Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e2033333536.roa
File: 3230312e33332e3136302e302f32302d3332203d3e2033333536.roa (raw, json)
Hash identifier: 45+2D89rnxi3J6yZjRdkHIIKdJlR4V/jd4WFajfsJvA=
Subject key identifier: B8:3A:4A:60:4D:8D:D3:D5:57:95:89:19:7E:52:E6:F3:7F:6D:D2:70
Certificate issuer: /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial: 799E5652219B2DF5803E85AA302190D5E6A11A69
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e2033333536.roa
Signing time: Sat 21 Jan 2023 22:22:35 +0000
ROA not before: Sat 21 Jan 2023 22:17:35 +0000
ROA not after: Sat 20 Jan 2024 22:22:35 +0000
asID: 3356
IP address blocks: 201.33.160.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9e:56:52:21:9b:2d:f5:80:3e:85:aa:30:21:90:d5:e6:a1:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Validity
Not Before: Jan 21 22:17:35 2023 GMT
Not After : Jan 20 22:22:35 2024 GMT
Subject: CN=B83A4A604D8DD3D5579589197E52E6F37F6DD270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:eb:3b:fa:c7:9f:13:eb:b7:e7:29:b9:ae:
e4:be:17:f4:0d:eb:06:78:ba:98:da:9d:6b:f3:56:
93:d9:09:d6:4e:63:73:65:18:0c:b3:fa:c7:ea:7d:
0a:aa:43:06:06:a9:12:e6:a9:6b:08:53:cc:c8:6f:
17:cb:24:19:ad:e9:38:75:f7:16:ae:0d:85:e3:b8:
7d:0a:ee:13:46:72:00:4e:49:74:f5:88:ac:c3:65:
01:e9:43:c9:36:97:3d:67:79:a9:d9:48:d3:1c:cf:
0d:33:05:6b:8a:7c:32:c5:df:a1:af:36:3b:a6:a3:
c7:bc:70:18:e1:3e:5c:d7:ce:41:46:6d:df:5b:86:
7d:43:70:dc:82:4b:fb:69:64:fd:0d:9d:97:34:be:
2c:20:f4:f2:1e:14:9d:d8:0b:41:7e:91:a6:4f:f5:
68:b3:2d:c7:27:03:8a:4a:4a:c9:2c:b4:16:b6:cb:
bb:78:5a:71:cc:65:5e:19:4d:da:90:d5:c5:22:a0:
86:c9:ae:4a:db:a8:f0:6a:4d:3c:e4:27:ca:ea:c7:
e6:df:e3:cf:e9:ac:58:78:04:62:a9:2b:e3:a0:b7:
e1:c3:d0:98:0e:bd:5f:bd:86:0d:50:7d:79:b9:ad:
5c:61:7f:7d:65:18:69:2a:41:ff:6d:3f:dc:e0:9b:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:4A:60:4D:8D:D3:D5:57:95:89:19:7E:52:E6:F3:7F:6D:D2:70
X509v3 Authority Key Identifier:
keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.33.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:0d:ff:8e:85:85:c4:e2:44:bf:00:cf:23:32:bb:6d:19:0e:
70:4a:0c:b1:42:18:1d:fc:5c:9a:9f:26:1f:7c:92:75:71:ba:
3e:e0:fa:9b:c5:5f:cf:e6:1a:5d:76:e1:8a:f3:d5:21:3f:d3:
d3:93:f4:ef:48:51:4b:0e:72:a1:c6:41:a0:be:e7:01:cf:72:
d4:bb:09:98:9a:45:fd:a2:2b:9c:6b:7b:ca:50:f7:b6:08:ac:
26:62:56:57:74:c3:15:82:34:73:63:43:1a:96:28:42:8d:42:
b7:e6:76:6f:6b:b1:de:32:22:5b:20:a5:50:88:80:b7:85:a0:
9a:11:ad:65:03:cc:c7:ce:9a:15:85:ec:67:19:d4:3c:fc:0d:
aa:11:a7:ad:e7:9b:0b:34:30:21:47:61:b6:ec:f2:e0:a0:8a:
04:7a:5f:10:11:8b:63:d8:3c:3b:e1:98:0c:3a:69:fd:2f:d9:
da:30:dc:14:e9:fc:90:b4:32:f9:e1:d2:c2:3f:56:a5:81:25:
79:85:d9:8c:f4:f7:df:53:9a:34:e1:01:68:3d:95:6a:ab:64:
dd:44:2b:94:a9:2b:82:77:76:d6:92:27:1b:53:73:99:8c:5b:
46:fc:b5:db:9f:3a:65:09:34:e0:d7:77:52:0e:de:58:ad:aa:
a1:1a:8c:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeZ5WUiGbLfWAPoWqMCGQ1eahGmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCNUE5NkM3NzQzOTM5QzMwM0VERDdGMkQzQ0M0QUI5
QzVEQjlGQTAeFw0yMzAxMjEyMjE3MzVaFw0yNDAxMjAyMjIyMzVaMDMxMTAvBgNV
BAMTKEI4M0E0QTYwNEQ4REQzRDU1Nzk1ODkxOTdFNTJFNkYzN0Y2REQyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Kus7+sefE+u35ym5ruS+F/QN
6wZ4upjanWvzVpPZCdZOY3NlGAyz+sfqfQqqQwYGqRLmqWsIU8zIbxfLJBmt6Th1
9xauDYXjuH0K7hNGcgBOSXT1iKzDZQHpQ8k2lz1neanZSNMczw0zBWuKfDLF36Gv
Njumo8e8cBjhPlzXzkFGbd9bhn1DcNyCS/tpZP0NnZc0viwg9PIeFJ3YC0F+kaZP
9WizLccnA4pKSskstBa2y7t4WnHMZV4ZTdqQ1cUioIbJrkrbqPBqTTzkJ8rqx+bf
48/prFh4BGKpK+Ogt+HD0JgOvV+9hg1QfXm5rVxhf31lGGkqQf9tP9zgm2lRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuDpKYE2N09VXlYkZflLm839t0nAwHwYDVR0j
BBgwFoAUlbWpbHdDk5wwPt1/LTzEq5xdufowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMC85NUI1QTk2Qzc3NDM5MzlDMzAzRUREN0YyRDNDQzRBQjlDNURCOUZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1QjVBOTZDNzc0MzkzOUMz
MDNFREQ3RjJEM0NDNEFCOUM1REI5RkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzAv
MzIzMDMxMmUzMzMzMmUzMTM2MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMzMz
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMkhoDANBgkqhkiG9w0BAQsFAAOCAQEAPQ3/joWFxOJE
vwDPIzK7bRkOcEoMsUIYHfxcmp8mH3ySdXG6PuD6m8Vfz+YaXXbhivPVIT/T05P0
70hRSw5yocZBoL7nAc9y1LsJmJpF/aIrnGt7ylD3tgisJmJWV3TDFYI0c2NDGpYo
Qo1Ct+Z2b2ux3jIiWyClUIiAt4WgmhGtZQPMx86aFYXsZxnUPPwNqhGnreebCzQw
IUdhtuzy4KCKBHpfEBGLY9g8O+GYDDpp/S/Z2jDcFOn8kLQy+eHSwj9WpYEleYXZ
jPT331OaNOEBaD2Vaqtk3UQrlKkrgnd21pInG1NzmYxbRvy12586ZQk04Nd3Ug7e
WK2qoRqMDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org