Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa
File: 3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier: tlRvqWYBBuGvOgVrzLILXgAGfYcrHquhzhHr2vtcDw4=
Subject key identifier: 90:86:63:8B:E8:63:89:D6:06:71:70:36:99:29:FD:01:03:30:83:26
Certificate issuer: /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial: 1C375369403A90D48F9331A558781D2ADEB8D40F
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa
Signing time: Tue 19 Dec 2023 12:52:09 +0000
ROA not before: Tue 19 Dec 2023 12:47:09 +0000
ROA not after: Tue 17 Dec 2024 12:52:09 +0000
asID: 263441
IP address blocks: 138.255.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:37:53:69:40:3a:90:d4:8f:93:31:a5:58:78:1d:2a:de:b8:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Validity
Not Before: Dec 19 12:47:09 2023 GMT
Not After : Dec 17 12:52:09 2024 GMT
Subject: CN=9086638BE86389D6067170369929FD0103308326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:8b:c2:a5:a3:1b:80:73:c3:35:b8:9e:91:
b7:8d:65:52:da:c1:99:d2:8d:9b:b2:af:61:d3:a2:
4c:86:61:8f:d7:3d:45:8e:f6:e1:f1:11:89:36:f1:
b9:29:34:b6:a4:e3:fd:01:d0:3a:b8:0c:42:fd:92:
eb:8b:e3:78:db:2b:0e:72:e2:3c:19:01:f3:3b:19:
56:e1:d0:eb:21:1f:d4:fe:b9:9e:2e:02:b3:9a:14:
6e:13:be:d1:7d:66:71:48:da:e0:00:07:7e:f5:2c:
30:82:43:32:c7:a4:b0:31:9d:81:63:e6:99:1e:b3:
0b:b1:10:7d:db:b4:21:e6:f0:52:9f:75:d9:bc:d9:
d6:81:bd:2a:b5:ae:e7:24:78:0e:15:05:54:7d:4f:
ee:8c:9f:cc:6d:31:a1:b3:3f:01:e0:f4:a3:1d:ab:
5e:ee:dc:8f:32:b9:d6:d9:27:11:66:d8:9e:4f:eb:
49:86:1b:f3:ce:1f:2e:93:29:1c:c9:cf:25:a9:20:
aa:68:92:bc:f7:84:93:c5:45:c1:9a:f5:e4:33:d4:
f7:2f:3e:0a:d3:0e:ae:a6:4d:c5:1c:cd:b7:a8:9f:
e7:e6:5c:62:13:30:28:4f:45:1a:5f:8f:28:16:de:
68:cd:33:70:9a:5b:01:dc:d6:71:60:ac:ee:e5:d7:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:63:8B:E8:63:89:D6:06:71:70:36:99:29:FD:01:03:30:83:26
X509v3 Authority Key Identifier:
keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:96:74:e4:80:11:20:12:c9:a1:23:fe:0a:43:8a:33:c5:26:
22:15:8a:cd:e8:06:33:ed:db:d7:2b:4c:7b:e1:c5:bd:ac:02:
75:c4:86:05:f9:a1:9d:1c:32:2c:75:43:31:2e:ec:e7:b7:f8:
4b:92:d6:65:16:cf:b6:e0:06:fa:58:04:b9:a4:3f:d3:7f:48:
4d:50:1b:18:ed:1e:01:ab:bd:5e:3c:db:51:e0:3b:2d:14:a8:
d2:43:5d:ec:e3:a5:e4:c3:ba:56:e3:46:c1:b0:c1:27:13:e5:
29:24:6d:37:d7:48:56:37:8c:28:b4:be:5e:6a:92:0f:72:27:
17:e8:ff:ad:1e:b1:dd:fd:33:d8:63:dd:fe:00:90:8e:44:42:
e0:90:3a:7a:ad:42:69:b1:92:f0:84:64:ff:4c:3d:d0:fe:77:
70:ff:a7:a4:bb:0d:6d:83:78:e5:2a:4a:f3:51:f0:fa:96:74:
36:45:92:10:44:26:40:e6:a2:80:4b:06:a5:64:e0:27:d0:22:
76:aa:c9:8f:f4:ac:95:46:1f:c2:bb:36:3f:0a:19:40:4a:83:
4d:b4:6c:68:4e:be:24:a3:f1:02:66:99:5c:d1:b5:30:52:d3:
6f:1c:e5:67:91:3e:62:0d:60:90:5d:30:9d:47:3d:a6:24:80:
b7:2e:96:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHDdTaUA6kNSPkzGlWHgdKt641A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxMUNBODJEQUYyMDFGRjBDMUI1ODRDRjdFQTk4QTFC
NkYwRUNEMjAeFw0yMzEyMTkxMjQ3MDlaFw0yNDEyMTcxMjUyMDlaMDMxMTAvBgNV
BAMTKDkwODY2MzhCRTg2Mzg5RDYwNjcxNzAzNjk5MjlGRDAxMDMzMDgzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cIvCpaMbgHPDNbiekbeNZVLa
wZnSjZuyr2HTokyGYY/XPUWO9uHxEYk28bkpNLak4/0B0Dq4DEL9kuuL43jbKw5y
4jwZAfM7GVbh0OshH9T+uZ4uArOaFG4TvtF9ZnFI2uAAB371LDCCQzLHpLAxnYFj
5pkeswuxEH3btCHm8FKfddm82daBvSq1ruckeA4VBVR9T+6Mn8xtMaGzPwHg9KMd
q17u3I8yudbZJxFm2J5P60mGG/POHy6TKRzJzyWpIKpokrz3hJPFRcGa9eQz1Pcv
PgrTDq6mTcUczbeon+fmXGITMChPRRpfjygW3mjNM3CaWwHc1nFgrO7l16qLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkIZji+hjidYGcXA2mSn9AQMwgyYwHwYDVR0j
BBgwFoAUMhHKgtryAf8MG1hM9+qYobbw7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmNyaXpZVjlQNlRMd1RyaG45TDhaV1JrendNWHE3UFVlZkFXTk1iM3c1
emQvMC8zMjExQ0E4MkRBRjIwMUZGMEMxQjU4NENGN0VBOThBMUI2RjBFQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMTFDQTgyREFGMjAxRkYw
QzFCNTg0Q0Y3RUE5OEExQjZGMEVDRDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zjcml6WVY5UDZUTHdUcmhuOUw4WldSa3p3TVhxN1BVZWZBV05NYjN3NXpkLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/eDANBgkqhkiG9w0BAQsFAAOCAQEAt5Z0
5IARIBLJoSP+CkOKM8UmIhWKzegGM+3b1ytMe+HFvawCdcSGBfmhnRwyLHVDMS7s
57f4S5LWZRbPtuAG+lgEuaQ/039ITVAbGO0eAau9XjzbUeA7LRSo0kNd7OOl5MO6
VuNGwbDBJxPlKSRtN9dIVjeMKLS+XmqSD3InF+j/rR6x3f0z2GPd/gCQjkRC4JA6
eq1CabGS8IRk/0w90P53cP+npLsNbYN45SpK81Hw+pZ0NkWSEEQmQOaigEsGpWTg
J9AidqrJj/SslUYfwrs2PwoZQEqDTbRsaE6+JKPxAmaZXNG1MFLTbxzlZ5E+Yg1g
kF0wnUc9piSAty6WKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org