Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
File: 3133382e39392e32342e302f32322d3234203d3e203631383639.roa (raw, json)
Hash identifier: 3LTgxeQ6ExP2T46RYPubhe6fpDJHzPel42nA1zVqoeM=
Subject key identifier: 0E:26:ED:6D:21:44:5B:34:40:8E:BE:CF:49:E2:25:0E:58:8E:EC:11
Certificate issuer: /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial: 425C0A85A8AD1DB1D45D79871E6B34F7DC67058A
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
Signing time: Thu 04 Apr 2024 18:43:29 +0000
ROA not before: Thu 04 Apr 2024 18:38:29 +0000
ROA not after: Thu 03 Apr 2025 18:43:29 +0000
asID: 61869
IP address blocks: 138.99.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5c:0a:85:a8:ad:1d:b1:d4:5d:79:87:1e:6b:34:f7:dc:67:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Validity
Not Before: Apr 4 18:38:29 2024 GMT
Not After : Apr 3 18:43:29 2025 GMT
Subject: CN=0E26ED6D21445B34408EBECF49E2250E588EEC11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:f0:06:eb:a5:83:e7:bd:ac:bb:b4:86:87:
e3:92:53:2c:c3:9f:78:25:32:d2:58:ae:d6:9a:b4:
0d:7f:46:ba:0e:39:6c:9a:2c:b5:1e:a2:18:b4:65:
a5:e9:13:d3:8a:8b:d8:95:32:c5:e8:37:89:d7:6a:
a7:b7:ba:28:03:1a:b4:04:2a:30:ef:ec:3a:55:ee:
82:81:1f:6f:5f:9f:85:61:c7:37:a1:cc:6d:0a:9b:
73:25:21:c5:0e:dc:f5:3d:36:e6:ec:01:f2:5e:e0:
e1:ec:31:a6:e1:ce:b1:1b:5e:1d:62:36:cc:82:e4:
65:2d:c6:d3:79:d9:f0:4f:83:ee:57:47:60:3d:7a:
8f:5f:4a:d3:2d:c4:55:3a:fe:71:62:36:52:ea:6f:
02:89:24:d8:fd:d3:ac:2e:20:f9:7d:e9:34:90:dc:
e8:0b:7d:19:05:46:c4:6b:4c:cc:4f:6e:b7:eb:4a:
f2:4a:b5:fb:23:69:0d:50:16:bc:bf:40:e4:a1:21:
a0:3a:f0:a5:00:40:0f:df:5a:90:08:c1:f6:4e:a3:
0e:79:2b:30:31:ea:92:f4:56:c9:cf:27:4f:7d:d7:
aa:f8:72:e1:ba:6d:e7:fe:74:dc:0c:a9:3b:c2:ae:
88:73:92:fa:87:03:26:84:2d:d4:5a:56:3b:a3:83:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:ED:6D:21:44:5B:34:40:8E:BE:CF:49:E2:25:0E:58:8E:EC:11
X509v3 Authority Key Identifier:
keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:e9:ca:68:01:92:a1:6a:07:dd:5f:a2:f0:6e:39:73:42:74:
8d:aa:c9:64:55:69:50:97:bc:10:5f:8e:4f:f7:05:ea:f5:2c:
de:dd:a1:89:27:d4:e6:b6:19:9f:72:c8:69:b0:e3:9f:6b:7d:
3e:95:2a:5e:77:05:5b:c1:f9:4b:6e:a1:06:1a:1f:20:d9:03:
82:c4:23:3e:85:4b:90:0f:6a:0a:34:d1:99:54:82:a8:4c:1e:
06:56:cb:d1:9b:e5:2c:fe:49:8a:53:9c:dc:96:b6:71:41:2c:
7f:98:52:e8:2d:59:08:44:5f:15:84:8b:6e:61:f2:49:4f:d3:
db:49:58:fa:6b:71:9b:c5:fc:e6:d1:61:3b:f7:8e:3c:14:15:
46:c6:49:2e:05:44:bb:64:f5:73:68:e5:a6:16:56:a6:65:2f:
1d:b1:a3:41:25:e9:71:04:22:58:9a:c4:85:90:6e:84:47:88:
0d:2c:49:a8:69:75:6e:56:07:a7:44:34:f2:c4:f5:16:7c:30:
f9:56:c9:4f:af:b6:da:6a:50:1c:69:77:6d:4a:21:79:c1:eb:
be:c3:88:13:92:ed:94:6d:44:d0:7e:26:40:32:65:4c:a6:bf:
ae:21:f5:f1:4d:bc:06:db:ca:21:69:f5:5e:91:d1:22:bd:46:
a0:51:07:b8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQlwKhaitHbHUXXmHHms099xnBYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdENjNFOEM2NDJDRUQzM0E1NTA0MkZBNDJEQjREQkM4
RDU3NDQzNzAeFw0yNDA0MDQxODM4MjlaFw0yNTA0MDMxODQzMjlaMDMxMTAvBgNV
BAMTKDBFMjZFRDZEMjE0NDVCMzQ0MDhFQkVDRjQ5RTIyNTBFNTg4RUVDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BPAG66WD572su7SGh+OSUyzD
n3glMtJYrtaatA1/RroOOWyaLLUeohi0ZaXpE9OKi9iVMsXoN4nXaqe3uigDGrQE
KjDv7DpV7oKBH29fn4VhxzehzG0Km3MlIcUO3PU9NubsAfJe4OHsMabhzrEbXh1i
NsyC5GUtxtN52fBPg+5XR2A9eo9fStMtxFU6/nFiNlLqbwKJJNj906wuIPl96TSQ
3OgLfRkFRsRrTMxPbrfrSvJKtfsjaQ1QFry/QOShIaA68KUAQA/fWpAIwfZOow55
KzAx6pL0VsnPJ09916r4cuG6bef+dNwMqTvCrohzkvqHAyaELdRaVjujgwtbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDibtbSFEWzRAjr7PSeIlDliO7BEwHwYDVR0j
BBgwFoAU59Y+jGQs7TOlUEL6QttNvI1XRDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHNvWnl0eVh1U1FwTFNKWGVxRWpQQTVpRlVRVzRhUVZLVmhGSjlnMm9W
Wm4vMS9FN0Q2M0U4QzY0MkNFRDMzQTU1MDQyRkE0MkRCNERCQzhENTc0NDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RDYzRThDNjQyQ0VEMzNB
NTUwNDJGQTQyREI0REJDOEQ1NzQ0MzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzb1p5dHlYdVNRcExTSlhlcUVqUEE1aUZVUVc0YVFWS1ZoRko5ZzJvVlpuLzEv
MzEzMzM4MmUzOTM5MmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM4
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAopjGDANBgkqhkiG9w0BAQsFAAOCAQEAqenKaAGSoWoH
3V+i8G45c0J0jarJZFVpUJe8EF+OT/cF6vUs3t2hiSfU5rYZn3LIabDjn2t9PpUq
XncFW8H5S26hBhofINkDgsQjPoVLkA9qCjTRmVSCqEweBlbL0ZvlLP5JilOc3Ja2
cUEsf5hS6C1ZCERfFYSLbmHySU/T20lY+mtxm8X85tFhO/eOPBQVRsZJLgVEu2T1
c2jlphZWpmUvHbGjQSXpcQQiWJrEhZBuhEeIDSxJqGl1blYHp0Q08sT1Fnww+VbJ
T6+22mpQHGl3bUohecHrvsOIE5LtlG1E0H4mQDJlTKa/riH18U28BtvKIWn1XpHR
Ir1GoFEHuA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:01:53 2025 by rpki-client