Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e332e302f32342d3234203d3e20323634353234.roa
File: 3133382e302e332e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier: OEYDyrByeg1I5ANzQhrkpVkXRpnMk4U0FRDvrYXV3Ug=
Subject key identifier: 95:D9:B1:A8:DC:F3:E6:BB:07:BE:5B:CE:B3:B8:22:10:02:5F:56:9B
Certificate issuer: /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial: 0D272554F8C26F464DA1803BB99E120F8E722AD1
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e332e302f32342d3234203d3e20323634353234.roa
Signing time: Mon 04 Mar 2024 19:26:11 +0000
ROA not before: Mon 04 Mar 2024 19:21:11 +0000
ROA not after: Mon 03 Mar 2025 19:26:11 +0000
asID: 264524
IP address blocks: 138.0.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:27:25:54:f8:c2:6f:46:4d:a1:80:3b:b9:9e:12:0f:8e:72:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Validity
Not Before: Mar 4 19:21:11 2024 GMT
Not After : Mar 3 19:26:11 2025 GMT
Subject: CN=95D9B1A8DCF3E6BB07BE5BCEB3B82210025F569B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:1b:2b:db:ff:c0:a9:1b:18:c1:a6:70:b9:
84:6e:9e:8e:2f:bd:94:63:cb:d7:83:51:c2:44:0e:
56:28:eb:89:71:b5:e0:d7:4a:2e:e4:1b:99:2b:7d:
6b:a1:c7:73:64:83:48:dc:e4:60:f9:8d:f8:49:95:
2f:86:eb:f1:d2:8a:99:ee:1e:f9:5c:47:cd:28:0d:
19:cd:53:5d:19:39:e4:a1:93:83:93:80:10:05:10:
7a:aa:2a:df:8a:00:e4:32:2b:b9:48:ff:e8:1b:eb:
30:c2:58:d9:0b:24:85:32:94:30:93:6e:e1:34:76:
cc:25:d2:8a:5d:68:cf:b5:09:be:21:d7:ff:06:a1:
80:b3:b2:98:59:d0:ab:2b:68:fe:26:4e:87:17:3c:
0a:ca:06:6d:47:8b:df:b3:89:3d:29:42:a4:29:3f:
21:90:1f:f2:43:b7:99:01:73:54:f4:a3:ac:aa:0d:
56:03:b4:1b:cd:73:ba:cd:93:a3:09:98:98:17:0a:
32:ed:c7:bc:5f:42:f1:e4:f1:78:33:78:c0:b6:c1:
e8:ef:bc:8b:cd:74:c5:cc:21:54:d8:e8:28:6e:48:
e1:8c:fa:e2:c4:06:b9:44:c3:25:4e:57:81:d9:5a:
af:61:1e:60:34:82:6e:0c:3d:68:c4:0b:5d:e3:b9:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:B1:A8:DC:F3:E6:BB:07:BE:5B:CE:B3:B8:22:10:02:5F:56:9B
X509v3 Authority Key Identifier:
keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e332e302f32342d3234203d3e20323634353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.3.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2c:64:04:1e:6e:53:29:85:5d:67:e9:5e:ea:a0:96:15:47:
54:3d:f7:98:8a:27:e6:62:4b:f4:9e:98:e3:ed:d2:39:4d:d3:
67:6c:fd:bd:ff:24:6f:86:2c:43:05:a4:68:df:e9:91:0d:3b:
c6:13:df:47:5d:4a:2d:d7:c1:3e:89:de:48:08:ed:6c:24:ee:
