Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
File: 3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (raw, json)
Hash identifier: WIM5YpzOJ9Ig0wMVsvTX0Vx9G5/m/3HReHGfBamVwak=
Subject key identifier: E1:2E:5A:1B:2F:7D:CB:57:DA:E2:34:4B:5F:34:00:D1:1E:1D:D7:57
Certificate issuer: /CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
Certificate serial: 3C919F1483F89436586DEF62994620B9965291D6
Authority key identifier: 2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
Signing time: Wed 04 Dec 2024 11:10:19 +0000
ROA not before: Wed 04 Dec 2024 11:05:19 +0000
ROA not after: Wed 03 Dec 2025 11:10:19 +0000
asID: 262469
IP address blocks: 168.196.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:91:9f:14:83:f8:94:36:58:6d:ef:62:99:46:20:b9:96:52:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
Validity
Not Before: Dec 4 11:05:19 2024 GMT
Not After : Dec 3 11:10:19 2025 GMT
Subject: CN=E12E5A1B2F7DCB57DAE2344B5F3400D11E1DD757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:d3:55:4a:b4:e2:fe:a5:4f:61:75:d8:a4:
63:bc:02:e6:1e:d8:c3:32:00:d2:65:9d:ff:91:fd:
d8:16:53:b9:f5:dd:5b:7c:df:b2:da:dd:d9:f2:b7:
8a:c6:bd:35:46:92:51:15:f3:2d:9c:3e:4c:2e:56:
68:72:f2:69:38:1d:a6:35:78:10:d9:4d:f7:83:f0:
f1:fd:b1:cc:d7:1a:be:bf:7f:e7:0b:29:dd:7f:d2:
a5:86:3b:e3:1d:fb:ed:7d:df:8b:c4:8d:4e:04:d4:
31:b5:ca:3b:13:d2:93:33:27:a0:76:f2:2c:d5:5e:
8b:34:31:68:50:2e:a6:bc:db:7e:f1:91:8d:98:61:
40:bf:9e:68:ef:8d:04:bf:64:18:f7:37:22:ad:bc:
bc:67:3c:23:76:54:9b:ba:ed:9e:3e:e4:1a:f2:9c:
0b:d4:85:d4:d4:34:63:3e:73:2e:29:4d:b7:5c:bf:
06:f4:7f:63:e9:ae:2f:e5:1e:04:75:76:8f:5e:69:
a4:c0:4a:d2:f6:22:7f:18:d7:3e:5b:32:4f:27:42:
3b:27:6a:dd:39:6f:e9:b7:ef:6d:60:9e:b9:62:15:
5f:fe:54:d9:93:f6:17:12:02:eb:6a:6b:41:31:0f:
e7:eb:2b:38:13:20:c3:1b:67:16:37:64:1b:1d:99:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:5A:1B:2F:7D:CB:57:DA:E2:34:4B:5F:34:00:D1:1E:1D:D7:57
X509v3 Authority Key Identifier:
keyid:2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.172.0/22
Signature Algorithm: sha256WithRSAEncryption
73:35:4c:34:63:e5:ef:5b:c4:ec:0c:cd:b7:d5:53:3d:22:a9:
ad:77:36:05:95:97:3c:2e:17:f2:ca:51:15:72:52:c5:d0:8c:
fa:7c:bc:d1:83:13:6d:3d:76:a1:6a:0b:00:bc:0a:df:2f:3f:
4c:84:11:b9:89:35:59:47:93:04:56:ba:56:ea:a9:8b:5c:1d:
d1:6f:06:29:0b:35:d8:ab:48:da:23:0a:0b:a5:b9:ce:4b:b9:
16:c4:36:8e:32:9e:71:57:25:66:52:e5:f3:06:fa:3e:1a:78:
00:7a:23:39:60:f0:0f:13:ac:5b:ff:4a:1f:78:33:a1:b5:71:
7f:bc:a9:bc:d5:58:a9:af:db:70:3b:06:bc:ca:bd:ac:a4:33:
61:aa:ea:99:31:80:b7:e3:36:59:0c:a4:c2:d6:45:09:ce:ea:
4a:87:d9:be:4f:71:ac:d5:31:63:8a:f9:fa:80:20:09:e2:a6:
27:39:58:6b:cf:99:9d:d3:ff:44:90:0e:db:1d:fc:aa:fa:80:
d4:bd:68:46:ac:1c:dd:52:0e:c1:16:81:c4:c0:c7:58:74:5c:
02:a8:22:b1:62:37:bd:73:32:04:c8:07:04:a6:d2:55:c1:af:
69:8c:46:d2:39:60:83:1b:98:36:c0:f8:9d:87:28:1d:6a:92:
35:c7:2b:c9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPJGfFIP4lDZYbe9imUYguZZSkdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJFOTA2NDc1RjA2OUQyREJGNDg2NjhCNzJDODI3REEy
Q0E4RTQ3MDAeFw0yNDEyMDQxMTA1MTlaFw0yNTEyMDMxMTEwMTlaMDMxMTAvBgNV
BAMTKEUxMkU1QTFCMkY3RENCNTdEQUUyMzQ0QjVGMzQwMEQxMUUxREQ3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFtNVSrTi/qVPYXXYpGO8AuYe
2MMyANJlnf+R/dgWU7n13Vt837La3dnyt4rGvTVGklEV8y2cPkwuVmhy8mk4HaY1
eBDZTfeD8PH9sczXGr6/f+cLKd1/0qWGO+Md++1934vEjU4E1DG1yjsT0pMzJ6B2
8izVXos0MWhQLqa8237xkY2YYUC/nmjvjQS/ZBj3NyKtvLxnPCN2VJu67Z4+5Bry
nAvUhdTUNGM+cy4pTbdcvwb0f2Ppri/lHgR1do9eaaTAStL2In8Y1z5bMk8nQjsn
at05b+m3721gnrliFV/+VNmT9hcSAutqa0ExD+frKzgTIMMbZxY3ZBsdmaczAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4S5aGy99y1fa4jRLXzQA0R4d11cwHwYDVR0j
BBgwFoAUK+kGR18GnS2/SGaLcsgn2iyo5HAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyZGlxZWlZRGc3RDJQQmZXZndUYTRMcjZNUUVXY3JpZGtOaEd4Rjh0
ZzIvMC8yQkU5MDY0NzVGMDY5RDJEQkY0ODY2OEI3MkM4MjdEQTJDQThFNDcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTkwNjQ3NUYwNjlEMkRC
RjQ4NjY4QjcyQzgyN0RBMkNBOEU0NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVLMmRpcWVpWURnN0QyUEJmV2Z3VGE0THI2TVFFV2NyaWRrTmhHeEY4dGcyLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjErDANBgkqhkiG9w0BAQsFAAOCAQEAczVM
NGPl71vE7AzNt9VTPSKprXc2BZWXPC4X8spRFXJSxdCM+ny80YMTbT12oWoLALwK
3y8/TIQRuYk1WUeTBFa6Vuqpi1wd0W8GKQs12KtI2iMKC6W5zku5FsQ2jjKecVcl
ZlLl8wb6Php4AHojOWDwDxOsW/9KH3gzobVxf7ypvNVYqa/bcDsGvMq9rKQzYarq
mTGAt+M2WQykwtZFCc7qSofZvk9xrNUxY4r5+oAgCeKmJzlYa8+ZndP/RJAO2x38
qvqA1L1oRqwc3VIOwRaBxMDHWHRcAqgisWI3vXMyBMgHBKbSVcGvaYxG0jlggxuY
NsD4nYcoHWqSNccryQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:58:22 2025 by rpki-client