Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32342d3234203d3e20323634323135.roa
File: 3133382e39392e3133322e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier: dVYNO4zssX9XnU5CFkUuXMJdkigTC5L9mvsPZBDZAwI=
Subject key identifier: 64:A0:22:0D:FC:0B:2C:D7:12:4E:D3:E2:6F:B1:28:59:F3:D4:B3:F3
Certificate issuer: /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial: 1CDB7F068170DF301EB84D413AFB4189900FF98D
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32342d3234203d3e20323634323135.roa
Signing time: Thu 20 Apr 2023 14:14:17 +0000
ROA not before: Thu 20 Apr 2023 14:09:17 +0000
ROA not after: Thu 18 Apr 2024 14:14:17 +0000
asID: 264215
IP address blocks: 138.99.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:7f:06:81:70:df:30:1e:b8:4d:41:3a:fb:41:89:90:0f:f9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
Validity
Not Before: Apr 20 14:09:17 2023 GMT
Not After : Apr 18 14:14:17 2024 GMT
Subject: CN=64A0220DFC0B2CD7124ED3E26FB12859F3D4B3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:22:23:e7:52:2c:f8:4a:03:39:c6:5e:7b:
52:eb:18:05:fd:c8:9a:9d:c0:40:1b:48:81:03:af:
03:23:ff:61:d8:ff:42:e3:0f:00:83:2d:55:b9:31:
11:f1:9a:9c:2e:1b:71:42:29:d1:3a:48:75:7d:fd:
0f:9e:06:84:ee:1e:a6:92:ed:cd:c2:7a:20:1c:d3:
2e:1e:23:a2:9f:dc:61:f4:4e:24:13:9a:4a:8a:b5:
dd:6e:f5:44:4c:e7:11:75:b4:15:e5:0d:51:4b:fa:
b8:e3:07:c2:4f:db:66:59:96:6a:3e:64:0e:49:0e:
72:e6:1d:9c:a9:29:29:32:85:cb:44:95:3b:b5:08:
ec:5f:44:ce:b4:53:78:5c:e9:74:70:ac:6d:64:bc:
f6:46:14:29:1c:72:52:8e:9e:ed:f3:91:15:a1:f5:
d1:8e:ab:fe:3e:07:cb:be:53:4b:e2:e8:0c:16:ed:
57:fa:1a:18:3e:21:4f:48:00:98:e4:2b:0e:79:22:
c0:7e:fc:97:92:1d:37:5a:30:40:e2:85:db:55:9c:
87:63:a4:c9:28:50:93:2b:38:2f:52:62:75:c1:f9:
66:7e:e5:b9:03:31:b9:f9:4d:8b:89:6e:2b:89:14:
aa:4b:5b:45:ef:e6:bd:7c:6d:26:32:eb:18:fa:35:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:22:0D:FC:0B:2C:D7:12:4E:D3:E2:6F:B1:28:59:F3:D4:B3:F3
X509v3 Authority Key Identifier:
keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32342d3234203d3e20323634323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.132.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5d:7d:67:ef:d4:67:bf:ff:46:e9:c4:d2:04:e1:9b:5c:b0:
73:22:82:8c:5e:08:74:c4:86:93:f7:c2:06:61:ef:58:be:74:
fa:c7:af:58:31:51:63:37:66:b2:f1:57:17:fc:04:b7:9e:db:
