Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa
File: 3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa (raw, json)
Hash identifier: w9fKXJR8qRK402WTd1FB1iwO0DS1m1fP0U7fMcw1Va4=
Subject key identifier: 22:C1:DD:2A:92:9D:4F:36:CA:AD:C5:6A:C1:8B:40:4B:DD:57:48:2A
Certificate issuer: /CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
Certificate serial: 260A34C195D4B3165A066BB3D08523F69C03E746
Authority key identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa
Signing time: Wed 20 Nov 2024 17:58:06 +0000
ROA not before: Wed 20 Nov 2024 17:53:06 +0000
ROA not after: Wed 19 Nov 2025 17:58:06 +0000
asID: 270718
IP address blocks: 189.90.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0a:34:c1:95:d4:b3:16:5a:06:6b:b3:d0:85:23:f6:9c:03:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
Validity
Not Before: Nov 20 17:53:06 2024 GMT
Not After : Nov 19 17:58:06 2025 GMT
Subject: CN=22C1DD2A929D4F36CAADC56AC18B404BDD57482A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b0:c7:9c:d6:77:f4:70:b3:86:3e:56:87:e8:
d5:62:d2:5f:9c:30:c3:e3:9f:29:77:9c:e4:90:48:
14:01:ee:69:aa:0f:d7:e6:91:03:3d:5d:40:d2:99:
04:f7:fe:25:a2:2e:d6:0f:41:92:69:8c:4d:ac:3d:
8f:21:a7:f3:97:e1:ac:e6:3e:36:d3:cd:93:2f:73:
aa:60:e8:87:7e:4d:7d:ee:f2:4c:a2:18:38:13:16:
76:13:e4:33:4c:69:7f:50:ea:97:96:45:5c:9e:6a:
64:b1:c9:92:a0:85:66:94:72:22:0b:77:fd:7f:21:
bb:dc:c9:d2:44:6a:c7:4e:cc:16:07:1a:66:1e:d0:
57:01:24:d3:b3:56:4e:fd:ac:a1:b2:f0:89:f6:70:
6b:76:14:69:07:8e:30:ba:3b:9c:29:2a:1b:91:e4:
6e:bf:ed:97:8d:52:07:9a:d1:ed:f6:07:fa:eb:a6:
3c:61:f0:18:80:ad:93:f6:fc:18:11:de:09:f2:ff:
2e:a6:22:84:5a:f5:42:2e:05:b0:59:c7:e4:44:be:
44:4a:4c:3e:0c:f2:c8:05:08:3b:df:ac:7d:c3:a0:
42:df:38:c9:dc:b7:e9:a0:e0:97:84:11:73:3c:a5:
ea:98:d6:42:c7:27:96:98:91:2d:00:56:c9:d4:d3:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:DD:2A:92:9D:4F:36:CA:AD:C5:6A:C1:8B:40:4B:DD:57:48:2A
X509v3 Authority Key Identifier:
keyid:4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.224.0/22
Signature Algorithm: sha256WithRSAEncryption
54:91:27:52:18:cf:7f:ef:4d:4a:36:7f:52:60:fe:e3:9c:6c:
5e:27:f2:d6:53:67:d5:f4:ff:69:57:d8:f3:9d:14:ee:84:ea:
e7:c6:e7:b6:70:be:f6:b5:9a:e8:da:f4:64:a8:51:45:91:08:
44:35:59:5e:4c:cf:bd:89:f6:76:50:bd:b8:9a:39:71:83:00:
95:e7:f1:06:c7:4f:0d:9d:e3:ed:0d:04:f3:b3:e1:88:b5:64:
