Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3132382e3230312e302e302f32322d3234203d3e20323633343035.roa
File: 3132382e3230312e302e302f32322d3234203d3e20323633343035.roa (raw, json)
Hash identifier: C3wuTD+ojs3uZPPpI8b2B3sDmshB0qhdu/YAfvEN1wY=
Subject key identifier: E1:4B:8A:AB:A7:07:B8:8C:9F:A5:BB:ED:A6:56:35:35:9A:5D:3A:4B
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 6B19479E5C2DE6EED53969BA33EF65E74D08EFA1
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3132382e3230312e302e302f32322d3234203d3e20323633343035.roa
Signing time: Fri 03 May 2024 21:54:38 +0000
ROA not before: Fri 03 May 2024 21:49:38 +0000
ROA not after: Fri 02 May 2025 21:54:38 +0000
asID: 263405
IP address blocks: 128.201.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:19:47:9e:5c:2d:e6:ee:d5:39:69:ba:33:ef:65:e7:4d:08:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:49:38 2024 GMT
Not After : May 2 21:54:38 2025 GMT
Subject: CN=E14B8AABA707B88C9FA5BBEDA65635359A5D3A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:a9:72:9c:f0:13:ea:05:ff:53:e4:49:98:
ca:19:dd:4b:55:c4:3a:08:8f:dc:e5:fb:56:de:6e:
cc:fa:42:f3:92:e6:b9:44:6c:9c:37:67:99:e6:37:
80:fa:9d:10:1e:1d:71:e6:1b:c3:e4:25:33:ac:b1:
8b:7b:4f:cc:10:75:0a:3e:aa:ad:13:9a:00:ef:6d:
df:09:2b:67:6e:fe:8a:f1:87:bd:3f:3a:b8:da:9e:
57:f7:ee:ed:4a:10:d8:14:d9:b7:f4:82:af:3c:49:
39:08:a9:de:eb:f1:b9:b6:cc:0a:d5:84:02:d4:ce:
74:d9:6d:0a:4a:05:94:6c:0e:31:67:8c:90:74:04:
28:19:b6:e1:ef:95:37:8a:50:db:35:0e:4f:8b:a9:
c3:b7:c5:f1:3b:32:98:9b:52:73:b5:9d:fe:0e:f7:
d8:9c:47:67:e6:ef:70:1c:8b:92:b7:80:c6:50:e5:
be:a1:c4:5f:b5:ec:d5:2d:56:a8:dd:57:0f:ad:72:
d5:30:8a:ee:89:68:b4:00:b7:2c:30:58:10:af:df:
31:a1:ad:b9:ac:56:d3:41:35:28:57:79:29:9d:a2:
5a:9b:c3:53:31:71:a1:08:2b:fc:48:00:94:e0:56:
8a:73:f0:de:a5:e7:16:0a:ea:8f:34:fb:1c:62:69:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:8A:AB:A7:07:B8:8C:9F:A5:BB:ED:A6:56:35:35:9A:5D:3A:4B
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3132382e3230312e302e302f32322d3234203d3e20323633343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.0.0/22
Signature Algorithm: sha256WithRSAEncryption
85:eb:27:13:40:d5:04:47:d2:cd:ca:2a:c3:16:53:31:d6:af:
76:ed:1b:95:71:05:76:bc:c7:19:fb:46:4b:ed:cd:d3:5a:f6:
b2:0f:d3:37:f8:22:e3:98:db:0d:4e:cc:12:f6:44:b7:e5:b1:
cc:13:a7:3b:b5:83:f9:ca:d6:cf:b3:44:de:89:e5:42:8f:68:
47:9d:4a:41:f5:5e:87:fb:03:9f:a7:a0:a6:bf:06:e5:74:3e:
23:33:e3:ef:38:ef:63:30:9b:dc:b4:56:e6:f6:19:71:c5:26:
86:16:7b:c4:df:61:8e:8c:91:43:6a:4c:4a:dc:79:0f:77:f4:
e1:29:74:9b:7f:9d:98:b6:8b:fc:5f:05:ea:f0:8b:72:c1:32:
c3:b2:ec:61:94:d8:bc:0c:d7:6f:ca:6a:38:5f:e6:86:1b:e3:
42:c3:ff:97:2a:80:ce:6f:8f:6c:6c:3f:2f:74:1a:be:2d:1d:
03:8b:89:8a:77:ff:01:9e:0f:d5:45:cf:a6:98:15:30:40:de:
81:cb:45:db:e5:c6:ce:b1:a3:1a:9a:ad:0d:03:7d:b8:65:4b:
a2:1b:f9:5e:04:8a:52:56:ae:ee:8f:be:8a:10:e6:6d:58:6b:
d8:0e:2f:1b:3f:f4:7f:a5:06:45:d3:0e:bb:f8:23:56:fb:f6:
70:61:4e:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaxlHnlwt5u7VOWm6M+9l500I76EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTQ5MzhaFw0yNTA1MDIyMTU0MzhaMDMxMTAvBgNV
BAMTKEUxNEI4QUFCQTcwN0I4OEM5RkE1QkJFREE2NTYzNTM1OUE1RDNBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rKlynPAT6gX/U+RJmMoZ3UtV
xDoIj9zl+1bebsz6QvOS5rlEbJw3Z5nmN4D6nRAeHXHmG8PkJTOssYt7T8wQdQo+
qq0TmgDvbd8JK2du/orxh70/Orjanlf37u1KENgU2bf0gq88STkIqd7r8bm2zArV
hALUznTZbQpKBZRsDjFnjJB0BCgZtuHvlTeKUNs1Dk+LqcO3xfE7MpibUnO1nf4O
99icR2fm73Aci5K3gMZQ5b6hxF+17NUtVqjdVw+tctUwiu6JaLQAtywwWBCv3zGh
rbmsVtNBNShXeSmdolqbw1MxcaEIK/xIAJTgVopz8N6l5xYK6o80+xxiaZitAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4UuKq6cHuIyfpbvtplY1NZpdOkswHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzMjM4MmUzMjMwMzEyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCgMkAMA0GCSqGSIb3DQEBCwUAA4IBAQCF6ycTQNUE
R9LNyirDFlMx1q927RuVcQV2vMcZ+0ZL7c3TWvayD9M3+CLjmNsNTswS9kS35bHM
E6c7tYP5ytbPs0TeieVCj2hHnUpB9V6H+wOfp6CmvwbldD4jM+PvOO9jMJvctFbm
9hlxxSaGFnvE32GOjJFDakxK3HkPd/ThKXSbf52Ytov8XwXq8ItywTLDsuxhlNi8
DNdvymo4X+aGG+NCw/+XKoDOb49sbD8vdBq+LR0Di4mKd/8Bng/VRc+mmBUwQN6B
y0Xb5cbOsaMamq0NA324ZUuiG/leBIpSVq7uj76KEOZtWGvYDi8bP/R/pQZF0w67
+CNW+/ZwYU6x
-----END CERTIFICATE-----
Generated at Thu May 15 19:36:09 2025 by rpki-client