Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e32302e36342e302f31382d3332203d3e203238353938.roa
File: 3230312e32302e36342e302f31382d3332203d3e203238353938.roa (raw, json)
Hash identifier: dcnMbJx1EGUM1dLeSE2ERPuWtglFe1V4SHhc2QCFptA=
Subject key identifier: 61:95:51:FF:28:6A:93:C4:3A:9F:E1:65:79:28:21:F7:17:82:B0:EE
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 418539D0C1CA971991DE53B923E035B71AD69CB6
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e32302e36342e302f31382d3332203d3e203238353938.roa
Signing time: Fri 20 Oct 2023 22:59:08 +0000
ROA not before: Fri 20 Oct 2023 22:54:08 +0000
ROA not after: Fri 18 Oct 2024 22:59:08 +0000
asID: 28598
IP address blocks: 201.20.64.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:85:39:d0:c1:ca:97:19:91:de:53:b9:23:e0:35:b7:1a:d6:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 20 22:54:08 2023 GMT
Not After : Oct 18 22:59:08 2024 GMT
Subject: CN=619551FF286A93C43A9FE165792821F71782B0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:92:0f:da:f5:a0:f9:12:0b:ad:5d:f2:09:f1:
f4:60:6c:66:af:0f:e0:64:31:5d:9f:f7:c2:6d:7d:
7b:28:d1:aa:9b:c7:ad:03:f2:50:25:54:9e:eb:1d:
b9:7e:64:37:ab:cb:c2:db:3c:db:3b:08:d7:95:a5:
dc:28:f5:f1:c4:30:b7:5b:cc:6c:8d:eb:e0:e7:c9:
bc:32:c8:dd:75:64:ed:cd:74:9c:19:a4:e2:63:ac:
1b:6b:a7:ba:1c:08:6e:4f:fe:fa:04:d5:d1:31:67:
96:9b:5f:c7:6f:bc:d1:0b:60:4b:c7:24:0b:a9:97:
d9:48:91:44:65:e7:fb:7b:0f:ea:e8:dc:b6:b2:b6:
2b:33:ed:b8:68:9d:ea:cf:fc:47:8a:f3:15:7a:a4:
f7:ab:2c:09:e8:b6:01:66:22:b4:7c:cd:dd:d6:c9:
29:b4:88:ec:dd:ee:6b:52:3d:7a:6c:91:d3:d0:d1:
1b:17:dd:5b:d0:d1:76:2e:ab:19:fb:9a:36:b3:5d:
27:01:d1:c6:5b:e5:43:b8:d3:5e:a4:62:d5:1e:db:
66:66:a1:32:2c:53:ae:ea:08:7f:0d:bb:41:7a:bd:
e6:4a:be:41:b9:c8:6b:07:af:c6:09:10:56:fc:b8:
2e:c6:98:c5:e1:61:e5:4e:24:0b:3e:ad:d7:2c:c4:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:51:FF:28:6A:93:C4:3A:9F:E1:65:79:28:21:F7:17:82:B0:EE
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e32302e36342e302f31382d3332203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:9c:21:2f:25:17:5a:f1:34:0c:03:5e:da:da:39:cc:ff:d5:
ed:a6:85:89:4a:04:5b:bb:f4:e2:05:7f:16:a3:46:be:0f:97:
ce:af:c1:30:aa:7c:85:07:cb:21:45:e0:5d:de:81:cf:4b:4d:
2b:53:d9:4c:71:71:e4:02:77:0c:03:44:3e:f2:76:60:74:4d:
03:2b:fd:f3:f3:20:5a:30:6f:04:a6:dd:35:ec:2f:bb:fd:72:
e3:f0:d3:d6:a3:a6:71:05:d6:d4:d3:c5:4d:73:d2:69:d3:82:
c6:d7:34:51:39:43:d2:ef:6a:6b:c5:ac:f6:05:a4:b1:77:44:
f3:7a:71:17:fb:c9:c4:04:e4:85:bd:78:dc:90:79:a3:5e:cf:
39:d9:9f:16:b7:76:93:6f:94:a2:7e:f8:bc:f4:d1:be:89:74:
e2:7b:34:43:6f:86:36:97:8c:a2:b2:86:43:ce:ea:37:03:92:
2f:7e:1b:af:c7:ec:e2:bf:db:fa:d1:25:13:e4:e4:37:5b:20:
97:c9:9e:b6:cf:4b:ec:33:75:dd:d6:dc:99:53:27:dd:2f:ca:
e4:93:73:7c:c3:08:04:d0:55:93:90:c4:a4:06:48:b1:76:b1:
27:0d:00:18:10:f8:0e:c6:94:f0:6b:f3:1a:61:34:3b:42:ba:
c0:3f:6d:2e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQYU50MHKlxmR3lO5I+A1txrWnLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjAyMjU0MDhaFw0yNDEwMTgyMjU5MDhaMDMxMTAvBgNV
BAMTKDYxOTU1MUZGMjg2QTkzQzQzQTlGRTE2NTc5MjgyMUY3MTc4MkIwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0kg/a9aD5EgutXfIJ8fRgbGav
D+BkMV2f98JtfXso0aqbx60D8lAlVJ7rHbl+ZDery8LbPNs7CNeVpdwo9fHEMLdb
zGyN6+DnybwyyN11ZO3NdJwZpOJjrBtrp7ocCG5P/voE1dExZ5abX8dvvNELYEvH
JAupl9lIkURl5/t7D+ro3Laytisz7bhonerP/EeK8xV6pPerLAnotgFmIrR8zd3W
ySm0iOzd7mtSPXpskdPQ0RsX3VvQ0XYuqxn7mjazXScB0cZb5UO4016kYtUe22Zm
oTIsU67qCH8Nu0F6veZKvkG5yGsHr8YJEFb8uC7GmMXhYeVOJAs+rdcsxCULAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYZVR/yhqk8Q6n+FleSgh9xeCsO4wHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzIzMDMxMmUzMjMwMmUzNjM0MmUzMDJmMzEzODJkMzMzMjIwM2QzZTIwMzIzODM1
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBskUQDANBgkqhkiG9w0BAQsFAAOCAQEALZwhLyUXWvE0
DANe2to5zP/V7aaFiUoEW7v04gV/FqNGvg+Xzq/BMKp8hQfLIUXgXd6Bz0tNK1PZ
THFx5AJ3DANEPvJ2YHRNAyv98/MgWjBvBKbdNewvu/1y4/DT1qOmcQXW1NPFTXPS
adOCxtc0UTlD0u9qa8Ws9gWksXdE83pxF/vJxATkhb143JB5o17POdmfFrd2k2+U
on74vPTRvol04ns0Q2+GNpeMorKGQ87qNwOSL34br8fs4r/b+tElE+TkN1sgl8me
ts9L7DN13dbcmVMn3S/K5JNzfMMIBNBVk5DEpAZIsXaxJw0AGBD4DsaU8GvzGmE0
O0K6wD9tLg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:13 2025 by rpki-client