Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File: 3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier: 9u+7B5EMctwSR/8HkqG4vOKZTwThtzD2dPZHOAG/44k=
Subject key identifier: 63:9C:02:19:D2:F2:FD:2C:C2:58:5D:C1:9C:10:DA:9E:2F:BF:0C:10
Certificate issuer: /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial: 7FFA442B0787C226649A736055DAE6699A2218E7
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time: Mon 28 Oct 2024 18:36:08 +0000
ROA not before: Mon 28 Oct 2024 18:31:08 +0000
ROA not after: Mon 27 Oct 2025 18:36:08 +0000
asID: 28299
IP address blocks: 189.38.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fa:44:2b:07:87:c2:26:64:9a:73:60:55:da:e6:69:9a:22:18:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Validity
Not Before: Oct 28 18:31:08 2024 GMT
Not After : Oct 27 18:36:08 2025 GMT
Subject: CN=639C0219D2F2FD2CC2585DC19C10DA9E2FBF0C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:20:11:e4:a5:0f:09:f6:d4:e1:9d:ea:96:
8a:1b:7f:dc:5f:92:df:b5:b0:41:7c:1c:7f:fc:c4:
29:37:6f:cb:46:e2:88:3d:b2:b7:0d:7d:b2:5e:85:
c9:6c:d5:98:7f:0d:1d:57:30:08:9a:4c:40:11:7e:
19:f2:36:5a:dd:60:4e:41:8f:56:47:76:5e:75:86:
38:6a:7a:37:1d:5f:6e:1c:80:aa:00:97:f4:db:11:
d7:75:aa:e9:d8:91:77:87:d9:b5:75:88:28:f0:9b:
bc:0a:17:46:9c:d8:d6:d9:af:b7:5e:b5:ca:80:8f:
20:94:12:a2:96:6c:09:fb:19:da:7e:b0:8f:1f:50:
f8:a4:1b:53:98:d3:78:4c:19:2b:41:4f:af:af:c0:
3b:78:b8:56:a1:08:83:13:58:0b:6b:74:5b:b4:0d:
21:9e:2f:ee:cd:1f:d4:bd:52:23:d0:c3:a1:ec:2a:
40:a6:69:17:ef:cd:fc:58:95:28:87:ac:c6:1e:50:
e4:20:28:d0:9b:ea:94:7c:b7:d6:a8:80:14:af:05:
99:4d:b1:43:7a:c7:f6:c8:75:bc:c8:77:dc:85:cd:
66:72:e9:6b:1c:10:20:6d:25:9e:11:26:59:f0:00:
f5:c6:cb:99:81:ee:8b:ca:2e:23:5b:c4:34:c5:c6:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:02:19:D2:F2:FD:2C:C2:58:5D:C1:9C:10:DA:9E:2F:BF:0C:10
X509v3 Authority Key Identifier:
keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.80.0/20
Signature Algorithm: sha256WithRSAEncryption
39:5d:4c:b5:c0:73:4e:13:c8:87:52:cc:2b:4a:ee:d8:99:d5:
17:5d:d1:0b:b1:1a:d5:7a:6d:9a:08:e9:e7:30:aa:05:86:a7:
b5:63:67:9b:e8:37:55:5c:a1:61:78:15:68:7c:ce:0c:d4:e2:
76:5c:a2:46:e7:a5:e7:52:6e:e6:28:8c:2e:b0:80:e4:63:ae:
72:87:36:a1:ba:7c:1a:3c:1a:02:f4:02:d2:71:39:22:96:99:
45:0b:be:43:fc:cd:d6:76:1f:55:7f:aa:a5:e8:ec:df:e3:8d:
