Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
File: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (raw, json)
Hash identifier: ykkNznleXJ/KK/cyOssZT/PodGqtctbB22xHa6O8qzI=
Subject key identifier: 76:4C:D8:5C:8C:70:86:4B:81:D3:A7:63:DC:88:6C:CB:98:FA:31:58
Certificate issuer: /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial: 1F51596548C4596EB365DA3C0A509827F96FA816
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
Signing time: Thu 04 Apr 2024 10:53:09 +0000
ROA not before: Thu 04 Apr 2024 10:48:09 +0000
ROA not after: Thu 03 Apr 2025 10:53:09 +0000
asID: 52771
IP address blocks: 138.186.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:51:59:65:48:c4:59:6e:b3:65:da:3c:0a:50:98:27:f9:6f:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Validity
Not Before: Apr 4 10:48:09 2024 GMT
Not After : Apr 3 10:53:09 2025 GMT
Subject: CN=764CD85C8C70864B81D3A763DC886CCB98FA3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:ee:c8:86:4e:4b:54:37:34:ab:39:1c:af:
d1:12:77:bf:41:97:4a:d4:f6:43:05:ef:ba:21:ca:
4d:13:fc:e9:58:cf:24:07:bb:66:47:24:27:fa:eb:
b2:8e:96:72:7c:be:df:19:d5:f9:19:ae:6e:34:07:
e3:8b:de:a7:39:d5:48:01:4a:94:50:c7:3d:36:f3:
d4:a6:1e:66:a6:89:d0:6f:d8:2c:84:08:57:5e:f0:
56:c1:06:56:dd:d8:91:83:4f:d6:49:eb:b6:b3:ca:
f4:c3:40:7b:8b:d9:a8:e4:d4:e2:17:f7:35:d2:cc:
d7:fe:bb:46:24:f6:c1:83:86:db:d5:94:4f:51:90:
82:c4:22:24:c2:2c:35:de:02:52:66:04:63:7a:01:
70:07:16:69:59:99:77:b2:b7:f3:a2:54:60:bd:30:
45:89:a2:8a:f0:d7:6a:c7:67:56:df:88:39:34:a8:
96:d7:62:af:2c:09:ce:33:fd:13:d1:ad:a7:40:6c:
ca:d6:dd:68:de:fd:5c:ab:9a:e7:76:57:6c:da:ae:
74:48:c3:90:16:73:a2:52:29:8b:a1:eb:44:ea:39:
01:8e:4f:38:4f:c0:99:84:a3:43:04:d8:24:22:7c:
df:1e:3a:15:c4:d5:f3:f6:cc:22:d5:ec:2e:ea:9d:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:D8:5C:8C:70:86:4B:81:D3:A7:63:DC:88:6C:CB:98:FA:31:58
X509v3 Authority Key Identifier:
keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.44.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9e:d9:6c:49:33:f7:23:05:ad:a2:40:c4:55:47:4e:cc:ab:
e0:7f:6f:48:fc:fe:8e:a3:6e:be:25:a5:b1:4b:76:c9:b8:e0:
a4:bd:e2:2a:5d:68:f3:c8:22:94:8d:34:95:1e:59:4d:b7:24:
c7:12:b9:23:5b:d6:f9:5b:bb:26:20:3f:84:0a:45:3d:d9:62:
80:d1:4a:5c:fc:b3:60:1c:6e:63:61:7a:2b:90:21:c1:43:01:
c4:24:d9:0d:1c:03:10:45:17:af:70:6a:ba:39:0a:4f:9d:28:
44:0a:0b:eb:bb:c0:94:74:cc:c2:00:8b:7c:00:63:00:0f:e3:
2c:25:85:a3:ca:00:bd:b3:9f:4f:64:63:dd:39:2d:25:db:3c:
2e:c1:23:e0:c3:b4:51:cc:5a:0d:b4:00:34:96:90:96:7a:d7:
e3:b1:84:05:2d:aa:e3:89:65:5e:c8:a7:fb:3c:14:f3:eb:ad:
d7:ed:32:67:f6:26:0c:74:f5:77:ac:50:1b:b1:ca:0f:67:28:
92:cc:a1:60:0c:88:3c:b6:73:c1:50:fc:c0:e9:4d:66:23:d3:
db:c0:5d:61:6c:10:b4:63:e1:5a:d7:a7:4d:aa:9b:eb:db:9d:
c3:b4:ba:a1:c5:e1:82:2b:06:b2:61:77:91:13:60:05:a4:73:
db:95:a5:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH1FZZUjEWW6zZdo8ClCYJ/lvqBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyOTQ5MUQ1OUVDNzhEQkRFQzc0MjNCMDREMDYwMzRD
MUE1OTMwMzAeFw0yNDA0MDQxMDQ4MDlaFw0yNTA0MDMxMDUzMDlaMDMxMTAvBgNV
BAMTKDc2NENEODVDOEM3MDg2NEI4MUQzQTc2M0RDODg2Q0NCOThGQTMxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq+7Ihk5LVDc0qzkcr9ESd79B
l0rU9kMF77ohyk0T/OlYzyQHu2ZHJCf667KOlnJ8vt8Z1fkZrm40B+OL3qc51UgB
SpRQxz0289SmHmamidBv2CyECFde8FbBBlbd2JGDT9ZJ67azyvTDQHuL2ajk1OIX
9zXSzNf+u0Yk9sGDhtvVlE9RkILEIiTCLDXeAlJmBGN6AXAHFmlZmXeyt/OiVGC9
MEWJoorw12rHZ1bfiDk0qJbXYq8sCc4z/RPRradAbMrW3Wje/Vyrmud2V2zarnRI
w5AWc6JSKYuh60TqOQGOTzhPwJmEo0ME2CQifN8eOhXE1fP2zCLV7C7qnXUHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdkzYXIxwhkuB06dj3Ihsy5j6MVgwHwYDVR0j
BBgwFoAUOSlJHVnseNvex0I7BNBgNMGlkwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlTRDgxcjI3d1py
NGkvMS8zOTI5NDkxRDU5RUM3OERCREVDNzQyM0IwNEQwNjAzNEMxQTU5MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5Mjk0OTFENTlFQzc4REJE
RUM3NDIzQjA0RDA2MDM0QzFBNTkzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtRmYzRXRQSmp3cVlZWUR6Mm82REhUd1VLWDF0RnY5U0Q4MXIyN3dacjRpLzEv
MzEzMzM4MmUzMTM4MzYyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirosMA0GCSqGSIb3DQEBCwUAA4IBAQBzntlsSTP3
IwWtokDEVUdOzKvgf29I/P6Oo26+JaWxS3bJuOCkveIqXWjzyCKUjTSVHllNtyTH
ErkjW9b5W7smID+ECkU92WKA0Upc/LNgHG5jYXorkCHBQwHEJNkNHAMQRRevcGq6
OQpPnShECgvru8CUdMzCAIt8AGMAD+MsJYWjygC9s59PZGPdOS0l2zwuwSPgw7RR
zFoNtAA0lpCWetfjsYQFLarjiWVeyKf7PBTz663X7TJn9iYMdPV3rFAbscoPZyiS
zKFgDIg8tnPBUPzA6U1mI9PbwF1hbBC0Y+Fa16dNqpvr253DtLqhxeGCKwayYXeR
E2AFpHPblaWB
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:44:57 2025 by rpki-client