Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3232203d3e20323633303733.roa
File: 3138362e3233332e3130342e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier: 7Hfvx0dTRqN4qM1RljQvqym6sJ1ayu6L+FMKy1T7baU=
Subject key identifier: DE:D7:76:19:43:E4:8D:F5:BF:06:26:2D:BA:F4:9D:F6:06:8F:35:E0
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 756FEA2CDCD7E0EE759C4F13911D009F0817F490
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3232203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:07 +0000
ROA not before: Fri 22 Dec 2023 20:20:07 +0000
ROA not after: Fri 20 Dec 2024 20:25:07 +0000
asID: 263073
IP address blocks: 186.233.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6f:ea:2c:dc:d7:e0:ee:75:9c:4f:13:91:1d:00:9f:08:17:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:07 2023 GMT
Not After : Dec 20 20:25:07 2024 GMT
Subject: CN=DED7761943E48DF5BF06262DBAF49DF6068F35E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:8e:c9:56:18:b4:db:ce:07:a5:6f:4e:ed:
75:ac:1c:10:39:8f:b1:04:cd:ac:57:31:9d:bd:b3:
fb:4d:52:b2:e4:5f:f4:9e:37:2b:22:24:c5:c6:14:
00:dd:5f:aa:59:d0:fd:89:b4:6e:6c:75:4f:e8:e0:
02:15:4f:f0:ea:30:f7:e0:1e:23:cd:bc:bf:75:87:
d1:fe:52:96:4e:39:7b:38:7c:0d:f9:53:85:f6:9d:
5b:90:54:8a:99:c2:99:15:89:bf:e6:44:51:ab:63:
48:6c:71:ef:ad:bd:21:48:bf:5d:2d:4c:48:e8:eb:
85:a0:c5:fc:1b:4b:c2:46:a4:22:21:a6:43:64:7c:
22:57:b1:cc:7f:6f:4b:7b:9a:9c:29:8f:f0:bb:1f:
61:52:c0:47:88:e1:ef:90:2a:c0:0a:98:3e:fd:2c:
0e:ed:90:60:81:bc:db:e3:ad:2a:5b:ec:e9:4c:cc:
5a:35:2d:d1:fa:b4:b0:b0:58:34:eb:e9:a0:12:39:
47:f5:1d:76:17:3e:c6:5b:cd:ac:b1:26:2a:e1:67:
fd:80:7a:6e:25:bf:dc:2d:e7:7b:0d:56:55:72:9b:
e4:3d:4f:b0:3a:df:9c:b8:f8:b3:d8:5b:5d:4f:92:
0d:c8:3d:8d:f3:06:b4:91:00:d9:56:ea:e3:b7:68:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:76:19:43:E4:8D:F5:BF:06:26:2D:BA:F4:9D:F6:06:8F:35:E0
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3232203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:21:db:aa:01:e2:d6:a7:08:63:4d:45:06:56:53:ac:4b:22:
da:04:e5:54:f6:f5:b3:78:db:86:78:3e:f5:fe:7e:17:f5:ab:
c9:93:71:aa:89:75:07:01:e8:b5:93:6f:ca:c4:e6:ff:1c:53:
b3:c7:07:4d:07:1c:14:78:e4:cc:ff:06:14:83:6e:a1:7b:07:
49:49:55:58:49:70:0b:15:e4:85:cd:50:1d:c2:55:97:2e:dd:
c1:80:82:34:2e:49:da:44:09:ed:5c:a5:36:f1:46:af:b1:6d:
32:59:36:be:10:d0:ad:2b:09:2e:b4:63:f5:fb:bd:00:62:d3:
e5:9f:29:1a:32:8f:00:cd:11:65:d8:85:0f:3f:76:01:06:9d:
56:65:41:f9:32:f1:4e:5c:4c:9f:ad:62:99:ae:74:42:67:db:
08:21:46:02:64:42:83:0c:b0:a5:12:99:25:c9:59:48:30:78:
88:2e:a2:de:9c:7c:24:17:d3:12:42:09:79:b9:a4:4c:a8:d7:
5d:88:08:cb:cb:89:63:e7:67:9b:c5:5b:49:89:d0:19:46:ea:
b4:07:67:b7:d7:2b:74:80:c7:2f:e5:96:9b:c6:be:0c:b8:a8:
d6:ec:3c:88:7e:6c:48:3d:92:27:5f:32:da:68:a4:8f:42:ce:
51:59:f4:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdW/qLNzX4O51nE8TkR0AnwgX9JAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDdaFw0yNDEyMjAyMDI1MDdaMDMxMTAvBgNV
BAMTKERFRDc3NjE5NDNFNDhERjVCRjA2MjYyREJBRjQ5REY2MDY4RjM1RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSY7JVhi0284HpW9O7XWsHBA5
j7EEzaxXMZ29s/tNUrLkX/SeNysiJMXGFADdX6pZ0P2JtG5sdU/o4AIVT/DqMPfg
HiPNvL91h9H+UpZOOXs4fA35U4X2nVuQVIqZwpkVib/mRFGrY0hsce+tvSFIv10t
TEjo64WgxfwbS8JGpCIhpkNkfCJXscx/b0t7mpwpj/C7H2FSwEeI4e+QKsAKmD79
LA7tkGCBvNvjrSpb7OlMzFo1LdH6tLCwWDTr6aASOUf1HXYXPsZbzayxJirhZ/2A
em4lv9wt53sNVlVym+Q9T7A635y4+LPYW11Pkg3IPY3zBrSRANlW6uO3aJXpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3td2GUPkjfW/BiYtuvSd9gaPNeAwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrpaDANBgkqhkiG9w0BAQsFAAOCAQEAniHb
qgHi1qcIY01FBlZTrEsi2gTlVPb1s3jbhng+9f5+F/WryZNxqol1BwHotZNvysTm
/xxTs8cHTQccFHjkzP8GFINuoXsHSUlVWElwCxXkhc1QHcJVly7dwYCCNC5J2kQJ
7VylNvFGr7FtMlk2vhDQrSsJLrRj9fu9AGLT5Z8pGjKPAM0RZdiFDz92AQadVmVB
+TLxTlxMn61ima50QmfbCCFGAmRCgwywpRKZJclZSDB4iC6i3px8JBfTEkIJebmk
TKjXXYgIy8uJY+dnm8VbSYnQGUbqtAdnt9crdIDHL+WWm8a+DLio1uw8iH5sSD2S
J18y2mikj0LOUVn0Vg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:59 2025 by rpki-client