5b:ce:f3:4b:80:e8:a0:d2:2a:43:9a:5f:48:53:ef:c3:4b:e7:
55:09:8d:83:72:0c:19:dc:66:93:c9:22:97:f6:f2:3f:ec:e5:
f3:45:f5:d2:28:e8:0f:f7:23:7a:f1:51:d9:78:42:25:0a:70:
26:4d:81:3c:df:c7:e7:aa:ca:e7:01:1e:30:15:d8:f6:7b:f0:
15:82:8b:31:d9:20:08:1d:85:5a:a1:e4:c5:f1:e4:99:da:98:
4d:da:e1:43:b5:6d:de:18:11:23:1f:a3:bb:76:05:03:af:ea:
23:99:41:6c:b4:07:f6:2a:84:92:58:3e:67:1a:5a:b5:92:b3:
0d:58:68:56:69:30:6e:19:57:fa:5c:1d:2d:10:c1:cf:db:1a:
70:e4:6a:f7:d9:b4:c3:79:58:2d:d4:f1:3c:ba:7e:7e:61:20:
d6:34:8a:3a:7c:37:e8:78:d5:21:bf:a3:7d:88:26:76:4b:4b:
5c:8b:e1:b6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUDSclVPjCb0ZNoYA7uZ4SD45yKtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5NkI5NkExRENCMjA1RjI3NkJGQ0VGM0Y2NUIyMzMz
MjVEMDc4ODAeFw0yNDAzMDQxOTIxMTFaFw0yNTAzMDMxOTI2MTFaMDMxMTAvBgNV
BAMTKDk1RDlCMUE4RENGM0U2QkIwN0JFNUJDRUIzQjgyMjEwMDI1RjU2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSBsr2//AqRsYwaZwuYRuno4v
vZRjy9eDUcJEDlYo64lxteDXSi7kG5krfWuhx3Nkg0jc5GD5jfhJlS+G6/HSipnu
HvlcR80oDRnNU10ZOeShk4OTgBAFEHqqKt+KAOQyK7lI/+gb6zDCWNkLJIUylDCT
buE0dswl0opdaM+1Cb4h1/8GoYCzsphZ0KsraP4mTocXPArKBm1Hi9+ziT0pQqQp
PyGQH/JDt5kBc1T0o6yqDVYDtBvNc7rNk6MJmJgXCjLtx7xfQvHk8XgzeMC2wejv
vIvNdMXMIVTY6ChuSOGM+uLEBrlEwyVOV4HZWq9hHmA0gm4MPWjEC13juc4PAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUldmxqNzz5rsHvlvOs7giEAJfVpswHwYDVR0j
BBgwFoAU1Za5ah3LIF8na/zvP2WyMzJdB4gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FEZkNocGRhRHQ2bkV5NE5yTHJ5aU1lZ0RCRG5KV0d5ZDk4dHBWU0xo
TDgvMC9ENTk2Qjk2QTFEQ0IyMDVGMjc2QkZDRUYzRjY1QjIzMzMyNUQwNzg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1OTZCOTZBMURDQjIwNUYy
NzZCRkNFRjNGNjVCMjMzMzI1RDA3ODguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBRGZDaHBkYUR0Nm5FeTROckxyeWlNZWdEQkRuSldHeWQ5OHRwVlNMaEw4LzAv
MzEzMzM4MmUzMDJlMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMy
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACKAAMwDQYJKoZIhvcNAQELBQADggEBAEYsZAQeblMphV1n
6V7qoJYVR1Q995iKJ+ZiS/SemOPt0jlN02ds/b3/JG+GLEMFpGjf6ZENO8YT30dd
Si3XwT6J3kgI7Wwk7lvO80uA6KDSKkOaX0hT78NL51UJjYNyDBncZpPJIpf28j/s
5fNF9dIo6A/3I3rxUdl4QiUKcCZNgTzfx+eqyucBHjAV2PZ78BWCizHZIAgdhVqh
5MXx5JnamE3a4UO1bd4YESMfo7t2BQOv6iOZQWy0B/YqhJJYPmcaWrWSsw1YaFZp
MG4ZV/pcHS0Qwc/bGnDkavfZtMN5WC3U8Ty6fn5hINY0ijp8N+h41SG/o32IJnZL
S1yL4bY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org