Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
File: 3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier: 0MFfiXic+V90A0smzs10RYsb8NM7jYXCSdh17VQBpAs=
Subject key identifier: 5A:73:26:DA:76:9C:49:45:F1:77:D4:20:DD:21:AC:74:7B:0C:2A:06
Certificate issuer: /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial: 3A46B04DBB9FA6C08EB50C22D379A7ABA2B8EE8D
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
Signing time: Thu 04 Apr 2024 03:39:48 +0000
ROA not before: Thu 04 Apr 2024 03:34:48 +0000
ROA not after: Thu 03 Apr 2025 03:39:48 +0000
asID: 264552
IP address blocks: 138.0.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:46:b0:4d:bb:9f:a6:c0:8e:b5:0c:22:d3:79:a7:ab:a2:b8:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Validity
Not Before: Apr 4 03:34:48 2024 GMT
Not After : Apr 3 03:39:48 2025 GMT
Subject: CN=5A7326DA769C4945F177D420DD21AC747B0C2A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:19:44:e0:51:23:7d:05:1f:7c:95:de:06:
68:99:7c:b7:9d:b5:83:33:e7:93:19:72:14:42:75:
10:03:84:de:54:a5:57:86:89:46:e1:9b:72:b2:31:
5a:39:4e:66:fd:1f:18:43:1a:bc:0b:44:25:80:61:
df:5c:04:dd:61:48:33:a7:09:8c:9f:d5:a8:dd:43:
75:30:9f:76:6e:72:a9:ea:2c:6b:71:74:65:ba:8b:
d1:aa:a7:47:d4:44:a7:e3:4b:ed:da:f9:16:05:83:
db:a4:4e:b7:f5:b2:82:2c:51:7d:48:d1:39:99:5d:
4b:a9:ae:9a:ef:f5:ab:9f:87:d8:b4:4f:16:51:27:
4f:e5:f2:4e:5f:50:11:5e:a7:ee:6a:38:93:f4:9f:
ba:ef:b3:36:68:be:04:b2:4d:c5:82:51:59:ec:6d:
39:bc:b4:66:1e:f8:5d:88:7d:e7:f3:5c:6c:2e:12:
db:46:81:92:43:ed:1e:1a:1f:5d:61:45:ea:d0:53:
3d:8f:af:c4:60:55:2e:58:a8:df:43:32:98:2c:57:
f7:2f:59:33:44:92:1d:39:81:b4:f7:9b:2a:a0:ce:
b8:4e:08:86:37:cf:a0:32:f4:50:b3:a0:77:67:5d:
e7:82:ad:62:58:0f:96:ee:9c:35:76:2d:94:0e:4f:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:26:DA:76:9C:49:45:F1:77:D4:20:DD:21:AC:74:7B:0C:2A:06
X509v3 Authority Key Identifier:
keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.172.0/22
Signature Algorithm: sha256WithRSAEncryption
27:28:df:c2:ad:be:08:7b:ae:8f:d8:10:ba:3c:6a:ea:5b:b4:
c0:dd:25:18:73:90:9f:7f:58:9d:45:f7:02:d1:01:28:3b:5c:
c4:a3:79:40:d9:8f:bf:db:a7:03:0d:f8:8c:05:68:b9:d5:f6:
33:9a:f1:b7:bd:09:2b:ce:99:6f:af:9f:ab:58:f1:98:82:52:
69:bc:f9:35:2b:f7:2f:a6:cd:0b:7b:08:82:0e:01:86:60:09:
8e:3c:f6:6c:08:b2:93:9b:b4:de:97:50:92:c6:4e:0a:08:36:
e9:3e:fc:58:43:8a:c3:8c:29:09:b8:ff:d3:0e:7d:0c:04:da:
05:53:a7:cb:37:44:45:0b:d2:e4:b5:7c:c1:b3:76:6e:05:f1:
76:ff:cb:81:e0:a3:5f:57:f8:1b:e9:1c:c3:26:64:0e:60:c9:
ee:90:0d:a9:94:b7:9b:fb:9f:e4:b8:8a:b3:e1:f3:3d:e8:23:
ec:86:6b:90:3d:aa:fc:63:83:04:70:0f:7a:4c:5f:a3:af:7b:
89:21:3a:9b:9c:08:a5:f1:22:9b:9e:f8:01:5e:7a:68:d4:ce:
e9:95:c8:85:03:7a:b5:d0:3a:06:4f:93:6d:62:99:ce:f7:1b:
5a:1c:e3:4c:c7:14:88:66:78:1c:36:24:61:a6:4a:93:ca:a0:
d9:5f:f7:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOkawTbufpsCOtQwi03mnq6K47o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJFMEM3NDJENURDNUE2QzQxNzUzRjczMjAyRjQxMzIz
RTI3NDM2QzAeFw0yNDA0MDQwMzM0NDhaFw0yNTA0MDMwMzM5NDhaMDMxMTAvBgNV
BAMTKDVBNzMyNkRBNzY5QzQ5NDVGMTc3RDQyMEREMjFBQzc0N0IwQzJBMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWBlE4FEjfQUffJXeBmiZfLed
tYMz55MZchRCdRADhN5UpVeGiUbhm3KyMVo5Tmb9HxhDGrwLRCWAYd9cBN1hSDOn
CYyf1ajdQ3Uwn3ZucqnqLGtxdGW6i9Gqp0fURKfjS+3a+RYFg9ukTrf1soIsUX1I
0TmZXUuprprv9aufh9i0TxZRJ0/l8k5fUBFep+5qOJP0n7rvszZovgSyTcWCUVns
bTm8tGYe+F2IfefzXGwuEttGgZJD7R4aH11hRerQUz2Pr8RgVS5YqN9DMpgsV/cv
WTNEkh05gbT3myqgzrhOCIY3z6Ay9FCzoHdnXeeCrWJYD5bunDV2LZQOTyptAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWnMm2nacSUXxd9Qg3SGsdHsMKgYwHwYDVR0j
BBgwFoAUQuDHQtXcWmxBdT9zIC9BMj4nQ2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK
d1YvMS80MkUwQzc0MkQ1REM1QTZDNDE3NTNGNzMyMDJGNDEzMjNFMjc0MzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRTBDNzQyRDVEQzVBNkM0
MTc1M0Y3MzIwMkY0MTMyM0UyNzQzNkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TkVrTkVuV3d6cVhmalRvOWluUno4eHkzWlRGblhUczFqMlBpdDFkSndWLzEv
MzEzMzM4MmUzMDJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigCsMA0GCSqGSIb3DQEBCwUAA4IBAQAnKN/Crb4I
e66P2BC6PGrqW7TA3SUYc5Cff1idRfcC0QEoO1zEo3lA2Y+/26cDDfiMBWi51fYz
mvG3vQkrzplvr5+rWPGYglJpvPk1K/cvps0LewiCDgGGYAmOPPZsCLKTm7Tel1CS
xk4KCDbpPvxYQ4rDjCkJuP/TDn0MBNoFU6fLN0RFC9LktXzBs3ZuBfF2/8uB4KNf
V/gb6RzDJmQOYMnukA2plLeb+5/kuIqz4fM96CPshmuQPar8Y4MEcA96TF+jr3uJ
ITqbnAil8SKbnvgBXnpo1M7plciFA3q10DoGT5NtYpnO9xtaHONMxxSIZngcNiRh
pkqTyqDZX/eH
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:47 2025 by rpki-client