Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa
File: 3138392e38392e302e302f32302d3332203d3e203238313832.roa (raw, json)
Hash identifier: /AAkUqla+hrWaPA8IWQWxom7RlFRZKQXXard/zHth0c=
Subject key identifier: B5:94:86:6D:48:0A:66:6F:4B:17:6D:D0:3E:CE:F2:E2:07:CB:B5:D1
Certificate issuer: /CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
Certificate serial: 0C0C2B640D136C20F2C243A4423CA27845C05FD9
Authority key identifier: 4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa
Signing time: Mon 11 Nov 2024 20:31:11 +0000
ROA not before: Mon 11 Nov 2024 20:26:11 +0000
ROA not after: Mon 10 Nov 2025 20:31:11 +0000
asID: 28182
IP address blocks: 189.89.0.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0c:2b:64:0d:13:6c:20:f2:c2:43:a4:42:3c:a2:78:45:c0:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
Validity
Not Before: Nov 11 20:26:11 2024 GMT
Not After : Nov 10 20:31:11 2025 GMT
Subject: CN=B594866D480A666F4B176DD03ECEF2E207CBB5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:98:86:d8:f9:4e:d2:a2:10:82:24:41:de:
06:ba:ee:9c:1a:f9:cf:17:c6:f1:08:96:e0:4b:50:
3c:fb:83:e1:28:0b:d7:7a:d2:7d:eb:a2:91:10:3d:
c1:93:1f:f6:9b:02:c3:28:0d:0b:eb:04:2c:cb:f7:
a4:3a:7e:ab:33:6f:a7:9d:4f:12:3a:a8:9a:7e:85:
f7:37:9f:5b:e7:ee:7a:37:82:5c:0b:e0:20:0a:52:
61:d5:98:a8:03:04:6f:94:33:57:c1:03:d1:71:4e:
ee:c6:65:4f:3b:87:5e:a9:a0:ee:0f:4f:54:a7:1b:
7e:b7:04:a8:5d:1b:9c:ba:b9:63:be:f4:7b:0a:4b:
58:ee:95:f6:69:4e:29:74:62:f9:3e:db:60:13:66:
9d:f5:59:93:c9:b1:1e:b8:31:12:48:57:9e:a1:c5:
c6:8e:4e:1a:b1:88:96:57:32:b4:09:b1:f1:eb:9c:
d8:8b:d0:cb:3d:d2:99:26:52:77:07:84:bf:95:57:
9e:39:51:cd:b2:5c:2d:c3:c2:7b:8c:14:5a:7c:3a:
c6:39:49:3f:27:f2:d2:3e:77:2b:d9:f2:c0:8a:43:
db:46:f8:c4:53:cd:cf:6b:ce:8a:38:e4:b4:8a:23:
f3:ff:b2:11:15:6c:d1:81:39:f7:51:83:e9:2e:2a:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:86:6D:48:0A:66:6F:4B:17:6D:D0:3E:CE:F2:E2:07:CB:B5:D1
X509v3 Authority Key Identifier:
keyid:4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:4a:8a:02:a2:5b:80:a5:26:a8:9c:00:87:ce:89:89:6e:76:
66:85:97:30:36:eb:20:20:3b:c3:17:88:a3:7e:6e:62:9b:e3:
58:e3:37:69:76:50:18:22:c4:1f:ef:b7:60:01:a7:76:cc:78:
20:41:e4:d5:7f:5a:c1:26:f1:d0:4c:36:ed:34:55:c9:4a:32:
f6:72:fe:74:b5:ca:dd:e7:a4:1a:6a:02:eb:d9:b8:54:12:51:
98:54:e0:45:4a:87:9c:79:26:ac:20:ce:62:1e:e4:3d:5a:da:
98:41:2b:fa:7d:87:b9:26:f9:f8:7b:a8:f3:01:ca:8c:c2:11:
27:18:a6:41:35:4e:1c:ef:ec:3c:77:ed:0a:5c:51:bc:1e:6f:
42:54:6c:f1:71:b4:b4:b1:93:c5:f5:98:06:ae:2d:50:03:d5:
db:b6:df:e7:a5:07:1d:ef:fa:51:06:8c:d5:41:a3:ab:aa:2b:
7c:d6:db:4e:99:18:6e:ca:24:e0:e2:0c:c7:9c:50:fd:91:5b:
16:35:0c:e9:dd:cd:03:d0:d6:d8:37:fb:af:4e:44:27:54:aa:
ce:a5:d8:d0:4f:17:e2:97:41:a9:c2:1a:48:03:2e:ac:3a:ee:
d0:05:af:b1:df:e5:19:c2:64:75:c8:90:ec:eb:b2:58:bc:20:
5a:dd:61:3b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUDAwrZA0TbCDywkOkQjyieEXAX9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFQTZCMDUxRDRGOTI2MjUxRDU4ODlDNDEyRDZEOTRE
RDI1MjBGQzAeFw0yNDExMTEyMDI2MTFaFw0yNTExMTAyMDMxMTFaMDMxMTAvBgNV
BAMTKEI1OTQ4NjZENDgwQTY2NkY0QjE3NkREMDNFQ0VGMkUyMDdDQkI1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiZiG2PlO0qIQgiRB3ga67pwa
+c8XxvEIluBLUDz7g+EoC9d60n3ropEQPcGTH/abAsMoDQvrBCzL96Q6fqszb6ed
TxI6qJp+hfc3n1vn7no3glwL4CAKUmHVmKgDBG+UM1fBA9FxTu7GZU87h16poO4P
T1SnG363BKhdG5y6uWO+9HsKS1julfZpTil0Yvk+22ATZp31WZPJsR64MRJIV56h
xcaOThqxiJZXMrQJsfHrnNiL0Ms90pkmUncHhL+VV545Uc2yXC3DwnuMFFp8OsY5
ST8n8tI+dyvZ8sCKQ9tG+MRTzc9rzoo45LSKI/P/shEVbNGBOfdRg+kuKmBZAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUtZSGbUgKZm9LF23QPs7y4gfLtdEwHwYDVR0j
BBgwFoAUT+prBR1PkmJR1YicQS1tlN0lIPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC80RkVBNkIwNTFENEY5MjYyNTFENTg4OUM0MTJENkQ5NEREMjUyMEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRUE2QjA1MUQ0RjkyNjI1
MUQ1ODg5QzQxMkQ2RDk0REQyNTIwRkMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS9WQAwDQYJKoZIhvcNAQELBQADggEBAE5KigKiW4ClJqic
AIfOiYludmaFlzA26yAgO8MXiKN+bmKb41jjN2l2UBgixB/vt2ABp3bMeCBB5NV/
WsEm8dBMNu00VclKMvZy/nS1yt3npBpqAuvZuFQSUZhU4EVKh5x5JqwgzmIe5D1a
2phBK/p9h7km+fh7qPMByozCEScYpkE1Thzv7Dx37QpcUbweb0JUbPFxtLSxk8X1
mAauLVAD1du23+elBx3v+lEGjNVBo6uqK3zW206ZGG7KJODiDMecUP2RWxY1DOnd
zQPQ1tg3+69ORCdUqs6l2NBPF+KXQanCGkgDLqw67tAFr7Hf5RnCZHXIkOzrsli8
IFrdYTs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:14 2025 by rpki-client