Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa
File: 3138392e38352e34342e302f32322d3234203d3e20323730363434.roa (raw, json)
Hash identifier: H7q5PvpSefHwMOV03qqvlqb4Z5junlaBh5iaeQWseU0=
Subject key identifier: 92:9A:95:B1:E3:77:59:5A:84:82:D9:70:F9:E3:2D:01:37:4C:8B:DD
Certificate issuer: /CN=BCD5CB39FAA4193938B37D129F47AA40B31468D9
Certificate serial: 3FFCFE4F4B59601F8F411BB1053AD59D1740418F
Authority key identifier: BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa
Signing time: Thu 09 Nov 2023 14:47:48 +0000
ROA not before: Thu 09 Nov 2023 14:42:48 +0000
ROA not after: Thu 07 Nov 2024 14:47:48 +0000
asID: 270644
IP address blocks: 189.85.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fc:fe:4f:4b:59:60:1f:8f:41:1b:b1:05:3a:d5:9d:17:40:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCD5CB39FAA4193938B37D129F47AA40B31468D9
Validity
Not Before: Nov 9 14:42:48 2023 GMT
Not After : Nov 7 14:47:48 2024 GMT
Subject: CN=929A95B1E377595A8482D970F9E32D01374C8BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:96:ca:d7:5c:96:6b:36:27:35:0d:e5:07:
4b:42:26:ce:ec:79:b7:ce:31:e8:94:e3:f2:1c:45:
f0:a9:a9:bc:ae:27:07:c9:84:86:90:91:35:6b:4f:
a7:61:06:0b:67:46:bd:e4:32:ec:68:0d:8d:ee:e4:
93:e1:9d:18:18:79:94:1d:6a:11:1f:2e:71:c1:52:
49:93:9c:bd:93:4a:ac:c1:85:6f:86:ab:ef:a4:88:
81:da:3e:99:a7:a6:f2:bc:00:f0:de:d5:23:3b:bb:
73:84:ac:8f:8d:48:e4:67:41:02:f3:09:62:e8:9c:
e3:75:0c:d0:91:7e:52:1e:20:26:55:6b:01:0e:78:
7e:1d:cb:3e:4b:56:b6:ca:f1:6e:be:95:8b:45:c0:
a5:b0:b6:45:35:32:e1:7d:7a:40:7f:be:cc:79:45:
c7:8d:49:bb:fe:50:03:c4:1a:b9:a1:24:5d:05:28:
13:c9:b1:5c:85:70:c7:8a:18:cf:d9:8f:c9:15:7b:
d6:4a:56:42:60:e0:4d:8a:30:ff:a9:a0:d3:25:78:
04:bc:14:9b:57:2f:58:a6:44:3a:93:2e:21:23:a0:
7a:03:52:f6:bf:ce:d0:2e:d6:d5:a6:50:b8:53:a2:
fc:5d:3d:e7:7a:80:77:06:06:3d:c4:e7:e8:29:d0:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:95:B1:E3:77:59:5A:84:82:D9:70:F9:E3:2D:01:37:4C:8B:DD
X509v3 Authority Key Identifier:
keyid:BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.44.0/22
Signature Algorithm: sha256WithRSAEncryption
67:10:78:9a:0c:46:ec:a9:f0:6e:d4:d0:96:56:3f:e0:9c:54:
4b:fd:68:1d:67:f2:df:78:2e:7f:97:60:71:75:70:82:f0:c5:
46:44:4f:9d:8b:4c:13:9a:42:38:1c:22:95:cf:f2:e6:d4:fb:
9a:ec:ea:8c:de:ab:a7:48:1c:3f:f6:3c:4c:42:f5:b3:fb:3d:
