Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa
File: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (raw, json)
Hash identifier: c7otnTQ5242wBosVVm31pAYdtSqXJrYDuFe8BEGDyPw=
Subject key identifier: D0:F1:FB:68:0F:95:7E:19:31:A5:CF:BD:64:DA:46:42:1C:75:22:EF
Certificate issuer: /CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Certificate serial: 07D44ECC2D90B4EF8ADF9633D00A2C00F832DB39
Authority key identifier: 3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa
Signing time: Fri 03 Jan 2025 14:21:33 +0000
ROA not before: Fri 03 Jan 2025 14:16:33 +0000
ROA not after: Fri 02 Jan 2026 14:21:33 +0000
asID: 263026
IP address blocks: 138.36.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d4:4e:cc:2d:90:b4:ef:8a:df:96:33:d0:0a:2c:00:f8:32:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Validity
Not Before: Jan 3 14:16:33 2025 GMT
Not After : Jan 2 14:21:33 2026 GMT
Subject: CN=D0F1FB680F957E1931A5CFBD64DA46421C7522EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:b4:3c:bc:f2:42:35:6f:0a:34:d8:1c:37:
a3:0e:41:f1:1d:63:d9:2d:c5:ea:d4:78:4f:45:44:
23:48:f0:a6:41:1a:c7:46:11:a9:60:2e:d9:22:30:
2e:ac:a4:58:81:cd:60:cd:05:61:1d:a0:26:fd:3f:
47:79:66:fa:07:3d:c7:aa:f4:eb:6d:bd:8c:40:09:
26:76:9e:61:0f:a2:6d:40:10:16:ca:ee:34:27:f6:
47:f9:9a:37:9a:3e:ec:a5:15:a0:0b:cd:38:e8:1c:
20:fa:e8:bc:de:d1:50:35:7a:17:41:d8:13:9f:53:
cc:08:11:4e:9d:ed:16:c1:1c:13:4a:2c:58:a3:ce:
0e:f6:59:be:bb:7e:6a:c8:67:ed:a8:de:88:0a:f3:
0f:b8:5b:7b:e6:53:ba:c7:ad:ab:f7:42:d7:60:fd:
50:a3:bc:f1:1d:a7:1a:4a:37:0b:19:49:1c:b7:e3:
98:00:f7:f6:54:0b:3e:89:16:7d:fb:db:4f:1c:f6:
6a:6e:2e:35:62:b2:cc:a4:98:72:c5:1e:6b:d4:e8:
a6:c1:b4:4e:c1:b4:55:33:ef:76:31:5b:40:d3:3d:
63:ca:a3:d9:fc:b8:4d:cd:82:c3:50:3f:a0:07:f2:
23:b7:44:1e:54:87:f3:8d:b1:0c:91:94:d0:f6:2d:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:FB:68:0F:95:7E:19:31:A5:CF:BD:64:DA:46:42:1C:75:22:EF
X509v3 Authority Key Identifier:
keyid:3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b4:2a:9c:3f:49:86:40:df:a0:26:89:66:39:2c:7e:2a:66:
33:57:47:15:9d:44:57:49:39:ef:e5:02:ec:91:60:f1:db:a0:
e0:30:74:f0:df:68:2e:d6:fd:d4:f1:5a:97:bf:bc:75:fe:17:
60:35:27:7f:74:d2:e7:34:b2:90:3b:82:76:3a:e0:59:2c:59:
3d:40:dc:c2:67:ca:a7:70:cd:f3:3b:dd:e1:97:b8:41:3d:ce:
c3:d6:0c:2b:96:9e:dc:98:9e:3b:6b:50:fb:1e:b6:bc:70:da:
f9:91:9f:ce:4e:41:ff:83:e6:04:6b:74:c5:80:22:a2:03:c6:
86:f8:b4:ce:3c:f0:dd:9e:17:d8:3b:99:44:fd:11:a0:4f:95:
f1:41:52:12:a4:b1:9f:6d:a5:5d:a2:81:1b:9a:00:c6:cd:e8:
2e:82:80:63:a4:d5:0b:ac:c5:da:86:c6:02:0d:7a:54:8c:ba:
3f:e8:81:7e:15:7a:8a:d1:12:e2:53:97:d2:2e:52:46:77:0a:
67:37:aa:d3:16:5f:d7:5a:e6:54:f3:eb:89:ef:9f:c5:95:53:
68:aa:9d:23:e4:46:57:87:03:c2:0e:ca:d7:97:cc:bd:80:5f:
cc:09:9e:76:f2:20:62:c6:79:72:a6:a9:0c:75:12:a5:de:41:
c5:f7:ed:83
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUB9ROzC2QtO+K35Yz0AosAPgy2zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y1MEIxMDgwNTk5QTdCOTFEODA1QURDOUMzRTdCOTBB
RTczNDczNjAeFw0yNTAxMDMxNDE2MzNaFw0yNjAxMDIxNDIxMzNaMDMxMTAvBgNV
BAMTKEQwRjFGQjY4MEY5NTdFMTkzMUE1Q0ZCRDY0REE0NjQyMUM3NTIyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7O7Q8vPJCNW8KNNgcN6MOQfEd
Y9ktxerUeE9FRCNI8KZBGsdGEalgLtkiMC6spFiBzWDNBWEdoCb9P0d5ZvoHPceq
9OttvYxACSZ2nmEPom1AEBbK7jQn9kf5mjeaPuylFaALzTjoHCD66Lze0VA1ehdB
2BOfU8wIEU6d7RbBHBNKLFijzg72Wb67fmrIZ+2o3ogK8w+4W3vmU7rHrav3Qtdg
/VCjvPEdpxpKNwsZSRy345gA9/ZUCz6JFn37208c9mpuLjVissykmHLFHmvU6KbB
tE7BtFUz73YxW0DTPWPKo9n8uE3NgsNQP6AH8iO3RB5Uh/ONsQyRlND2LbNnAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU0PH7aA+Vfhkxpc+9ZNpGQhx1Iu8wHwYDVR0j
BBgwFoAUP1CxCAWZp7kdgFrcnD57kK5zRzYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvM0Y1MEIxMDgwNTk5QTdCOTFEODA1QURDOUMzRTdCOTBBRTczNDczNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zRjUwQjEwODA1OTlBN0I5MUQ4
MDVBREM5QzNFN0I5MEFFNzM0NzM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz
MzM4MmUzMzM2MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzAz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCiiQUMA0GCSqGSIb3DQEBCwUAA4IBAQALtCqcP0mGQN+g
JolmOSx+KmYzV0cVnURXSTnv5QLskWDx26DgMHTw32gu1v3U8VqXv7x1/hdgNSd/
dNLnNLKQO4J2OuBZLFk9QNzCZ8qncM3zO93hl7hBPc7D1gwrlp7cmJ47a1D7Hra8
cNr5kZ/OTkH/g+YEa3TFgCKiA8aG+LTOPPDdnhfYO5lE/RGgT5XxQVISpLGfbaVd
ooEbmgDGzegugoBjpNULrMXahsYCDXpUjLo/6IF+FXqK0RLiU5fSLlJGdwpnN6rT
Fl/XWuZU8+uJ75/FlVNoqp0j5EZXhwPCDsrXl8y9gF/MCZ528iBixnlypqkMdRKl
3kHF9+2D
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:45:21 2025 by rpki-client