Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa
File: 3138392e3132372e302e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier: RUn5vkqL6dac667zaS1q51gaMh1nzkxCFsH76JsM3Cw=
Subject key identifier: 67:31:27:E7:50:E0:B2:A1:A3:D8:16:15:E0:E1:91:B7:B3:53:55:D1
Certificate issuer: /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial: 560B4ED362F1510F938F582908D65AD176F39D47
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa
Signing time: Tue 22 Oct 2024 14:30:17 +0000
ROA not before: Tue 22 Oct 2024 14:25:17 +0000
ROA not after: Tue 21 Oct 2025 14:30:17 +0000
asID: 27693
IP address blocks: 189.127.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0b:4e:d3:62:f1:51:0f:93:8f:58:29:08:d6:5a:d1:76:f3:9d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Validity
Not Before: Oct 22 14:25:17 2024 GMT
Not After : Oct 21 14:30:17 2025 GMT
Subject: CN=673127E750E0B2A1A3D81615E0E191B7B35355D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e6:4c:cd:9b:64:fb:0b:8d:49:f9:c2:0e:63:
4e:9e:8e:96:94:65:7b:2a:f1:5e:91:23:c7:fe:e7:
7b:53:cd:28:64:17:31:f3:c8:13:34:6f:57:c2:40:
f5:d0:8b:15:5f:87:6b:63:c4:bf:3e:aa:a8:22:4b:
2c:0e:d3:f4:bd:36:29:0c:42:e4:52:c2:3a:79:27:
1c:d5:21:54:f9:d5:33:c1:b2:a5:43:ac:09:d9:bc:
10:c0:62:ea:9e:25:e1:08:0d:fc:12:fb:83:24:29:
ef:6a:74:88:80:2f:f3:14:ab:c3:d9:bf:e6:d1:87:
41:47:40:a8:90:96:0a:27:51:b0:af:92:34:c9:a7:
da:73:f8:b5:a5:b0:1c:40:ab:fd:6c:c0:1c:9e:6a:
1b:e1:83:50:09:92:1e:c5:2b:bb:29:98:c2:06:fa:
61:9a:e8:d0:19:75:90:c1:32:eb:d9:1f:97:80:61:
86:3d:55:d4:5e:8a:71:b9:5d:12:57:57:68:e5:11:
c2:c5:72:bb:8b:96:a5:cd:ff:c8:a0:e5:5c:a7:50:
65:e9:8b:6b:33:2e:23:de:af:47:d2:bc:02:9f:69:
64:1a:33:1c:dc:f8:a5:a0:2e:d0:79:b9:e9:25:35:
29:28:24:75:89:12:c7:83:ed:a4:68:27:07:2b:2e:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:27:E7:50:E0:B2:A1:A3:D8:16:15:E0:E1:91:B7:B3:53:55:D1
X509v3 Authority Key Identifier:
keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.0.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:e3:7d:4f:f0:4e:ca:8a:41:60:40:f4:79:cc:16:54:1c:f3:
15:63:05:b8:4f:68:eb:b7:5c:32:c4:fc:c3:94:84:bd:c7:3d:
a7:f1:0e:07:1b:91:49:8e:f2:7c:cb:b1:44:6e:ee:70:63:84:
17:c0:f1:4d:f3:6e:74:46:64:86:e8:c1:af:1c:39:02:4e:40:
3e:72:4f:67:1a:6b:ff:09:95:c8:96:34:0c:d8:d9:e4:5a:a3:
16:ca:b8:15:0d:5a:35:e8:bb:4d:1a:09:69:76:1a:da:f6:08:
06:5a:a0:2b:6e:f1:7e:e4:1f:7f:dc:ca:b0:fe:23:8f:3c:ff:
a5:26:31:16:8f:18:71:1a:30:0c:ae:93:10:66:d8:95:27:22:
b6:56:e4:fb:74:ec:01:b9:b0:aa:74:ab:20:83:c1:f2:dc:35:
ec:c5:ee:9d:bf:8d:10:37:09:2d:ee:e2:96:34:67:28:26:3f:
3f:37:89:60:cd:42:43:3a:f1:bc:04:53:82:6a:e2:6a:43:d4:
1e:14:0a:94:eb:26:37:a9:e1:4c:5a:df:0d:3a:cd:16:9e:7b:
24:5d:74:f4:58:ab:7a:18:bb:90:ba:c0:1b:59:d4:8c:82:f3:
0b:7a:19:7b:95:f8:6a:ed:66:c6:de:9c:9a:1e:07:2d:9e:b7:
e4:ee:72:2d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVgtO02LxUQ+Tj1gpCNZa0XbznUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNDEwMjIxNDI1MTdaFw0yNTEwMjExNDMwMTdaMDMxMTAvBgNV
BAMTKDY3MzEyN0U3NTBFMEIyQTFBM0Q4MTYxNUUwRTE5MUI3QjM1MzU1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD25kzNm2T7C41J+cIOY06ejpaU
ZXsq8V6RI8f+53tTzShkFzHzyBM0b1fCQPXQixVfh2tjxL8+qqgiSywO0/S9NikM
QuRSwjp5JxzVIVT51TPBsqVDrAnZvBDAYuqeJeEIDfwS+4MkKe9qdIiAL/MUq8PZ
v+bRh0FHQKiQlgonUbCvkjTJp9pz+LWlsBxAq/1swByeahvhg1AJkh7FK7spmMIG
+mGa6NAZdZDBMuvZH5eAYYY9VdReinG5XRJXV2jlEcLFcruLlqXN/8ig5VynUGXp
i2szLiPer0fSvAKfaWQaMxzc+KWgLtB5ueklNSkoJHWJEseD7aRoJwcrLmKlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZzEn51DgsqGj2BYV4OGRt7NTVdEwHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM5MmUzMTMyMzcyZTMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNzM2
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL1/ADANBgkqhkiG9w0BAQsFAAOCAQEAneN9T/BOyopB
YED0ecwWVBzzFWMFuE9o67dcMsT8w5SEvcc9p/EOBxuRSY7yfMuxRG7ucGOEF8Dx
TfNudEZkhujBrxw5Ak5APnJPZxpr/wmVyJY0DNjZ5FqjFsq4FQ1aNei7TRoJaXYa
2vYIBlqgK27xfuQff9zKsP4jjzz/pSYxFo8YcRowDK6TEGbYlScitlbk+3TsAbmw
qnSrIIPB8tw17MXunb+NEDcJLe7iljRnKCY/PzeJYM1CQzrxvARTgmriakPUHhQK
lOsmN6nhTFrfDTrNFp57JF109Firehi7kLrAG1nUjILzC3oZe5X4au1mxt6cmh4H
LZ635O5yLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:04 2025 by rpki-client