Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33362e302f32342d3234203d3e203238323436.roa
File: 3138372e312e33362e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier: GIJdY8w+ChDB6UojhWLJiweKGxS6XEaeeimbR2OBa2k=
Subject key identifier: 9C:D6:3A:4E:AA:00:97:0F:A0:88:58:23:EC:FF:70:B9:0F:FF:C3:FC
Certificate issuer: /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial: 2FA02DEAAB025D9964C9EE535945747130300172
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33362e302f32342d3234203d3e203238323436.roa
Signing time: Thu 14 Dec 2023 14:57:24 +0000
ROA not before: Thu 14 Dec 2023 14:52:24 +0000
ROA not after: Thu 12 Dec 2024 14:57:24 +0000
asID: 28246
IP address blocks: 187.1.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a0:2d:ea:ab:02:5d:99:64:c9:ee:53:59:45:74:71:30:30:01:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Validity
Not Before: Dec 14 14:52:24 2023 GMT
Not After : Dec 12 14:57:24 2024 GMT
Subject: CN=9CD63A4EAA00970FA0885823ECFF70B90FFFC3FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:a3:95:30:b9:70:11:70:52:28:8b:df:3e:
69:58:ff:54:ba:73:a3:25:59:4d:7d:af:bd:21:b3:
0c:d8:42:fc:8f:2a:4c:2f:5c:49:de:28:3f:50:ca:
58:5d:0e:b5:f6:35:eb:b6:06:6e:77:50:8a:75:9b:
86:7e:8f:6a:63:b5:48:85:31:34:42:8b:34:47:ae:
04:35:9d:b7:4a:e1:c6:ed:0a:01:0d:c6:e6:bd:6f:
42:7b:33:e3:fb:78:de:6d:c1:1c:30:08:38:8e:97:
fe:2b:e9:65:00:9b:a9:fc:5e:99:6d:9c:94:80:1f:
8f:6c:5b:b3:13:f9:af:f0:6f:c6:6a:c0:a7:4f:26:
92:5a:51:18:88:da:9f:ff:67:5e:e7:95:6f:a8:84:
c8:bf:b1:7a:38:d6:c9:01:99:2f:70:bb:ee:e8:08:
b3:33:68:ee:c1:a8:df:3c:d2:dc:7e:0d:c6:e5:13:
c0:02:81:54:44:5f:73:88:c7:10:58:6a:19:c7:61:
d1:a3:2a:c7:82:37:cd:ed:e6:9f:0c:cb:01:95:a5:
dc:ae:18:f1:e7:d6:20:7d:95:de:65:11:ad:26:cb:
52:90:f2:f8:fa:87:1b:9d:17:74:13:48:68:e1:93:
81:6b:bf:ca:b3:42:f6:da:9e:df:cc:0f:c8:71:97:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:3A:4E:AA:00:97:0F:A0:88:58:23:EC:FF:70:B9:0F:FF:C3:FC
X509v3 Authority Key Identifier:
keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33362e302f32342d3234203d3e203238323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:00:ad:38:58:9f:f6:65:22:8c:37:37:6c:40:5b:5c:20:c1:
25:56:25:6a:3b:cd:56:5c:b0:fb:bb:87:77:31:f7:36:5a:bb:
7c:8e:73:9f:10:2a:01:3b:23:58:93:4f:5e:6a:24:44:8b:48:
b3:5d:18:23:66:48:d5:23:76:5f:c8:e1:d2:85:dc:fe:b1:e5:
a1:73:48:8e:09:95:33:e6:78:24:0b:c4:d8:f1:4b:b1:73:df:
1f:03:31:45:f9:e6:8a:4b:76:e5:46:55:65:8f:08:d1:85:a7:
03:68:24:b9:fc:52:0d:b2:5a:e9:14:10:fa:3f:51:01:37:b8:
dd:6d:3a:03:03:40:11:91:b4:6a:10:e6:a2:d4:b2:36:ce:b8:
80:bb:e9:31:7a:60:29:12:74:3a:6f:14:e7:85:b8:2c:17:99:
31:69:9f:5b:76:84:f4:a7:97:73:c3:46:bb:ba:b8:c8:12:04:
5d:a4:2f:45:e1:7b:db:bc:60:57:0d:4b:ee:2a:6c:e0:75:18:
56:11:d6:9e:78:aa:38:1a:16:42:46:49:4a:57:a0:f8:fe:ba:
30:87:df:ad:e1:ef:5a:6a:9a:70:63:1b:7a:b0:56:e5:3e:dc:
f2:bf:2b:fa:7a:62:e4:fe:7a:c4:cc:47:8b:cf:d8:3d:94:29:
35:20:10:bc
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUL6At6qsCXZlkye5TWUV0cTAwAXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI5QjYyMTE1MEFEQTBCOEFBNDZEMDU0RjFBREUzMkYy
OTgzNjFFMDAeFw0yMzEyMTQxNDUyMjRaFw0yNDEyMTIxNDU3MjRaMDMxMTAvBgNV
BAMTKDlDRDYzQTRFQUEwMDk3MEZBMDg4NTgyM0VDRkY3MEI5MEZGRkMzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKT6OVMLlwEXBSKIvfPmlY/1S6
c6MlWU19r70hswzYQvyPKkwvXEneKD9QylhdDrX2Neu2Bm53UIp1m4Z+j2pjtUiF
MTRCizRHrgQ1nbdK4cbtCgENxua9b0J7M+P7eN5twRwwCDiOl/4r6WUAm6n8Xplt
nJSAH49sW7MT+a/wb8ZqwKdPJpJaURiI2p//Z17nlW+ohMi/sXo41skBmS9wu+7o
CLMzaO7BqN880tx+DcblE8ACgVREX3OIxxBYahnHYdGjKseCN83t5p8MywGVpdyu
GPHn1iB9ld5lEa0my1KQ8vj6hxudF3QTSGjhk4Frv8qzQvbant/MD8hxlwWdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUnNY6TqoAlw+giFgj7P9wuQ//w/wwHwYDVR0j
BBgwFoAUQptiEVCtoLiqRtBU8a3jLymDYeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVR6RUFYeDY0ZjlCSFQ1TmhtVWlkY3FRMjFCWEtjSGd2cnFYS3J5NW1Y
RXQvMC80MjlCNjIxMTUwQURBMEI4QUE0NkQwNTRGMUFERTMyRjI5ODM2MUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyOUI2MjExNTBBREEwQjhB
QTQ2RDA1NEYxQURFMzJGMjk4MzYxRTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUekVBWHg2NGY5QkhUNU5obVVpZGNxUTIxQlhLY0hndnJxWEtyeTVtWEV0LzAv
MzEzODM3MmUzMTJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMjM0
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7ASQwDQYJKoZIhvcNAQELBQADggEBALQArThYn/ZlIow3
N2xAW1wgwSVWJWo7zVZcsPu7h3cx9zZau3yOc58QKgE7I1iTT15qJESLSLNdGCNm
SNUjdl/I4dKF3P6x5aFzSI4JlTPmeCQLxNjxS7Fz3x8DMUX55opLduVGVWWPCNGF
pwNoJLn8Ug2yWukUEPo/UQE3uN1tOgMDQBGRtGoQ5qLUsjbOuIC76TF6YCkSdDpv
FOeFuCwXmTFpn1t2hPSnl3PDRru6uMgSBF2kL0Xhe9u8YFcNS+4qbOB1GFYR1p54
qjgaFkJGSUpXoPj+ujCH363h71pqmnBjG3qwVuU+3PK/K/p6YuT+esTMR4vP2D2U
KTUgELw=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:59 2025 by rpki-client