Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa
File: 3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier: bqrdeVy/IUbg6ybFln2E8NDLKFW8sUXweKWb2dK8Pxc=
Subject key identifier: 56:00:3C:D6:10:DA:BD:C4:BF:9C:18:63:FE:B2:08:B0:05:0D:84:A1
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 7BEACFA5542EA056EC06DA31052DA1E938F99B2B
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:12 +0000
ROA not before: Fri 22 Dec 2023 20:20:12 +0000
ROA not after: Fri 20 Dec 2024 20:25:12 +0000
asID: 263073
IP address blocks: 168.121.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ea:cf:a5:54:2e:a0:56:ec:06:da:31:05:2d:a1:e9:38:f9:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:12 2023 GMT
Not After : Dec 20 20:25:12 2024 GMT
Subject: CN=56003CD610DABDC4BF9C1863FEB208B0050D84A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:37:1c:cc:4f:5d:5b:64:a3:52:d0:0b:20:
f1:5a:31:2e:e6:c0:29:10:ed:f4:44:4c:98:35:a7:
1a:2f:8a:e7:06:e0:7b:48:d0:17:a5:90:99:5d:78:
3a:a9:af:fb:51:2e:b0:25:19:4c:b8:16:8e:63:c1:
10:ca:91:a6:2f:08:88:3a:d0:54:f8:4f:9d:1b:b9:
14:98:37:5f:f0:51:fd:9b:05:83:a0:bf:95:c0:c8:
8c:13:ff:a9:68:74:4e:96:df:41:94:67:7e:9e:8c:
19:70:42:21:86:58:95:51:df:21:41:c0:5b:a5:fb:
30:8d:c3:5f:e7:92:23:70:61:55:c6:b6:9c:7b:b0:
78:24:87:79:6d:9c:09:54:b0:bd:20:69:94:43:dc:
27:5e:8e:00:4f:8f:fc:41:fc:6e:07:8f:01:a7:76:
c7:3a:1d:f1:f4:00:a7:61:2d:14:4f:d0:25:d5:b0:
b2:93:bf:d0:22:d8:fe:c9:c6:1e:c4:8f:b8:60:59:
c4:53:1f:99:59:18:94:51:ad:5e:74:95:e1:2c:f4:
a0:e3:2e:aa:19:d3:56:55:8b:2d:6c:d3:28:0d:fa:
f5:66:08:be:54:f3:3b:7a:22:06:bf:4e:81:c0:72:
59:e2:28:f1:30:c6:bd:71:db:e6:91:1f:8c:5e:62:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:3C:D6:10:DA:BD:C4:BF:9C:18:63:FE:B2:08:B0:05:0D:84:A1
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:37:35:3b:0a:77:07:b8:19:5f:db:b4:8a:bf:f2:ea:ad:10:
bc:56:32:77:ad:7a:42:a2:d8:46:48:c3:76:1a:c1:0e:84:ea:
3e:dd:b0:2b:9d:fe:b3:ab:93:b3:73:bb:57:f1:f4:b2:60:c6:
69:74:9a:85:77:2c:e0:bc:9e:15:dd:52:52:ef:27:4b:7b:75:
3e:8f:a6:25:ac:b0:f9:05:0b:07:ef:85:20:b6:9e:a3:86:a4:
c3:f1:ef:59:3c:d9:fe:6d:4d:82:2b:3a:f9:20:53:2c:4d:7d:
ee:df:3f:fe:e9:ab:ca:ec:70:ee:6e:1d:7d:a5:13:58:0f:a0:
21:a9:83:a4:a1:fb:98:4d:37:c7:38:96:f5:c1:a6:b8:47:44:
41:a9:65:23:1b:0a:c0:93:80:79:ff:c3:5e:0e:2f:1b:f1:ed:
19:e9:3e:0f:70:e5:eb:04:14:68:91:48:9e:64:68:b8:e6:ef:
d4:eb:de:82:ec:2d:f8:59:30:5e:38:8c:9c:8f:09:cb:c4:8d:
0c:15:05:6f:eb:06:35:72:1f:53:63:1f:80:41:4a:ea:57:07:
49:c3:54:74:48:0d:b0:90:52:19:b4:e0:82:60:3d:18:4c:fc:
93:89:7c:61:ad:7f:24:c4:8d:c0:fc:b6:db:10:8b:eb:09:de:
9a:74:66:6e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe+rPpVQuoFbsBtoxBS2h6Tj5myswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMTJaFw0yNDEyMjAyMDI1MTJaMDMxMTAvBgNV
BAMTKDU2MDAzQ0Q2MTBEQUJEQzRCRjlDMTg2M0ZFQjIwOEIwMDUwRDg0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2jcczE9dW2SjUtALIPFaMS7m
wCkQ7fRETJg1pxoviucG4HtI0BelkJldeDqpr/tRLrAlGUy4Fo5jwRDKkaYvCIg6
0FT4T50buRSYN1/wUf2bBYOgv5XAyIwT/6lodE6W30GUZ36ejBlwQiGGWJVR3yFB
wFul+zCNw1/nkiNwYVXGtpx7sHgkh3ltnAlUsL0gaZRD3CdejgBPj/xB/G4HjwGn
dsc6HfH0AKdhLRRP0CXVsLKTv9Ai2P7Jxh7Ej7hgWcRTH5lZGJRRrV50leEs9KDj
LqoZ01ZViy1s0ygN+vVmCL5U8zt6Iga/ToHAclniKPEwxr1x2+aRH4xeYh0/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVgA81hDavcS/nBhj/rIIsAUNhKEwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5wDANBgkqhkiG9w0BAQsFAAOCAQEAHDc1
Owp3B7gZX9u0ir/y6q0QvFYyd616QqLYRkjDdhrBDoTqPt2wK53+s6uTs3O7V/H0
smDGaXSahXcs4LyeFd1SUu8nS3t1Po+mJayw+QULB++FILaeo4akw/HvWTzZ/m1N
gis6+SBTLE197t8//umryuxw7m4dfaUTWA+gIamDpKH7mE03xziW9cGmuEdEQall
IxsKwJOAef/DXg4vG/HtGek+D3Dl6wQUaJFInmRouObv1Oveguwt+FkwXjiMnI8J
y8SNDBUFb+sGNXIfU2MfgEFK6lcHScNUdEgNsJBSGbTggmA9GEz8k4l8Ya1/JMSN
wPy22xCL6wnemnRmbg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:33 2025 by rpki-client