Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
File: 3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier: zxodVkBpRtBr+D3vkf1d+Pm9/tKsYGKat7PH34eFD20=
Subject key identifier: 4D:D7:DA:E7:78:A5:B1:0A:55:2E:57:C7:24:9A:FE:EB:4B:B3:52:E3
Certificate issuer: /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial: 0FA21438384DE6CEDBF555AF93BE48BBB05CBA3A
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
Signing time: Mon 20 May 2024 13:11:42 +0000
ROA not before: Mon 20 May 2024 13:06:42 +0000
ROA not after: Mon 19 May 2025 13:11:42 +0000
asID: 262272
IP address blocks: 138.36.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a2:14:38:38:4d:e6:ce:db:f5:55:af:93:be:48:bb:b0:5c:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Validity
Not Before: May 20 13:06:42 2024 GMT
Not After : May 19 13:11:42 2025 GMT
Subject: CN=4DD7DAE778A5B10A552E57C7249AFEEB4BB352E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:07:df:d6:88:b1:5a:a7:8a:c3:06:50:70:
bd:ed:07:28:2b:c4:7c:1c:5a:ef:62:16:21:35:83:
00:79:0e:fd:66:20:7f:b9:b9:ea:91:8a:8b:61:00:
71:63:ed:cb:ab:09:1f:f3:5c:67:94:c8:73:0a:a2:
b8:58:12:99:a7:7b:63:19:f3:54:e0:ff:42:09:77:
fe:86:2a:8f:78:92:75:71:1f:6d:fe:d5:c3:40:90:
1d:ca:ea:b6:3f:24:72:9b:b0:9d:65:a6:46:e0:a4:
e8:51:d8:56:b6:1c:f8:4d:0a:5d:21:53:d9:72:b2:
c9:d8:8b:74:c2:87:32:96:62:95:a3:e9:5d:48:a1:
e6:ca:40:ee:b1:2b:8a:68:c2:6c:d5:d0:cd:1f:c3:
f4:4d:af:35:64:89:db:88:c5:c3:45:3e:92:43:23:
03:d2:c9:6a:2d:42:b0:cc:ec:49:7f:2b:5f:bc:e8:
53:19:b0:9b:73:10:32:d4:ad:37:bd:79:37:2c:36:
57:17:3d:e2:71:70:43:2c:94:77:39:75:d9:50:f3:
c1:ac:4e:1a:ff:0d:50:36:58:10:33:e6:c5:11:bf:
22:96:e1:59:2e:59:27:35:32:fb:bb:43:e4:65:ce:
0f:8f:b6:4e:2c:29:62:a3:df:33:98:84:d7:2e:e6:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:DA:E7:78:A5:B1:0A:55:2E:57:C7:24:9A:FE:EB:4B:B3:52:E3
X509v3 Authority Key Identifier:
keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.180.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5a:02:de:5f:4e:61:07:b5:e4:c8:fa:06:17:4f:cb:90:b2:
6d:24:f2:fe:78:ae:0f:ca:82:24:6b:a9:8e:84:47:83:13:ca:
04:e5:6c:2e:6e:07:2a:dd:0e:e5:1e:fb:b5:e2:d4:a8:96:47:
84:cf:cb:3a:d5:2a:c0:43:85:43:53:1f:74:e9:31:13:bf:40:
42:92:3f:6f:59:1a:eb:5b:6b:94:1c:43:a5:41:ba:a9:3c:3e:
06:df:4b:d6:2f:8c:80:8c:59:76:4c:ce:9e:0a:a1:81:1d:b0:
e2:71:e9:8d:73:5d:56:f9:f0:67:1d:83:d8:27:82:c9:c6:9e:
e1:87:e2:aa:dd:56:c0:40:bd:92:a0:c4:ca:3b:ae:2e:c6:4c:
9c:41:13:15:10:5d:ad:d5:55:2a:51:ca:5d:27:c8:5e:a2:84:
86:8a:5a:f2:0f:4e:dc:cb:4c:64:a4:ec:b0:08:6f:4e:17:96:
b5:ca:73:5c:b6:6f:f0:49:1e:66:72:3d:53:6e:3f:80:54:28:
13:80:8e:2d:d6:61:d8:4e:df:90:2b:f5:33:35:44:2f:1a:8b:
7b:24:69:31:8c:05:0d:6b:3d:4b:96:14:d7:f9:f4:9b:31:68:
2f:a2:4e:c8:35:63:a1:a6:27:7e:04:dc:27:49:c0:67:5f:98:
e7:e9:dc:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD6IUODhN5s7b9VWvk75Iu7BcujowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwOTU5NzAxRTA1N0Q3Q0NBQjM5QTc2QzJCNkFGNkU1
MTM0ODExRTAeFw0yNDA1MjAxMzA2NDJaFw0yNTA1MTkxMzExNDJaMDMxMTAvBgNV
BAMTKDRERDdEQUU3NzhBNUIxMEE1NTJFNTdDNzI0OUFGRUVCNEJCMzUyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWwff1oixWqeKwwZQcL3tBygr
xHwcWu9iFiE1gwB5Dv1mIH+5ueqRiothAHFj7curCR/zXGeUyHMKorhYEpmne2MZ
81Tg/0IJd/6GKo94knVxH23+1cNAkB3K6rY/JHKbsJ1lpkbgpOhR2Fa2HPhNCl0h
U9lyssnYi3TChzKWYpWj6V1IoebKQO6xK4powmzV0M0fw/RNrzVkiduIxcNFPpJD
IwPSyWotQrDM7El/K1+86FMZsJtzEDLUrTe9eTcsNlcXPeJxcEMslHc5ddlQ88Gs
Thr/DVA2WBAz5sURvyKW4VkuWSc1Mvu7Q+Rlzg+Ptk4sKWKj3zOYhNcu5qd9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTdfa53ilsQpVLlfHJJr+60uzUuMwHwYDVR0j
BBgwFoAUHglZcB4FfXzKs5p2wravblE0gR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMC8xRTA5NTk3MDFFMDU3RDdDQ0FCMzlBNzZDMkI2QUY2RTUxMzQ4MTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMDk1OTcwMUUwNTdEN0ND
QUIzOUE3NkMyQjZBRjZFNTEzNDgxMUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzAv
MzEzMzM4MmUzMzM2MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJLQwDQYJKoZIhvcNAQELBQADggEBAEBaAt5f
TmEHteTI+gYXT8uQsm0k8v54rg/KgiRrqY6ER4MTygTlbC5uByrdDuUe+7Xi1KiW
R4TPyzrVKsBDhUNTH3TpMRO/QEKSP29ZGutba5QcQ6VBuqk8PgbfS9YvjICMWXZM
zp4KoYEdsOJx6Y1zXVb58Gcdg9gngsnGnuGH4qrdVsBAvZKgxMo7ri7GTJxBExUQ
Xa3VVSpRyl0nyF6ihIaKWvIPTtzLTGSk7LAIb04XlrXKc1y2b/BJHmZyPVNuP4BU
KBOAji3WYdhO35Ar9TM1RC8ai3skaTGMBQ1rPUuWFNf59JsxaC+iTsg1Y6GmJ34E
3CdJwGdfmOfp3Ic=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org