30:9a:7c:
b0:59:e0:21:a6:0b:d8:aa:8e:6b:24:07:6d:83:91:
f4:26:ad:ae:92:f9:53:46:ae:ec:f4:47:b1:b2:8b:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:C0:6D:59:EF:09:08:58:AF:D0:05:8A:55:00:5C:B2:62:34:2A
X509v3 Authority Key Identifier:
keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:d0:90:c1:36:d5:2c:3b:5c:b0:32:f0:d3:8e:ec:5c:b9:c9:
ee:dc:fa:68:53:5e:a2:e8:54:6a:c6:b5:71:b4:5e:4d:16:f6:
7f:0e:bb:2a:db:18:e2:0b:f0:0b:f8:b6:53:4f:fc:27:0f:4d:
50:f3:10:00:e8:1a:6b:03:6a:a1:4a:39:86:cc:08:34:f7:1a:
80:fc:01:12:0f:b9:cd:e2:69:76:66:36:70:0c:bc:fc:aa:64:
d3:99:3c:5e:c6:94:b1:5b:c5:e3:2a:f6:ff:e1:c7:58:46:6d:
1a:d6:da:23:64:7a:6f:8b:9a:19:ca:b6:45:38:10:92:94:1b:
c4:9e:f7:a6:ba:9e:26:97:ea:e8:d1:56:9c:19:8a:f3:32:08:
ab:2c:94:4d:22:9f:82:14:79:73:24:84:39:4c:b6:81:c0:bc:
7d:33:ad:b2:02:ce:26:4f:c7:87:af:22:80:ca:c8:06:c0:4f:
b7:f7:57:8d:14:50:f7:2e:e0:8c:f2:ea:cc:35:c8:14:95:9d:
7e:4b:42:6f:cc:84:79:2f:9d:e2:11:d4:0b:05:27:b2:13:3f:
63:c4:ee:47:71:41:d3:94:36:96:60:66:d7:45:01:51:0c:ac:
45:e2:4c:27:d5:d2:8a:28:6f:1e:4d:ff:ba:92:16:1b:fb:e8:
a3:7b:07:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX1rX7Zln0JDFnZN9lDoHrDg8f/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc0NzQ4RDhCRjMxQzE3RjQwNkFEQ0ZBQkQ5ODM5NTY2
ODAyOUI3RjAeFw0yNDA0MDExNDM1MTBaFw0yNTAzMzExNDQwMTBaMDMxMTAvBgNV
BAMTKEQzRkJDMDZENTlFRjA5MDg1OEFGRDAwNThBNTUwMDVDQjI2MjM0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKDak3FbfR56Tk/Z+C3l0N+Ba
EsbcQZdtOJaDPNQHD4K9GMzqzce2MCqpkXjxcxqkzt3T+DJ1aCrTRV2d+THMZu62
wo6Mm0U/UTKx3VvikgDntfJ0Rqxc5MJz5REMR/jm+e58J9iY44hjl1IalodbD3H4
eU7Io8AJ0WpMikFuJ9lbOvxvY203DxbZY6bUCM6US5W7meOcl27cXWpY99LnU8fx
+48qdTMPXBh5bple8D/95/KObvV0AOo2Qy5EKbjlsul0eGXPIyUxMtoYf0mVQjZD
joq0azzRukSyJDCafLBZ4CGmC9iqjmskB22DkfQmra6S+VNGruz0R7Gyi2S/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0/vAbVnvCQhYr9AFilUAXLJiNCowHwYDVR0j
BBgwFoAUV0dI2L8xwX9Aatz6vZg5VmgCm38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMC81NzQ3NDhEOEJGMzFDMTdGNDA2QURDRkFCRDk4Mzk1NjY4MDI5QjdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3NDc0OEQ4QkYzMUMxN0Y0
MDZBRENGQUJEOTgzOTU2NjgwMjlCN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzAv
MzEzMzM4MmUzNTM5MmUzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBijssMA0GCSqGSIb3DQEBCwUAA4IBAQC40JDBNtUs
O1ywMvDTjuxcucnu3PpoU16i6FRqxrVxtF5NFvZ/Drsq2xjiC/AL+LZTT/wnD01Q
8xAA6BprA2qhSjmGzAg09xqA/AESD7nN4ml2ZjZwDLz8qmTTmTxexpSxW8XjKvb/
4cdYRm0a1tojZHpvi5oZyrZFOBCSlBvEnvemup4ml+ro0VacGYrzMgirLJRNIp+C
FHlzJIQ5TLaBwLx9M62yAs4mT8eHryKAysgGwE+391eNFFD3LuCM8urMNcgUlZ1+
S0JvzIR5L53iEdQLBSeyEz9jxO5HcUHTlDaWYGbXRQFRDKxF4kwn1dKKKG8eTf+6
khYb++ijewc7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org