Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
File: 3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier: yu4WTLzD025bJgDcAXNnpx+ogTYecfwdv9X1X7jtS/o=
Subject key identifier: 2D:D8:84:08:EE:A9:AE:EE:C8:F8:DA:8C:FF:D9:1D:5D:9D:35:12:6E
Certificate issuer: /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial: 383B4777AC240CD8CBC61C949A9AAA31ECFC4728
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
Signing time: Sat 20 Apr 2024 09:49:01 +0000
ROA not before: Sat 20 Apr 2024 09:44:01 +0000
ROA not after: Sat 19 Apr 2025 09:49:01 +0000
asID: 262784
IP address blocks: 191.241.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3b:47:77:ac:24:0c:d8:cb:c6:1c:94:9a:9a:aa:31:ec:fc:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Validity
Not Before: Apr 20 09:44:01 2024 GMT
Not After : Apr 19 09:49:01 2025 GMT
Subject: CN=2DD88408EEA9AEEEC8F8DA8CFFD91D5D9D35126E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:36:1f:f7:be:70:1a:9b:46:13:5b:ef:10:
54:26:29:f3:de:2e:2e:20:65:11:a4:01:71:62:34:
35:97:14:d5:77:0e:3b:d8:c1:4d:bc:8b:d1:03:24:
82:44:82:0c:fe:97:fb:58:c2:21:76:73:c8:a6:8d:
05:16:31:ca:3a:df:c7:b9:a6:80:ed:28:65:a5:33:
52:d8:38:84:07:24:f5:c4:fe:30:9d:bd:e7:14:da:
3b:95:68:68:cf:fc:e2:d7:11:44:4c:23:2b:53:03:
39:37:d0:a6:a8:90:18:92:49:f0:59:ae:21:fe:c0:
33:7b:f2:5b:1c:22:aa:28:de:46:5a:52:de:ae:df:
d3:54:c8:b7:41:26:72:1b:6d:98:36:16:21:2e:ed:
7a:78:65:4d:fa:7e:a6:fe:4d:2b:97:69:53:a5:f7:
33:70:d5:9b:35:f4:4e:ed:48:99:c6:ed:dd:ab:b4:
d9:b9:4e:2d:6e:0f:95:b9:45:d5:40:04:2e:b3:34:
96:d0:67:59:1f:1d:4a:ed:2f:fa:ae:76:21:9e:58:
73:d8:08:10:26:ef:a0:7a:23:b9:8e:93:7d:9b:c9:
f4:96:22:c3:e0:5c:65:3b:80:75:fc:72:01:88:33:
64:05:f0:0b:22:b4:fd:df:0a:8f:3c:df:ac:12:60:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:84:08:EE:A9:AE:EE:C8:F8:DA:8C:FF:D9:1D:5D:9D:35:12:6E
X509v3 Authority Key Identifier:
keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.153.0/24
Signature Algorithm: sha256WithRSAEncryption
df:22:2c:44:85:37:17:e5:57:f7:66:a0:9d:a3:fd:d3:78:f4:
0f:01:36:ba:8c:bb:4e:e8:57:2d:46:e1:a1:70:fa:ef:d0:32:
e0:d1:2f:59:82:bf:c4:21:d7:b3:68:f6:72:6c:85:99:03:e5:
8d:ce:24:ee:1f:6f:4a:ca:16:fd:37:63:b4:51:8b:2e:16:c6:
b4:61:4a:93:b9:6a:2d:15:9b:12:1b:f9:fb:d8:83:e0:e1:d4:
9d:0d:a4:ed:ef:59:b1:77:5f:b1:59:7a:02:93:46:54:08:90:
ac:ca:7f:07:bd:1c:c1:b4:6b:f6:a2:35:5c:7c:8b:2b:d0:c2:
72:77:68:6f:6d:27:9d:e4:23:66:c8:7c:0c:c7:ca:10:29:cc:
04:63:a8:da:48:b7:f8:22:c8:c7:da:5d:f3:5d:48:24:b4:02:
ff:ae:3b:ad:3a:09:3b:3f:4b:4d:ae:15:22:fc:97:08:a2:f1:
b1:06:ec:ee:c6:5b:ce:9f:06:53:f2:ce:a4:23:9d:08:a6:bd:
e4:4a:c7:86:1a:9b:38:8a:e1:3b:2f:d7:83:9c:c9:8e:e0:ad:
62:18:7a:3c:d2:1b:e9:28:79:90:42:9c:fe:8e:23:c5:ec:76:
36:27:c3:c6:ef:6d:c1:df:c2:5a:7d:1c:ba:10:33:db:9a:64:
fb:1f:3d:f8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUODtHd6wkDNjLxhyUmpqqMez8RygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDFaFw0yNTA0MTkwOTQ5MDFaMDMxMTAvBgNV
BAMTKDJERDg4NDA4RUVBOUFFRUVDOEY4REE4Q0ZGRDkxRDVEOUQzNTEyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+TYf975wGptGE1vvEFQmKfPe
Li4gZRGkAXFiNDWXFNV3DjvYwU28i9EDJIJEggz+l/tYwiF2c8imjQUWMco638e5
poDtKGWlM1LYOIQHJPXE/jCdvecU2juVaGjP/OLXEURMIytTAzk30KaokBiSSfBZ
riH+wDN78lscIqoo3kZaUt6u39NUyLdBJnIbbZg2FiEu7Xp4ZU36fqb+TSuXaVOl
9zNw1Zs19E7tSJnG7d2rtNm5Ti1uD5W5RdVABC6zNJbQZ1kfHUrtL/qudiGeWHPY
CBAm76B6I7mOk32byfSWIsPgXGU7gHX8cgGIM2QF8AsitP3fCo8836wSYHMRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULdiECO6pru7I+NqM/9kdXZ01Em4wHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xmTANBgkqhkiG9w0BAQsFAAOCAQEA3yIs
RIU3F+VX92agnaP903j0DwE2uoy7TuhXLUbhoXD679Ay4NEvWYK/xCHXs2j2cmyF
mQPljc4k7h9vSsoW/TdjtFGLLhbGtGFKk7lqLRWbEhv5+9iD4OHUnQ2k7e9ZsXdf
sVl6ApNGVAiQrMp/B70cwbRr9qI1XHyLK9DCcndob20nneQjZsh8DMfKECnMBGOo
2ki3+CLIx9pd811IJLQC/647rToJOz9LTa4VIvyXCKLxsQbs7sZbzp8GU/LOpCOd
CKa95ErHhhqbOIrhOy/Xg5zJjuCtYhh6PNIb6Sh5kEKc/o4jxex2NifDxu9twd/C
Wn0cuhAz25pk+x89+A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:31 2025 by rpki-client