Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa
File: 3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (raw, json)
Hash identifier: eW1P2MRpiBiw/Kt53AtGGui9rCCQm2hN4lR4TVPbcCI=
Subject key identifier: FA:D8:5A:96:9D:49:89:A4:0D:6A:58:54:21:A9:27:FF:1C:BD:69:7A
Certificate issuer: /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial: 22D08097D2D6FCE253B2EE1A069ECA770E4C6248
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa
Signing time: Wed 20 Dec 2023 15:04:10 +0000
ROA not before: Wed 20 Dec 2023 14:59:10 +0000
ROA not after: Wed 18 Dec 2024 15:04:10 +0000
asID: 263566
IP address blocks: 170.79.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d0:80:97:d2:d6:fc:e2:53:b2:ee:1a:06:9e:ca:77:0e:4c:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Validity
Not Before: Dec 20 14:59:10 2023 GMT
Not After : Dec 18 15:04:10 2024 GMT
Subject: CN=FAD85A969D4989A40D6A585421A927FF1CBD697A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:e9:01:b4:97:e5:0d:85:a9:b9:ea:c8:1d:
77:b2:c3:71:4b:39:c2:0f:92:1d:c6:18:51:69:8f:
15:d1:cb:74:0f:78:1c:41:69:85:e1:9e:57:32:b8:
d0:af:82:21:c7:fc:94:3f:b0:52:4d:01:ca:4a:a8:
d2:49:83:4d:f8:09:78:24:55:1a:c4:61:71:f8:32:
c1:11:70:63:0a:3c:2a:a1:5d:2f:b2:11:24:1f:c2:
a8:41:e6:8e:a3:de:4c:61:12:ae:49:b9:00:da:1e:
81:c2:ff:ee:de:f8:19:2b:27:2a:d2:74:ff:d0:e2:
8c:c4:e6:4f:f6:a5:de:39:0d:4a:4d:9a:8b:0f:39:
51:4f:ae:29:04:02:34:5a:9b:71:51:69:87:b4:96:
da:78:83:09:9f:41:c4:3e:e6:0c:b1:c6:f6:73:34:
6f:59:14:70:f0:c4:06:0a:4c:5e:9e:28:95:72:26:
d5:25:75:fa:bd:eb:e2:ab:8a:4c:c7:da:7e:15:ac:
9e:72:16:ef:bb:96:8e:82:54:14:30:61:9e:a1:c3:
c1:33:99:2d:dd:4c:81:cd:7e:5b:ce:73:5d:85:09:
13:a7:04:53:cc:91:48:f8:1e:8b:51:38:ff:cd:d0:
56:80:05:7b:d2:43:17:18:21:c7:0e:79:86:e1:4a:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:5A:96:9D:49:89:A4:0D:6A:58:54:21:A9:27:FF:1C:BD:69:7A
X509v3 Authority Key Identifier:
keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8a:fd:ea:12:c7:b0:97:49:c5:af:da:01:a6:a2:76:b3:09:
d4:4f:dd:62:6c:68:3f:86:2b:b0:7c:96:d8:e6:48:e3:93:2e:
cc:4a:5d:47:91:1f:be:9a:20:7a:7e:1d:e1:db:20:80:9f:af:
7e:fb:96:93:8d:12:b2:2d:d2:1f:d1:3e:0b:15:e0:fd:03:ad:
1a:e0:73:d8:1f:08:f5:b6:51:4e:17:f7:f2:2b:ee:23:5e:54:
ca:0f:75:b8:42:1e:9f:2d:18:bb:f5:69:4e:bd:f0:3c:42:8c:
be:06:da:c5:22:ea:cd:5c:6c:89:c4:83:bf:2f:27:86:f9:71:
3a:b0:26:96:82:d7:dd:0c:41:31:57:22:5e:27:fd:9f:57:ac:
52:4d:c6:78:5e:0b:ed:c9:a2:7d:5b:0d:d4:38:2f:26:50:3a:
40:84:08:99:4f:46:28:14:e8:7d:35:54:f6:a7:0a:1e:f9:01:
44:62:f2:46:a7:1c:e1:4f:1d:3d:cf:2e:bd:d6:47:bd:8f:f9:
07:a0:be:01:47:1a:17:58:ee:6c:8f:52:94:17:5e:7a:7e:39:
e9:f6:88:18:23:d4:0e:17:1e:67:f3:ea:56:03:6b:0e:b0:47:
eb:6b:8b:5d:94:40:8d:a4:de:24:a1:e9:c3:00:e7:ee:e3:d9:
93:58:09:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUItCAl9LW/OJTsu4aBp7Kdw5MYkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFMjI0MjAzRDAwMzcxMTFCRjY4RjMxN0FBNUI3OUZB
QjNFRkI3NzAeFw0yMzEyMjAxNDU5MTBaFw0yNDEyMTgxNTA0MTBaMDMxMTAvBgNV
BAMTKEZBRDg1QTk2OUQ0OTg5QTQwRDZBNTg1NDIxQTkyN0ZGMUNCRDY5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P+kBtJflDYWpuerIHXeyw3FL
OcIPkh3GGFFpjxXRy3QPeBxBaYXhnlcyuNCvgiHH/JQ/sFJNAcpKqNJJg034CXgk
VRrEYXH4MsERcGMKPCqhXS+yESQfwqhB5o6j3kxhEq5JuQDaHoHC/+7e+BkrJyrS
dP/Q4ozE5k/2pd45DUpNmosPOVFPrikEAjRam3FRaYe0ltp4gwmfQcQ+5gyxxvZz
NG9ZFHDwxAYKTF6eKJVyJtUldfq96+KrikzH2n4VrJ5yFu+7lo6CVBQwYZ6hw8Ez
mS3dTIHNflvOc12FCROnBFPMkUj4HotROP/N0FaABXvSQxcYIccOeYbhSruTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+thalp1JiaQNalhUIakn/xy9aXowHwYDVR0j
BBgwFoAUOOIkID0ANxEb9o8xeqW3n6s++3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw
c2QvMC8zOEUyMjQyMDNEMDAzNzExMUJGNjhGMzE3QUE1Qjc5RkFCM0VGQjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RTIyNDIwM0QwMDM3MTEx
QkY2OEYzMTdBQTVCNzlGQUIzRUZCNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0YWZYcmVQZVltYlJDMmlpZVVOWHliRlV3cHdlOHFudHZ2MmkyckpBcHNkLzAv
MzEzNzMwMmUzNzM5MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk8cMA0GCSqGSIb3DQEBCwUAA4IBAQAQiv3qEsew
l0nFr9oBpqJ2swnUT91ibGg/hiuwfJbY5kjjky7MSl1HkR++miB6fh3h2yCAn69+
+5aTjRKyLdIf0T4LFeD9A60a4HPYHwj1tlFOF/fyK+4jXlTKD3W4Qh6fLRi79WlO
vfA8Qoy+BtrFIurNXGyJxIO/LyeG+XE6sCaWgtfdDEExVyJeJ/2fV6xSTcZ4Xgvt
yaJ9Ww3UOC8mUDpAhAiZT0YoFOh9NVT2pwoe+QFEYvJGpxzhTx09zy691ke9j/kH
oL4BRxoXWO5sj1KUF156fjnp9ogYI9QOFx5n8+pWA2sOsEfra4tdlECNpN4koenD
AOfu49mTWAn0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org