9d:db:32:41:3b:5d:10:c6:0a:9c:de:46:a6:e8:b4:52:c6:66:
3f:17:d1:48:0f:ab:b3:a4:4f:09:7c:6a:58:83:7d:ef:d6:4f:
24:b6:71:b9:6a:78:d2:26:f5:f8:ba:2d:15:73:3b:01:4b:ce:
24:2c:df:cf:d6:a3:ca:49:66:d2:f4:26:ab:0b:ee:9f:b2:d7:
67:35:6f:4e:60:b3:80:42:80:d0:95:68:ec:b5:b5:c9:ed:06:
2d:c8:5c:b6:30:f2:71:32:dd:97:a0:e8:76:c6:c0:5f:71:c3:
ac:26:83:23:cf:52:fc:f5:ac:06:a5:a1:31:86:d0:e4:30:4f:
6a:6b:76:b8:31:a0:21:07:1c:77:09:6e:a5:10:30:95:59:ff:
a2:c5:6b:d0:d6:45:69:63:11:e2:ab:ed:98:eb:0e:65:89:fe:
18:57:e2:a0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJgo0wZXUsxZaBmuz0IUj9pwD50YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEExOTE3QUM3REY3NTdEOURDOUU3QTc3NjAyMzUwRTdC
QUZFM0Y2NTAeFw0yNDExMjAxNzUzMDZaFw0yNTExMTkxNzU4MDZaMDMxMTAvBgNV
BAMTKDIyQzFERDJBOTI5RDRGMzZDQUFEQzU2QUMxOEI0MDRCREQ1NzQ4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7sMec1nf0cLOGPlaH6NVi0l+c
MMPjnyl3nOSQSBQB7mmqD9fmkQM9XUDSmQT3/iWiLtYPQZJpjE2sPY8hp/OX4azm
PjbTzZMvc6pg6Id+TX3u8kyiGDgTFnYT5DNMaX9Q6peWRVyeamSxyZKghWaUciIL
d/1/IbvcydJEasdOzBYHGmYe0FcBJNOzVk79rKGy8In2cGt2FGkHjjC6O5wpKhuR
5G6/7ZeNUgea0e32B/rrpjxh8BiArZP2/BgR3gny/y6mIoRa9UIuBbBZx+REvkRK
TD4M8sgFCDvfrH3DoELfOMnct+mg4JeEEXM8peqY1kLHJ5aYkS0AVsnU05/3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIsHdKpKdTzbKrcVqwYtAS91XSCowHwYDVR0j
BBgwFoAUShkXrH33V9ncnnp3YCNQ57r+P2UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91Y1o5QUw2UkhMc1A2bU5MY1VzRjhORzdtaUNTNHZERzd4cjlUdlE0MUNi
LzAvNEExOTE3QUM3REY3NTdEOURDOUU3QTc3NjAyMzUwRTdCQUZFM0Y2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QTE5MTdBQzdERjc1N0Q5REM5
RTdBNzc2MDIzNTBFN0JBRkUzRjY1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
Y1o5QUw2UkhMc1A2bU5MY1VzRjhORzdtaUNTNHZERzd4cjlUdlE0MUNiLzAvMzEz
ODM5MmUzOTMwMmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzAz
NzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK9WuAwDQYJKoZIhvcNAQELBQADggEBAFSRJ1IYz3/v
TUo2f1Jg/uOcbF4n8tZTZ9X0/2lX2POdFO6E6ufG57Zwvva1muja9GSoUUWRCEQ1
WV5Mz72J9nZQvbiaOXGDAJXn8QbHTw2d4+0NBPOz4Yi1ZJ3bMkE7XRDGCpzeRqbo
tFLGZj8X0UgPq7OkTwl8aliDfe/WTyS2cblqeNIm9fi6LRVzOwFLziQs38/Wo8pJ
ZtL0JqsL7p+y12c1b05gs4BCgNCVaOy1tcntBi3IXLYw8nEy3Zeg6HbGwF9xw6wm
gyPPUvz1rAaloTGG0OQwT2prdrgxoCEHHHcJbqUQMJVZ/6LFa9DWRWljEeKr7Zjr
DmWJ/hhX4qA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:34:04 2025 by rpki-client