Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139382e302f32332d3233203d3e20323634323136.roa
File: 3133382e39392e3139382e302f32332d3233203d3e20323634323136.roa (raw, json)
Hash identifier: knecvvm1p1UJzo7Btf3jJCdDV8xA2eKlJG0hDMVfC2U=
Subject key identifier: 84:D1:53:60:D6:3A:04:C8:01:12:DC:15:00:9C:0A:EF:B7:05:A0:5C
Certificate issuer: /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial: 43DE3847E0F0D7F33A05BAF7735DED1121EC5302
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139382e302f32332d3233203d3e20323634323136.roa
Signing time: Tue 20 Feb 2024 12:18:31 +0000
ROA not before: Tue 20 Feb 2024 12:13:31 +0000
ROA not after: Tue 18 Feb 2025 12:18:31 +0000
asID: 264216
IP address blocks: 138.99.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:de:38:47:e0:f0:d7:f3:3a:05:ba:f7:73:5d:ed:11:21:ec:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Validity
Not Before: Feb 20 12:13:31 2024 GMT
Not After : Feb 18 12:18:31 2025 GMT
Subject: CN=84D15360D63A04C80112DC15009C0AEFB705A05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:f0:c4:fe:d6:3f:29:16:8a:b4:0c:ae:f5:
5c:6e:ec:3f:2d:dd:8e:6e:85:80:1d:32:d8:fa:3c:
58:19:ab:06:a7:11:14:e2:ab:2b:4d:91:90:31:32:
6c:b9:7b:10:42:6f:88:e3:2f:02:3e:98:85:b8:ce:
76:48:1b:75:03:9a:84:c0:2d:cd:6a:9b:83:56:1a:
2d:82:94:8c:ba:d3:f4:b6:d5:36:cb:db:65:62:6e:
0e:0f:29:b6:92:e5:35:17:25:6f:65:e0:ba:47:b7:
11:9d:de:06:73:bd:a3:49:c4:f9:be:dc:5c:04:a5:
4d:43:c4:6e:37:b9:e8:d2:15:61:d4:8a:60:e9:6e:
e4:9a:09:60:21:51:52:62:1b:84:c9:bc:12:da:09:
d4:ec:08:b0:c9:a3:c5:75:39:f3:96:07:31:a0:a7:
4f:5f:2c:e7:35:57:c1:99:fd:31:6c:4c:3f:21:1b:
b9:60:d7:35:cc:2f:6e:0a:aa:ae:a6:c1:44:3a:49:
07:aa:71:9c:71:5f:16:f6:52:ce:e3:5b:9f:d2:86:
27:b2:ac:eb:ab:04:28:90:7a:74:60:c2:4c:50:85:
bc:f2:ed:fe:62:73:db:a2:83:ec:ec:c6:84:23:94:
99:45:62:4b:b5:02:43:d5:97:a7:66:b2:74:92:65:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D1:53:60:D6:3A:04:C8:01:12:DC:15:00:9C:0A:EF:B7:05:A0:5C
X509v3 Authority Key Identifier:
keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139382e302f32332d3233203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.198.0/23
Signature Algorithm: sha256WithRSAEncryption
06:47:1b:5f:70:a1:2b:71:49:28:9e:2f:c1:a0:cb:ac:e5:41:
c0:39:ae:c8:fd:5d:ca:38:f2:23:f5:6f:5e:aa:e2:55:72:7f:
3f:05:75:26:4d:e8:38:7e:b3:a0:da:4d:8b:3f:10:97:f3:c2:
8d:af:a3:75:a6:94:6a:a5:5c:df:93:ac:6e:be:f1:d6:a0:c6:
23:78:ba:d8:f1:e5:20:af:ab:b0:04:79:aa:c4:d9:97:25:c5:
53:c2:a9:63:2e:76:fe:c1:01:ac:75:64:f5:d5:25:c4:26:5a:
6c:d6:5c:c9:13:d0:66:da:f2:fd:8f:d6:ff:7b:ea:05:69:bc:
dd:af:65:19:a9:c4:0c:3f:64:78:c3:b3:4f:5c:c8:a3:68:59:
18:92:08:8c:4a:8d:2b:09:f8:50:33:2f:40:d3:2e:b4:0e:59:
1f:5d:8a:87:ed:2c:74:a2:d1:46:05:e7:3a:ee:f2:8a:7b:2f:
df:41:ed:0a:36:26:f2:17:76:c7:7c:13:be:ec:d6:0c:26:2f:
60:15:41:d9:ae:fb:99:13:73:44:67:d7:39:f6:a5:70:9a:62:
9f:c7:ee:98:55:9f:82:8f:36:76:42:6f:6c:1b:10:19:2a:1a:
1d:de:fc:d7:f8:92:98:58:47:47:2e:8d:2c:7c:1e:28:3f:3d:
b8:55:75:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ944R+Dw1/M6Bbr3c13tESHsUwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMUNFNEMzNjUyNzcwRDgwMUM1MDYzNzI0Q0M3MzQy
QjNGNTcyRjAeFw0yNDAyMjAxMjEzMzFaFw0yNTAyMTgxMjE4MzFaMDMxMTAvBgNV
BAMTKDg0RDE1MzYwRDYzQTA0QzgwMTEyREMxNTAwOUMwQUVGQjcwNUEwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KvDE/tY/KRaKtAyu9Vxu7D8t
3Y5uhYAdMtj6PFgZqwanERTiqytNkZAxMmy5exBCb4jjLwI+mIW4znZIG3UDmoTA
Lc1qm4NWGi2ClIy60/S21TbL22Vibg4PKbaS5TUXJW9l4LpHtxGd3gZzvaNJxPm+
3FwEpU1DxG43uejSFWHUimDpbuSaCWAhUVJiG4TJvBLaCdTsCLDJo8V1OfOWBzGg
p09fLOc1V8GZ/TFsTD8hG7lg1zXML24Kqq6mwUQ6SQeqcZxxXxb2Us7jW5/Shiey
rOurBCiQenRgwkxQhbzy7f5ic9uig+zsxoQjlJlFYku1AkPVl6dmsnSSZXlNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhNFTYNY6BMgBEtwVAJwK77cFoFwwHwYDVR0j
BBgwFoAU0rHOTDZSdw2AHFBjckzHNCs/Vy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq
U1MvMC9EMkIxQ0U0QzM2NTI3NzBEODAxQzUwNjM3MjRDQzczNDJCM0Y1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQjFDRTRDMzY1Mjc3MEQ4
MDFDNTA2MzcyNENDNzM0MkIzRjU3MkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d3RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAv
MzEzMzM4MmUzOTM5MmUzMTM5MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKY8YwDQYJKoZIhvcNAQELBQADggEBAAZHG19w
oStxSSieL8Ggy6zlQcA5rsj9Xco48iP1b16q4lVyfz8FdSZN6Dh+s6DaTYs/EJfz
wo2vo3WmlGqlXN+TrG6+8dagxiN4utjx5SCvq7AEearE2ZclxVPCqWMudv7BAax1
ZPXVJcQmWmzWXMkT0Gba8v2P1v976gVpvN2vZRmpxAw/ZHjDs09cyKNoWRiSCIxK
jSsJ+FAzL0DTLrQOWR9dioftLHSi0UYF5zru8op7L99B7Qo2JvIXdsd8E77s1gwm
L2AVQdmu+5kTc0Rn1zn2pXCaYp/H7phVn4KPNnZCb2wbEBkqGh3e/Nf4kphYR0cu
jSx8Hig/PbhVda8=
-----END CERTIFICATE-----
Generated at Fri May 16 03:11:44 2025 by rpki-client