Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
File: 3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa (raw, json)
Hash identifier: 4mnxlRI0XsKMRHxsdTRF33qtAQoaWSZbOz5NCqG0Yrc=
Subject key identifier: 68:AD:C4:70:18:35:F6:77:2B:6F:01:F0:E9:5A:C1:55:50:A3:1A:E0
Certificate issuer: /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial: 1320F13EC6E4236A7D389D1F1775E46EBAA18EA7
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
Signing time: Thu 04 Apr 2024 14:16:52 +0000
ROA not before: Thu 04 Apr 2024 14:11:52 +0000
ROA not after: Thu 03 Apr 2025 14:16:52 +0000
asID: 262532
IP address blocks: 128.201.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:20:f1:3e:c6:e4:23:6a:7d:38:9d:1f:17:75:e4:6e:ba:a1:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Validity
Not Before: Apr 4 14:11:52 2024 GMT
Not After : Apr 3 14:16:52 2025 GMT
Subject: CN=68ADC4701835F6772B6F01F0E95AC15550A31AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:c6:5c:cb:8e:dd:31:eb:e1:1c:ae:f1:12:
ff:8e:bd:b7:25:81:e9:55:fa:cb:2c:a2:c6:a8:0e:
ab:b6:6f:4d:e7:8d:2b:ab:87:4e:fa:95:c9:90:33:
8c:fe:88:a2:26:1f:a2:dc:52:b1:6c:2f:14:52:44:
28:69:67:c9:66:ef:6e:bd:04:0f:e3:02:12:00:c7:
ba:74:2e:d8:2b:ca:98:46:01:16:93:5c:81:dc:8e:
34:2d:8b:dd:cd:06:b7:ad:54:c9:83:1e:43:ec:1b:
43:85:97:54:54:6c:d7:4e:12:90:2d:0d:77:f3:00:
89:24:11:e9:b2:2d:e1:a4:f6:68:a8:59:29:4e:b3:
4e:2a:af:e4:09:28:a6:56:94:db:80:b0:00:2e:82:
a9:72:6b:d6:0f:f6:01:17:d0:4b:c1:13:89:d8:01:
71:44:f2:3c:15:a8:ba:c1:80:27:b1:af:5a:c9:0f:
51:eb:0a:ea:10:22:d7:ee:78:df:71:a6:91:bd:60:
49:33:43:16:bf:36:2b:aa:60:26:5c:44:c7:08:10:
c4:cd:d9:6b:b1:8d:0e:a5:0d:f1:46:11:1b:71:14:
ef:5f:e3:ce:db:5b:21:3d:1a:67:6a:99:04:ad:7b:
89:89:3e:03:27:ca:4d:66:9d:5f:28:49:a0:55:5d:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:C4:70:18:35:F6:77:2B:6F:01:F0:E9:5A:C1:55:50:A3:1A:E0
X509v3 Authority Key Identifier:
keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:7b:7f:c8:4e:0b:86:1c:b0:cf:6c:f1:dc:cb:df:62:d3:cb:
66:0d:b0:c7:f1:1b:5e:24:17:25:a5:ed:a5:5c:f2:16:4d:57:
8a:c7:35:6d:b7:43:81:d3:29:92:2a:6e:0b:7e:4d:5e:14:87:
38:af:e3:a8:48:03:05:55:02:18:7c:bb:c3:9f:c0:e2:56:ff:
26:75:7f:27:21:03:a5:e7:f9:53:53:b3:72:2d:8c:bd:2c:e4:
31:d4:eb:64:8a:75:1c:15:49:78:04:7f:65:52:90:c6:db:77:
9f:5b:c3:ab:b5:8b:64:22:33:d9:83:00:ec:63:3a:56:ec:82:
57:e0:38:17:eb:92:19:ac:29:37:a9:9e:69:cf:71:d1:5b:21:
75:40:a9:36:02:b0:7a:84:cf:ce:6a:cf:f4:5a:ba:9b:45:2d:
5f:03:98:87:3f:e5:dc:f3:a6:7e:17:22:06:00:d2:cb:d8:c3:
6d:50:84:e2:1a:72:d4:fa:29:dd:b0:5c:88:22:f5:20:1e:18:
44:17:77:32:ef:b0:03:4f:1f:d9:de:33:77:cb:fe:5c:4e:9c:
19:5b:59:8f:68:28:f5:da:34:ef:1f:e8:9f:0e:a8:e6:f3:a9:
8a:4f:f8:ae:6c:d8:7e:ca:a1:fb:ce:b3:a6:d8:f7:1e:4d:9c:
22:c9:08:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEyDxPsbkI2p9OJ0fF3XkbrqhjqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDNjM4QjQ1OUI0N0IwMDIwM0EzODY4RDBERjVGRjlB
REREQjQzMDAeFw0yNDA0MDQxNDExNTJaFw0yNTA0MDMxNDE2NTJaMDMxMTAvBgNV
BAMTKDY4QURDNDcwMTgzNUY2NzcyQjZGMDFGMEU5NUFDMTU1NTBBMzFBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DcZcy47dMevhHK7xEv+Ovbcl
gelV+sssosaoDqu2b03njSurh076lcmQM4z+iKImH6LcUrFsLxRSRChpZ8lm7269
BA/jAhIAx7p0LtgryphGARaTXIHcjjQti93NBretVMmDHkPsG0OFl1RUbNdOEpAt
DXfzAIkkEemyLeGk9mioWSlOs04qr+QJKKZWlNuAsAAugqlya9YP9gEX0EvBE4nY
AXFE8jwVqLrBgCexr1rJD1HrCuoQItfueN9xppG9YEkzQxa/NiuqYCZcRMcIEMTN
2WuxjQ6lDfFGERtxFO9f487bWyE9GmdqmQSte4mJPgMnyk1mnV8oSaBVXa+bAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaK3EcBg19ncrbwHw6VrBVVCjGuAwHwYDVR0j
BBgwFoAU7sY4tFm0ewAgOjho0N9f+a3dtDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMS9FRUM2MzhCNDU5QjQ3QjAwMjAzQTM4NjhEMERGNUZGOUFERERCNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQzYzOEI0NTlCNDdCMDAy
MDNBMzg2OEQwREY1RkY5QUREREI0MzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJeDANBgkqhkiG9w0BAQsFAAOCAQEAGHt/
yE4Lhhywz2zx3MvfYtPLZg2wx/EbXiQXJaXtpVzyFk1Xisc1bbdDgdMpkipuC35N
XhSHOK/jqEgDBVUCGHy7w5/A4lb/JnV/JyEDpef5U1Ozci2MvSzkMdTrZIp1HBVJ
eAR/ZVKQxtt3n1vDq7WLZCIz2YMA7GM6VuyCV+A4F+uSGawpN6meac9x0VshdUCp
NgKweoTPzmrP9Fq6m0UtXwOYhz/l3POmfhciBgDSy9jDbVCE4hpy1Pop3bBciCL1
IB4YRBd3Mu+wA08f2d4zd8v+XE6cGVtZj2go9do07x/onw6o5vOpik/4rmzYfsqh
+86zptj3Hk2cIskIMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org