f5:c5:f3:ac:ec:60:ff:09:6c:80:71:42:7c:3c:56:04:13:d8:
77:ef:82:34:ff:1c:13:51:20:a5:4b:63:f3:3e:cb:96:44:d6:
a1:0a:1a:13:5c:00:08:be:3a:20:0e:66:3f:b4:06:16:08:fd:
37:0c:f8:c3:ae:fe:ef:9b:0e:3b:97:e7:33:ff:69:a4:33:7c:
72:54:1e:af:7f:b1:68:75:70:7a:37:12:1f:b9:8c:42:20:d9:
09:43:90:73:8e:a7:91:61:bd:67:e6:2a:55:99:54:17:70:2b:
01:80:a8:d6:2a:3d:c9:47:12:e6:fb:a6:f3:10:95:a2:68:f4:
e7:7e:a6:d8:3c:63:c0:e1:e7:a3:18:0f:74:81:2d:37:59:0a:
b2:51:69:28:4c:d0:d4:06:cb:43:a1:e2:bc:cd:de:d2:f6:d9:
41:fa:f9:15:06:dd:91:47:9b:db:eb:d1:66:b3:26:5d:3f:5d:
2a:31:07:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP/z+T0tZYB+PQRuxBTrVnRdAQY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNENUNCMzlGQUE0MTkzOTM4QjM3RDEyOUY0N0FBNDBC
MzE0NjhEOTAeFw0yMzExMDkxNDQyNDhaFw0yNDExMDcxNDQ3NDhaMDMxMTAvBgNV
BAMTKDkyOUE5NUIxRTM3NzU5NUE4NDgyRDk3MEY5RTMyRDAxMzc0QzhCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1pbK11yWazYnNQ3lB0tCJs7s
ebfOMeiU4/IcRfCpqbyuJwfJhIaQkTVrT6dhBgtnRr3kMuxoDY3u5JPhnRgYeZQd
ahEfLnHBUkmTnL2TSqzBhW+Gq++kiIHaPpmnpvK8APDe1SM7u3OErI+NSORnQQLz
CWLonON1DNCRflIeICZVawEOeH4dyz5LVrbK8W6+lYtFwKWwtkU1MuF9ekB/vsx5
RceNSbv+UAPEGrmhJF0FKBPJsVyFcMeKGM/Zj8kVe9ZKVkJg4E2KMP+poNMleAS8
FJtXL1imRDqTLiEjoHoDUva/ztAu1tWmULhTovxdPed6gHcGBj3E5+gp0IKVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkpqVseN3WVqEgtlw+eMtATdMi90wHwYDVR0j
BBgwFoAUvNXLOfqkGTk4s30Sn0eqQLMUaNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVlleWNvaFZKNUMySng2NEd5eVZNcnRIWHlLOWtBOEFYR2VyR2t5Y29u
MU4vMC9CQ0Q1Q0IzOUZBQTQxOTM5MzhCMzdEMTI5RjQ3QUE0MEIzMTQ2OEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDRDVDQjM5RkFBNDE5Mzkz
OEIzN0QxMjlGNDdBQTQwQjMxNDY4RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VZZXljb2hWSjVDMkp4NjRHeXlWTXJ0SFh5SzlrQThBWEdlckdreWNvbjFOLzAv
MzEzODM5MmUzODM1MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvVUsMA0GCSqGSIb3DQEBCwUAA4IBAQBnEHiaDEbs
qfBu1NCWVj/gnFRL/WgdZ/LfeC5/l2BxdXCC8MVGRE+di0wTmkI4HCKVz/Lm1Pua
7OqM3qunSBw/9jxMQvWz+z31xfOs7GD/CWyAcUJ8PFYEE9h374I0/xwTUSClS2Pz
PsuWRNahChoTXAAIvjogDmY/tAYWCP03DPjDrv7vmw47l+cz/2mkM3xyVB6vf7Fo
dXB6NxIfuYxCINkJQ5BzjqeRYb1n5ipVmVQXcCsBgKjWKj3JRxLm+6bzEJWiaPTn
fqbYPGPA4eejGA90gS03WQqyUWkoTNDUBstDoeK8zd7S9tlB+vkVBt2RR5vb69Fm
syZdP10qMQdf
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org