33:a6:fe:83:dd:66:07:f3:cc:49:ab:93:bf:7c:7f:cb:aa:e6:
1d:c8:6c:e5:b3:2b:37:bc:0f:7e:d4:c6:8c:02:de:d8:dc:63:
09:6f:81:e9:27:b3:5a:1c:c4:f1:09:d1:91:aa:a2:4c:c4:fc:
c2:9d:64:4c:50:4e:d5:96:ef:9e:d2:aa:18:66:00:ea:8f:7b:
1a:72:68:9b:27:4b:18:39:89:35:7b:42:19:93:6d:47:11:79:
c0:02:05:bd:dc:39:ae:ef:c5:c2:dd:21:4e:f1:36:c2:39:4c:
8c:7b:23:f3:bc:5b:87:d3:34:f3:56:a6:f5:38:1e:ae:92:50:
a0:79:5c:12:71:fd:86:59:a0:a9:ab:cf:d1:c0:eb:74:be:20:
5c:ec:b2:af:ad:17:fc:ff:b9:0e:34:bc:83:df:d4:f8:8a:3d:
50:9a:6d:3f:cb:bf:6c:65:7b:09:9f:11:0d:84:6a:34:d4:92:
b4:ff:71:28:65:d5:04:b6:59:cc:15:a5:b3:0c:e4:d7:cf:ef:
89:42:cb:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHNt/BoFw3zAeuE1BOvtBiZAP+Y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4OTExNkQ0Mzg2NkRDNDkzNThDODg3MUJEQ0FBNjRB
NTc0MDgwODAeFw0yMzA0MjAxNDA5MTdaFw0yNDA0MTgxNDE0MTdaMDMxMTAvBgNV
BAMTKDY0QTAyMjBERkMwQjJDRDcxMjRFRDNFMjZGQjEyODU5RjNENEIzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveSIj51Is+EoDOcZee1LrGAX9
yJqdwEAbSIEDrwMj/2HY/0LjDwCDLVW5MRHxmpwuG3FCKdE6SHV9/Q+eBoTuHqaS
7c3CeiAc0y4eI6Kf3GH0TiQTmkqKtd1u9URM5xF1tBXlDVFL+rjjB8JP22ZZlmo+
ZA5JDnLmHZypKSkyhctElTu1COxfRM60U3hc6XRwrG1kvPZGFCkcclKOnu3zkRWh
9dGOq/4+B8u+U0vi6AwW7Vf6Ghg+IU9IAJjkKw55IsB+/JeSHTdaMEDihdtVnIdj
pMkoUJMrOC9SYnXB+WZ+5bkDMbn5TYuJbiuJFKpLW0Xv5r18bSYy6xj6NdhjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZKAiDfwLLNcSTtPib7EoWfPUs/MwHwYDVR0j
BBgwFoAUn4kRbUOGbcSTWMiHG9yqZKV0CAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR05EdkpLV2h3Y0Z5V3JZWG9ZN1l4NlJoRmpYeEVpTUVzdHZOVnZGWTdx
SlIvMS85Rjg5MTE2RDQzODY2REM0OTM1OEM4ODcxQkRDQUE2NEE1NzQwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGODkxMTZENDM4NjZEQzQ5
MzU4Qzg4NzFCRENBQTY0QTU3NDA4MDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dORHZKS1dod2NGeVdyWVhvWTdZeDZSaEZqWHhFaU1Fc3R2TlZ2Rlk3cUpSLzEv
MzEzMzM4MmUzOTM5MmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKY4QwDQYJKoZIhvcNAQELBQADggEBAHJdfWfv
1Ge//0bpxNIE4ZtcsHMigoxeCHTEhpP3wgZh71i+dPrHr1gxUWM3ZrLxVxf8BLee
2zOm/oPdZgfzzEmrk798f8uq5h3IbOWzKze8D37UxowC3tjcYwlvgekns1ocxPEJ
0ZGqokzE/MKdZExQTtWW757SqhhmAOqPexpyaJsnSxg5iTV7QhmTbUcRecACBb3c
Oa7vxcLdIU7xNsI5TIx7I/O8W4fTNPNWpvU4Hq6SUKB5XBJx/YZZoKmrz9HA63S+
IFzssq+tF/z/uQ40vIPf1PiKPVCabT/Lv2xlewmfEQ2EajTUkrT/cShl1QS2WcwV
pbMM5NfP74lCy3U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org