Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3132312e31362e302f32322d3234203d3e20323633303732.roa
File: 3136382e3132312e31362e302f32322d3234203d3e20323633303732.roa (raw, json)
Hash identifier: tJZkMyFzHLPugcFRZsB9lTznm8yqUJv9QmC73/2z2vo=
Subject key identifier: E2:AC:3E:EE:BF:D9:02:D1:CD:38:14:56:14:1D:D8:B4:B6:BB:16:0A
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 7ED0D8F2FD46B4AF12617CB586E0A1DB74CBB9D6
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3132312e31362e302f32322d3234203d3e20323633303732.roa
Signing time: Fri 03 May 2024 21:48:50 +0000
ROA not before: Fri 03 May 2024 21:43:50 +0000
ROA not after: Fri 02 May 2025 21:48:50 +0000
asID: 263072
IP address blocks: 168.121.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d0:d8:f2:fd:46:b4:af:12:61:7c:b5:86:e0:a1:db:74:cb:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:43:50 2024 GMT
Not After : May 2 21:48:50 2025 GMT
Subject: CN=E2AC3EEEBFD902D1CD381456141DD8B4B6BB160A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:a3:0b:52:ed:56:f3:37:9b:22:2f:32:ce:
66:9f:61:5d:ba:8b:22:c5:af:b4:98:a7:59:53:f8:
1f:23:89:75:39:43:4a:1f:62:eb:62:bf:a1:f6:07:
7c:6a:dc:80:ce:fc:8f:d4:cd:bf:10:95:db:cd:a3:
63:fd:fc:00:f1:5d:1c:39:41:e1:93:c0:3c:07:ee:
fc:e4:7a:5d:a9:5b:4b:2d:e1:35:3d:57:3a:b5:19:
99:0f:25:a4:92:d9:3a:e3:9e:1d:2e:ab:a1:1b:c6:
52:9a:74:7d:7f:07:7e:ce:dd:02:68:04:4f:f2:9c:
6c:c4:04:d4:42:66:bc:08:bd:44:50:ff:47:52:13:
bb:08:be:b3:1c:51:b3:27:e1:51:31:a8:f8:db:bd:
c9:45:a5:10:39:f5:19:61:34:1a:6f:65:c0:bf:ee:
e8:9c:57:84:e5:33:b5:e8:22:78:51:8b:0d:45:90:
9a:69:b5:76:9c:1e:d9:e0:06:19:a0:40:5d:5a:2c:
c8:bc:9e:f4:5e:70:aa:75:17:6c:12:79:df:d5:6d:
cd:02:29:cb:d0:29:e9:5b:40:cb:86:52:e4:e6:2e:
98:56:54:e0:43:0e:e0:be:d1:19:a0:a4:86:ce:4e:
4d:1b:87:a0:ca:3d:8e:8d:af:ac:40:eb:c8:ef:b7:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:3E:EE:BF:D9:02:D1:CD:38:14:56:14:1D:D8:B4:B6:BB:16:0A
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3132312e31362e302f32322d3234203d3e20323633303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
13:7b:00:aa:5f:77:e6:81:49:36:c1:ac:60:5b:3b:50:d7:5a:
3b:60:a4:23:91:52:3c:68:1d:fc:9e:52:4d:3c:7d:25:e2:d8:
e4:1a:8e:99:87:7c:05:e1:3e:24:fc:a9:53:06:8e:96:ca:cc:
82:fe:64:3e:a9:be:93:b0:0f:f0:23:d4:73:6c:e9:46:9f:ba:
f5:25:93:fb:81:c9:be:68:3b:34:77:42:7f:ed:12:fc:f8:58:
41:c3:a1:16:e0:cd:95:66:13:9d:65:c7:6a:6b:60:cb:82:99:
03:f8:a2:10:8b:09:9a:e1:75:ab:99:99:2d:89:10:12:ba:dc:
3c:b5:1a:71:1a:ae:c9:dd:99:66:d1:88:c8:00:2b:94:92:04:
fd:df:30:86:f4:1a:92:a0:c1:9b:98:f2:68:9c:91:fe:02:d3:
3a:5d:0f:ab:f0:cc:d8:bd:cc:79:c1:ee:b4:55:63:74:5e:92:
ae:84:61:d7:af:ed:32:36:db:1e:9d:89:a7:88:66:8f:1e:ef:
4b:f4:16:ad:d7:73:1b:eb:b1:fe:5e:b0:e6:76:1b:56:b9:be:
c9:7b:c6:fa:ed:43:4d:bb:2e:82:4d:f3:cf:07:4a:8c:1f:b0:
42:89:4d:f4:24:2e:2e:58:02:e4:90:ab:04:bc:7c:9c:3d:62:
ce:13:9d:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUftDY8v1GtK8SYXy1huCh23TLudYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTQzNTBaFw0yNTA1MDIyMTQ4NTBaMDMxMTAvBgNV
BAMTKEUyQUMzRUVFQkZEOTAyRDFDRDM4MTQ1NjE0MUREOEI0QjZCQjE2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5qMLUu1W8zebIi8yzmafYV26
iyLFr7SYp1lT+B8jiXU5Q0ofYutiv6H2B3xq3IDO/I/Uzb8QldvNo2P9/ADxXRw5
QeGTwDwH7vzkel2pW0st4TU9Vzq1GZkPJaSS2Trjnh0uq6EbxlKadH1/B37O3QJo
BE/ynGzEBNRCZrwIvURQ/0dSE7sIvrMcUbMn4VExqPjbvclFpRA59RlhNBpvZcC/
7uicV4TlM7XoInhRiw1FkJpptXacHtngBhmgQF1aLMi8nvRecKp1F2wSed/Vbc0C
KcvQKelbQMuGUuTmLphWVOBDDuC+0RmgpIbOTk0bh6DKPY6Nr6xA68jvtxlBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4qw+7r/ZAtHNOBRWFB3YtLa7FgowHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeRAwDQYJKoZIhvcNAQELBQADggEBABN7AKpf
d+aBSTbBrGBbO1DXWjtgpCORUjxoHfyeUk08fSXi2OQajpmHfAXhPiT8qVMGjpbK
zIL+ZD6pvpOwD/Aj1HNs6UafuvUlk/uByb5oOzR3Qn/tEvz4WEHDoRbgzZVmE51l
x2prYMuCmQP4ohCLCZrhdauZmS2JEBK63Dy1GnEarsndmWbRiMgAK5SSBP3fMIb0
GpKgwZuY8mickf4C0zpdD6vwzNi9zHnB7rRVY3Rekq6EYdev7TI22x6diaeIZo8e
70v0Fq3Xcxvrsf5esOZ2G1a5vsl7xvrtQ027LoJN888HSowfsEKJTfQkLi5YAuSQ
qwS8fJw9Ys4Tne4=
-----END CERTIFICATE-----
Generated at Thu May 15 03:32:14 2025 by rpki-client