Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa
File: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (raw, json)
Hash identifier: gqcGuwnr5Fpm3jSnnKa9zDWYhmEqAx0lPvVOhYXqZLw=
Subject key identifier: D2:5A:6D:67:DA:1B:17:29:75:89:4B:43:80:70:7C:D2:D1:CB:84:FE
Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial: 5FE0D2516AAE2615A430EADEC2801890E9AB2A9E
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa
Signing time: Thu 04 Apr 2024 18:09:15 +0000
ROA not before: Thu 04 Apr 2024 18:04:15 +0000
ROA not after: Thu 03 Apr 2025 18:09:15 +0000
asID: 263915
IP address blocks: 138.204.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e0:d2:51:6a:ae:26:15:a4:30:ea:de:c2:80:18:90:e9:ab:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Validity
Not Before: Apr 4 18:04:15 2024 GMT
Not After : Apr 3 18:09:15 2025 GMT
Subject: CN=D25A6D67DA1B172975894B4380707CD2D1CB84FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:ae:8d:73:94:fa:9a:3e:ba:4f:7b:9a:ee:
a9:00:d2:bf:02:34:b3:88:82:d0:9d:42:99:10:b5:
79:5d:38:a6:0c:c0:d1:1e:eb:c6:1c:f3:a7:9e:fb:
4a:f3:45:c7:80:21:1c:cc:cd:a6:9e:7e:05:2e:94:
69:27:26:63:b0:d3:75:aa:1c:a2:87:0f:0c:97:51:
2e:fe:ad:62:93:15:7e:39:54:64:b8:a3:b7:82:90:
f8:a8:28:be:b0:6d:ca:95:e9:fd:14:21:da:bc:d7:
04:1a:c0:8e:d1:d1:e9:4a:09:c8:6a:c9:d9:29:38:
c9:85:ae:05:c0:bc:bf:ca:78:c5:d3:b4:81:83:62:
17:8f:ef:e5:e1:8f:05:d1:bb:bd:b8:4e:8a:1c:63:
7f:2c:3a:af:01:53:30:b2:58:c0:a7:f2:3d:fa:55:
b8:c6:42:31:e1:9f:10:50:50:9f:c6:d9:f7:e6:24:
89:62:cf:d9:5b:fa:83:e7:6d:30:7b:bb:76:3e:13:
ea:54:f7:d7:4b:71:79:d9:dc:8e:42:6a:67:01:20:
01:d1:38:5f:b3:ea:f9:9e:92:e7:9a:60:23:37:c6:
8a:27:2e:2e:bd:61:ae:9d:5e:f9:e5:1c:cc:9b:70:
92:d2:b1:fc:68:43:be:2e:3f:f4:1d:2b:8c:d5:74:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5A:6D:67:DA:1B:17:29:75:89:4B:43:80:70:7C:D2:D1:CB:84:FE
X509v3 Authority Key Identifier:
keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:cf:fa:58:2a:41:c5:1b:67:89:4d:70:6e:a2:d6:cf:d6:9d:
b7:e3:4c:da:96:62:f5:50:b4:f8:28:48:df:12:30:1e:15:6d:
ca:c0:a1:ea:b7:14:f6:c3:51:63:b2:05:e1:f5:a2:24:b3:70:
d8:d9:04:da:84:9e:b2:c2:9e:0e:63:23:fd:2e:ab:a4:cd:f9:
fd:95:8e:18:11:0f:92:a3:f7:e2:34:f7:4d:6b:75:88:6f:96:
cb:75:cd:dd:1d:74:f7:0d:72:6c:1f:98:56:a1:7e:af:42:84:
bd:98:60:95:70:b5:78:99:4f:6a:f0:b6:07:59:bc:c4:de:6a:
67:f5:0b:4b:2a:c8:9e:05:b3:32:2a:2e:b4:82:a6:2a:7d:d6:
cc:6e:0d:ce:c9:ec:ba:c3:85:6b:fe:b1:0d:6c:dd:12:06:3e:
29:59:df:fe:3b:40:b7:b7:9b:04:d9:f5:d9:bb:5c:63:20:8e:
9c:b7:6a:9f:d3:f4:0f:af:54:ce:08:94:67:8b:7e:a1:83:fc:
44:e3:7b:7c:23:f9:56:2d:7c:aa:3d:cd:62:55:99:36:35:10:
ff:b4:b3:a7:78:86:24:42:20:be:de:d9:09:91:2e:d9:42:25:
e9:82:28:55:af:ee:59:f2:2e:e6:a7:f5:37:23:cf:5f:9a:3c:
15:00:51:f8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX+DSUWquJhWkMOrewoAYkOmrKp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3
NDIwRUU0MzAeFw0yNDA0MDQxODA0MTVaFw0yNTA0MDMxODA5MTVaMDMxMTAvBgNV
BAMTKEQyNUE2RDY3REExQjE3Mjk3NTg5NEI0MzgwNzA3Q0QyRDFDQjg0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADq6Nc5T6mj66T3ua7qkA0r8C
NLOIgtCdQpkQtXldOKYMwNEe68Yc86ee+0rzRceAIRzMzaaefgUulGknJmOw03Wq
HKKHDwyXUS7+rWKTFX45VGS4o7eCkPioKL6wbcqV6f0UIdq81wQawI7R0elKCchq
ydkpOMmFrgXAvL/KeMXTtIGDYheP7+XhjwXRu724ToocY38sOq8BUzCyWMCn8j36
VbjGQjHhnxBQUJ/G2ffmJIliz9lb+oPnbTB7u3Y+E+pU99dLcXnZ3I5CamcBIAHR
OF+z6vmekueaYCM3xoonLi69Ya6dXvnlHMybcJLSsfxoQ74uP/QdK4zVdFz3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0lptZ9obFyl1iUtDgHB80tHLhP4wHwYDVR0j
BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw
NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNidGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzEv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM4DANBgkqhkiG9w0BAQsFAAOCAQEAPs/6
WCpBxRtniU1wbqLWz9adt+NM2pZi9VC0+ChI3xIwHhVtysCh6rcU9sNRY7IF4fWi
JLNw2NkE2oSessKeDmMj/S6rpM35/ZWOGBEPkqP34jT3TWt1iG+Wy3XN3R109w1y
bB+YVqF+r0KEvZhglXC1eJlPavC2B1m8xN5qZ/ULSyrIngWzMioutIKmKn3WzG4N
zsnsusOFa/6xDWzdEgY+KVnf/jtAt7ebBNn12btcYyCOnLdqn9P0D69UzgiUZ4t+
oYP8RON7fCP5Vi18qj3NYlWZNjUQ/7Szp3iGJEIgvt7ZCZEu2UIl6YIoVa/uWfIu
5qf1NyPPX5o8FQBR+A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:06:24 2025 by rpki-client