Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32332d3233203d3e203238353938.roa
File: 3136372e3235302e3133362e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier: bQ6wYnf4tk2nhiY388TNDLK/3iAlokl99QJagnOht6w=
Subject key identifier: 45:6A:5E:2B:45:4F:DC:01:6E:3E:C9:EB:DB:52:4D:C0:61:1E:64:2C
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 5622E82B667873D93BB82D6B12AAD2CD2B466C6C
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32332d3233203d3e203238353938.roa
Signing time: Mon 23 Oct 2023 13:00:56 +0000
ROA not before: Mon 23 Oct 2023 12:55:56 +0000
ROA not after: Mon 21 Oct 2024 13:00:56 +0000
asID: 28598
IP address blocks: 167.250.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:22:e8:2b:66:78:73:d9:3b:b8:2d:6b:12:aa:d2:cd:2b:46:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 23 12:55:56 2023 GMT
Not After : Oct 21 13:00:56 2024 GMT
Subject: CN=456A5E2B454FDC016E3EC9EBDB524DC0611E642C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:66:71:c2:17:de:a1:a8:28:98:39:00:7e:
c9:8f:ba:86:8a:67:f2:2a:01:c5:f0:17:24:ee:21:
6c:81:5e:8d:ea:00:b5:80:b7:96:5b:ef:9f:6f:9f:
c0:82:99:49:d7:97:4a:af:08:65:03:9a:77:74:e7:
4f:89:ad:05:5e:fb:e6:91:a7:1c:0e:ad:0a:45:35:
3c:73:12:d0:3b:09:61:a4:fe:3a:13:00:80:06:ec:
75:7a:e1:52:03:52:29:a4:b4:17:b7:86:ac:33:2e:
49:22:93:50:a4:39:a0:48:c5:33:66:bc:91:ad:56:
ea:08:60:0a:14:55:2c:cd:84:8f:61:b4:f1:9c:87:
67:ca:fb:e4:ca:f4:a5:ab:61:36:03:08:6e:13:28:
bb:f3:93:96:c9:97:60:71:48:5f:f9:36:54:36:2f:
27:e0:3f:11:e2:3b:50:75:d3:6b:e2:80:75:b8:1f:
00:d3:fe:2d:6d:71:2b:98:ca:6e:ad:91:d9:de:98:
c6:14:c8:8e:04:f4:64:32:c7:e4:b7:28:00:28:8f:
92:c5:eb:0d:88:c9:5d:c1:d9:e9:dd:eb:b5:8c:0b:
d8:6e:d5:34:67:1b:38:96:4f:bc:93:41:f6:c9:e5:
32:1a:04:66:e8:e2:40:f1:07:0c:9a:16:02:a3:1a:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:5E:2B:45:4F:DC:01:6E:3E:C9:EB:DB:52:4D:C0:61:1E:64:2C
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32332d3233203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.136.0/23
Signature Algorithm: sha256WithRSAEncryption
98:28:7d:29:1d:0b:ef:49:54:23:b1:58:8c:b7:0c:3c:13:ac:
37:29:a6:77:53:12:63:60:03:50:b7:f8:3f:9e:30:da:58:a0:
00:9d:37:f3:76:98:31:06:2c:e1:af:10:29:2b:15:50:02:5f:
18:14:ae:5b:3b:01:8c:f0:f6:cb:c3:91:32:ff:a9:55:9a:10:
d4:de:55:82:b6:da:26:02:a9:8c:f2:99:87:0a:9a:de:93:9b:
31:c9:7b:e3:1f:b4:52:4c:34:3e:84:b7:b6:c7:be:d9:b6:8e:
c8:15:5f:41:45:56:66:35:8d:45:87:35:65:f4:99:d3:d9:7d:
b9:43:9e:81:aa:01:79:be:15:9c:49:83:b0:f1:ec:d9:58:4b:
b4:58:8f:54:c2:8d:69:b6:b5:03:b8:a3:3e:70:71:87:ac:bb:
72:fd:80:5a:c0:72:a0:7c:09:5a:4a:a3:d2:31:cc:1b:6d:a4:
58:68:55:84:66:ef:38:17:7c:0b:88:54:3e:17:8e:17:4e:05:
4a:61:5d:3d:01:70:4e:c8:12:6d:ae:f2:3b:78:28:7d:89:55:
1f:5c:2d:0f:7f:2d:66:1e:31:da:0e:9d:74:f4:24:f6:66:e3:
08:4f:77:8b:ee:75:1a:ec:eb:62:14:ca:e3:5b:2f:49:c8:1a:
41:e9:b0:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUViLoK2Z4c9k7uC1rEqrSzStGbGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU1NTZaFw0yNDEwMjExMzAwNTZaMDMxMTAvBgNV
BAMTKDQ1NkE1RTJCNDU0RkRDMDE2RTNFQzlFQkRCNTI0REMwNjExRTY0MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdGZxwhfeoagomDkAfsmPuoaK
Z/IqAcXwFyTuIWyBXo3qALWAt5Zb759vn8CCmUnXl0qvCGUDmnd050+JrQVe++aR
pxwOrQpFNTxzEtA7CWGk/joTAIAG7HV64VIDUimktBe3hqwzLkkik1CkOaBIxTNm
vJGtVuoIYAoUVSzNhI9htPGch2fK++TK9KWrYTYDCG4TKLvzk5bJl2BxSF/5NlQ2
LyfgPxHiO1B102vigHW4HwDT/i1tcSuYym6tkdnemMYUyI4E9GQyx+S3KAAoj5LF
6w2IyV3B2end67WMC9hu1TRnGziWT7yTQfbJ5TIaBGbo4kDxBwyaFgKjGtu9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURWpeK0VP3AFuPsnr21JNwGEeZCwwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzNjM3MmUzMjM1MzAyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGn+ogwDQYJKoZIhvcNAQELBQADggEBAJgofSkd
C+9JVCOxWIy3DDwTrDcppndTEmNgA1C3+D+eMNpYoACdN/N2mDEGLOGvECkrFVAC
XxgUrls7AYzw9svDkTL/qVWaENTeVYK22iYCqYzymYcKmt6TmzHJe+MftFJMND6E
t7bHvtm2jsgVX0FFVmY1jUWHNWX0mdPZfblDnoGqAXm+FZxJg7Dx7NlYS7RYj1TC
jWm2tQO4oz5wcYesu3L9gFrAcqB8CVpKo9IxzBttpFhoVYRm7zgXfAuIVD4XjhdO
BUphXT0BcE7IEm2u8jt4KH2JVR9cLQ9/LWYeMdoOnXT0JPZm4whPd4vudRrs62IU
yuNbL0nIGkHpsJM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:02 2025 by rpki-client