Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
File: 3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: 7cho/eJn0INAJE6zw4yCa4or7QbIXe3nm1UozWVfCMY=
Subject key identifier: 1B:CF:54:39:35:D1:34:FA:CF:8D:50:E5:FD:16:77:3F:31:D8:55:EF
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 738D10664C27A4A164C496A3B99D17AE6A15262D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 143.255.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8d:10:66:4c:27:a4:a1:64:c4:96:a3:b9:9d:17:ae:6a:15:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=1BCF543935D134FACF8D50E5FD16773F31D855EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:ac:43:aa:ae:a0:9a:0a:4b:1a:a0:fe:c2:
bb:e0:cd:03:15:8f:ee:c2:a8:46:f7:43:ce:c6:5b:
8e:87:2f:d2:e3:9d:1e:17:91:89:5f:50:80:04:6e:
5a:e5:52:e0:04:96:71:c7:ba:b9:a4:32:40:61:4f:
e1:a7:91:ce:34:65:ef:15:4d:26:44:6a:46:23:f2:
48:bb:e7:a6:2c:fe:92:ee:77:54:43:52:91:f9:21:
06:05:f5:3f:5d:27:28:2f:0a:c3:72:02:22:da:1b:
21:d8:7d:b8:09:56:29:f1:3e:32:ce:18:3c:d1:5b:
dc:7f:6b:a4:f9:c0:29:ef:3f:2a:66:ae:af:52:00:
d5:2d:39:3b:4f:31:e7:28:29:1a:2b:4d:29:d5:14:
df:5c:f8:d0:a6:73:0a:49:27:b0:ff:9a:ac:db:4a:
3a:62:1a:83:eb:36:8b:08:66:89:b3:b1:fe:dc:e0:
9a:f7:90:f7:50:db:ee:c5:98:92:36:24:ec:ee:74:
16:41:cd:e0:e4:ac:3d:b9:31:a5:94:b6:b3:da:12:
99:b3:4a:1a:e7:84:bc:2b:19:ba:38:0b:e1:e7:56:
05:a0:39:58:3e:bb:58:16:91:7f:65:e1:13:11:12:
29:3e:9a:f7:d6:07:af:f5:dd:da:60:f8:89:4a:c1:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:54:39:35:D1:34:FA:CF:8D:50:E5:FD:16:77:3F:31:D8:55:EF
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
81:51:93:10:b3:78:a0:d5:51:9d:98:63:55:b4:15:b1:85:02:
ab:85:a7:54:ad:b6:b9:ce:1a:2f:b5:11:e3:91:8a:43:a2:98:
f5:c4:9b:30:0d:51:78:79:f2:51:16:66:63:4c:f1:c6:c8:e9:
06:89:2f:49:9c:bf:75:71:b7:61:b2:ab:ef:12:a7:a1:dc:e7:
da:4e:8b:b6:ac:3e:7b:72:e9:67:61:97:31:9a:3e:ba:11:1b:
21:75:0a:ab:aa:d0:51:12:52:f7:51:4f:d8:22:54:77:5e:dc:
94:c8:de:b0:6d:cf:19:ee:e0:5b:91:82:6a:cf:68:41:71:f0:
e1:a0:62:50:18:05:7f:0a:e2:fe:08:b1:04:95:e1:11:3a:7b:
1e:ce:38:ed:96:49:b4:de:91:85:41:9a:b5:b9:59:3a:4b:d5:
04:a0:29:be:9d:6e:66:ea:64:b9:dd:46:ba:4a:2c:53:25:0f:
3e:4f:13:c0:44:5d:23:c6:43:72:3c:ce:dd:81:cc:5b:9e:eb:
65:9b:07:50:b3:91:f5:45:cb:7e:6d:32:b3:be:5a:eb:32:15:
89:d7:6d:85:bf:ef:29:9d:14:a3:ce:ed:99:54:dc:d9:8b:45:
b7:cd:95:95:c0:5c:4e:44:c0:e2:88:ce:c4:a0:17:df:75:e4:
e4:b7:76:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc40QZkwnpKFkxJajuZ0XrmoVJi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTNaFw0yNTExMDYyMDQwMTNaMDMxMTAvBgNV
BAMTKDFCQ0Y1NDM5MzVEMTM0RkFDRjhENTBFNUZEMTY3NzNGMzFEODU1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF26xDqq6gmgpLGqD+wrvgzQMV
j+7CqEb3Q87GW46HL9LjnR4XkYlfUIAEblrlUuAElnHHurmkMkBhT+Gnkc40Ze8V
TSZEakYj8ki756Ys/pLud1RDUpH5IQYF9T9dJygvCsNyAiLaGyHYfbgJVinxPjLO
GDzRW9x/a6T5wCnvPypmrq9SANUtOTtPMecoKRorTSnVFN9c+NCmcwpJJ7D/mqzb
SjpiGoPrNosIZomzsf7c4Jr3kPdQ2+7FmJI2JOzudBZBzeDkrD25MaWUtrPaEpmz
ShrnhLwrGbo4C+HnVgWgOVg+u1gWkX9l4RMREik+mvfWB6/13dpg+IlKwbCZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG89UOTXRNPrPjVDl/RZ3PzHYVe8wHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP/3AwDQYJKoZIhvcNAQELBQADggEBAIFRkxCz
eKDVUZ2YY1W0FbGFAquFp1SttrnOGi+1EeORikOimPXEmzANUXh58lEWZmNM8cbI
6QaJL0mcv3Vxt2Gyq+8Sp6Hc59pOi7asPnty6WdhlzGaProRGyF1Cquq0FESUvdR
T9giVHde3JTI3rBtzxnu4FuRgmrPaEFx8OGgYlAYBX8K4v4IsQSV4RE6ex7OOO2W
SbTekYVBmrW5WTpL1QSgKb6dbmbqZLndRrpKLFMlDz5PE8BEXSPGQ3I8zt2BzFue
62WbB1CzkfVFy35tMrO+WusyFYnXbYW/7ymdFKPO7ZlU3NmLRbfNlZXAXE5EwOKI
zsSgF9915OS3dr4=
-----END CERTIFICATE-----
Generated at Tue May 13 22:09:37 2025 by rpki-client