c2:2a:dd:58:8f:7c:0d:07:e0:45:00:59:5c:48:d8:71:d5:4e:
a7:f3:c8:d3:2f:39:02:73:08:3b:f9:6a:02:62:f9:92:35:e7:
a7:96:ee:f7:a0:e0:cf:ff:f1:4a:28:04:4e:1d:28:50:86:eb:
9a:3c:5b:c7:9c:07:2b:db:57:e2:3e:6a:4e:3f:fd:cf:26:a2:
35:6d:40:41:ad:ca:ed:ec:a9:c6:16:75:ed:2e:f0:c5:92:57:
3d:b4:46:47:05:73:97:5b:ee:2f:09:2f:8f:ee:6b:f5:ca:32:
d6:cc:53:28:4c:a2:1b:a8:a7:a9:b7:21:32:48:81:b8:9a:2f:
cd:d4:38:7e:fa:41:67:85:f6:b8:72:9d:0a:f7:ec:e5:28:fc:
1d:8b:2a:a6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUf/pEKweHwiZkmnNgVdrmaZoiGOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4MERCQjRDRTUzQTM4NTUxMkNCQjg3NzQ3RDhDQTFB
REQwOUFFQzAeFw0yNDEwMjgxODMxMDhaFw0yNTEwMjcxODM2MDhaMDMxMTAvBgNV
BAMTKDYzOUMwMjE5RDJGMkZEMkNDMjU4NURDMTlDMTBEQTlFMkZCRjBDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NiAR5KUPCfbU4Z3qloobf9xf
kt+1sEF8HH/8xCk3b8tG4og9srcNfbJehcls1Zh/DR1XMAiaTEARfhnyNlrdYE5B
j1ZHdl51hjhqejcdX24cgKoAl/TbEdd1qunYkXeH2bV1iCjwm7wKF0ac2NbZr7de
tcqAjyCUEqKWbAn7Gdp+sI8fUPikG1OY03hMGStBT6+vwDt4uFahCIMTWAtrdFu0
DSGeL+7NH9S9UiPQw6HsKkCmaRfvzfxYlSiHrMYeUOQgKNCb6pR8t9aogBSvBZlN
sUN6x/bIdbzId9yFzWZy6WscECBtJZ4RJlnwAPXGy5mB7ovKLiNbxDTFxqabAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUY5wCGdLy/SzCWF3BnBDani+/DBAwHwYDVR0j
BBgwFoAUKYDbtM5To4VRLLuHdH2Moa3QmuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmV0OHh6QVE0aGt2Vm5GcTNXNmkxV3diQ3RReHdOem9jODgyclMzR0w1
OUgvMC8yOTgwREJCNENFNTNBMzg1NTEyQ0JCODc3NDdEOENBMUFERDA5QUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODBEQkI0Q0U1M0EzODU1
MTJDQkI4Nzc0N0Q4Q0ExQUREMDlBRUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JldDh4ekFRNGhrdlZuRnEzVzZpMVd3YkN0UXh3TnpvYzg4MnJTM0dMNTlILzAv
MzEzODM5MmUzMzM4MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMy
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0mUDANBgkqhkiG9w0BAQsFAAOCAQEAOV1MtcBzThPI
h1LMK0ru2JnVF13RC7Ea1Xptmgjp5zCqBYantWNnm+g3VVyhYXgVaHzODNTidlyi
Ruel51Ju5iiMLrCA5GOucoc2obp8GjwaAvQC0nE5IpaZRQu+Q/zN1nYfVX+qpejs
3+ONwirdWI98DQfgRQBZXEjYcdVOp/PI0y85AnMIO/lqAmL5kjXnp5bu96Dgz//x
SigETh0oUIbrmjxbx5wHK9tX4j5qTj/9zyaiNW1AQa3K7eypxhZ17S7wxZJXPbRG
RwVzl1vuLwkvj+5r9coy1sxTKEyiG6inqbchMkiBuJovzdQ4fvpBZ4X2uHKdCvfs
5Sj8HYsqpg==
-----END CERTIFICATE-----
Generated at Sat Jul 12 10:32:57 2025 by rpki-client