Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
File: 3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier: ymsEPW4b9FSdSv0+U/rRpOwi40kv6lnyLXpSYH9idgs=
Subject key identifier: BF:AB:D2:1C:15:0A:DD:6E:C2:94:37:6B:76:6E:CE:50:03:9C:23:64
Certificate issuer: /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial: 0C02C6D061540644BCFCB67D700A2A2BDB0F2166
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
Signing time: Thu 04 Apr 2024 06:53:53 +0000
ROA not before: Thu 04 Apr 2024 06:48:53 +0000
ROA not after: Thu 03 Apr 2025 06:53:53 +0000
asID: 262645
IP address blocks: 192.140.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:02:c6:d0:61:54:06:44:bc:fc:b6:7d:70:0a:2a:2b:db:0f:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Validity
Not Before: Apr 4 06:48:53 2024 GMT
Not After : Apr 3 06:53:53 2025 GMT
Subject: CN=BFABD21C150ADD6EC294376B766ECE50039C2364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:44:d4:c4:3d:7b:33:a0:c9:d6:8d:98:b8:
ea:ba:81:74:69:7c:3e:0a:16:53:97:be:bb:13:1d:
0a:36:6e:63:d1:fb:c3:74:cb:cb:1f:a4:fb:c6:c8:
c6:f1:11:0b:fb:d0:8e:15:28:1c:59:ef:cd:73:21:
f2:47:d5:c8:c1:34:71:a7:8e:8f:60:3a:bd:41:7c:
da:c8:44:cb:36:e6:e2:95:a3:41:6e:02:84:18:2e:
cc:ea:2a:ca:e4:a5:fd:b3:2f:08:37:fa:c7:43:7f:
43:63:ae:6e:39:8d:b7:e1:89:6d:4e:df:b4:ad:db:
51:13:23:75:74:7f:5e:57:a5:d9:a1:da:98:bf:30:
85:83:0c:49:8c:d0:e8:fe:fb:8d:c1:30:3f:77:4d:
82:f9:5e:05:b3:84:e4:91:c1:a2:54:8f:45:59:7b:
f0:1d:b7:15:fd:a9:cd:bb:8a:7d:b0:5e:6d:54:c8:
25:48:6a:08:49:7e:ca:31:b4:34:87:64:ff:a0:0e:
8c:1b:0a:a5:83:b0:7f:b6:7c:4d:07:34:1b:d1:20:
5d:e4:e0:14:4e:d1:9e:a7:a9:e7:08:aa:de:f6:ac:
10:4a:b4:07:d6:9b:a9:da:36:99:22:0b:fd:bc:ad:
a3:e9:bb:42:f1:18:de:33:52:b6:de:65:1f:92:2b:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:D2:1C:15:0A:DD:6E:C2:94:37:6B:76:6E:CE:50:03:9C:23:64
X509v3 Authority Key Identifier:
keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
af:17:be:a5:a3:62:d5:fc:49:97:f3:e7:e2:5e:e8:42:ad:d4:
98:d8:ce:3f:9b:42:9c:dd:24:f2:3e:7e:74:62:09:82:d2:43:
19:20:12:11:2e:d5:cb:a6:d1:6f:1e:43:9f:6c:a4:a3:7f:80:
56:8d:4d:f1:b5:54:2e:fb:73:38:3c:27:19:71:10:e4:f5:e2:
da:3b:4e:bf:6e:3b:84:ad:ce:2b:b0:8e:32:ac:7b:2f:83:95:
97:17:f0:a1:3a:03:ac:e7:b5:14:92:c1:d6:ff:a5:0f:27:cb:
48:ca:b7:29:e3:52:eb:32:ac:db:ed:64:68:3f:9b:87:7c:cf:
ff:31:c0:bf:fa:89:dc:64:c9:d4:0e:4e:4e:38:56:ff:66:73:
75:34:52:39:3d:e3:ca:e3:61:76:c5:e2:6d:5d:56:30:df:96:
1b:a8:90:76:7d:f8:2d:f1:a1:29:4d:aa:b7:2d:86:db:7b:91:
0a:57:96:8b:6b:06:99:85:84:72:57:84:bc:41:25:bb:47:8c:
5a:43:8c:b9:b9:1e:5e:e6:b2:f1:dd:2f:99:21:7a:59:b7:28:
07:11:c4:7e:94:48:79:63:58:72:e7:72:68:93:5b:03:fc:e1:
48:79:98:07:e5:b5:7d:cd:fa:c4:6e:ed:77:25:09:fd:d1:9f:
57:f5:c0:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDALG0GFUBkS8/LZ9cAoqK9sPIWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5RjJCODFFRDEyRDRCMDJBNUIxMDREQjIwMERFRjBB
MDMzMDNBRDAeFw0yNDA0MDQwNjQ4NTNaFw0yNTA0MDMwNjUzNTNaMDMxMTAvBgNV
BAMTKEJGQUJEMjFDMTUwQURENkVDMjk0Mzc2Qjc2NkVDRTUwMDM5QzIzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjkTUxD17M6DJ1o2YuOq6gXRp
fD4KFlOXvrsTHQo2bmPR+8N0y8sfpPvGyMbxEQv70I4VKBxZ781zIfJH1cjBNHGn
jo9gOr1BfNrIRMs25uKVo0FuAoQYLszqKsrkpf2zLwg3+sdDf0Njrm45jbfhiW1O
37St21ETI3V0f15Xpdmh2pi/MIWDDEmM0Oj++43BMD93TYL5XgWzhOSRwaJUj0VZ
e/AdtxX9qc27in2wXm1UyCVIaghJfsoxtDSHZP+gDowbCqWDsH+2fE0HNBvRIF3k
4BRO0Z6nqecIqt72rBBKtAfWm6naNpkiC/28raPpu0LxGN4zUrbeZR+SK86NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv6vSHBUK3W7ClDdrdm7OUAOcI2QwHwYDVR0j
BBgwFoAU4J8rge0S1LAqWxBNsgDe8KAzA60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1mSFJ6elNaMjY5Y25RYm96Z3lSYk5wd3A0Z0xuV0JOV0ZQV1pFbVdH
WHMvMS9FMDlGMkI4MUVEMTJENEIwMkE1QjEwNERCMjAwREVGMEEwMzMwM0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOUYyQjgxRUQxMkQ0QjAy
QTVCMTA0REIyMDBERUYwQTAzMzAzQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZkhSenpTWjI2OWNuUWJvemd5UmJOcHdwNGdMbldCTldGUFdaRW1XR1hzLzEv
MzEzOTMyMmUzMTM0MzAyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjCwwDQYJKoZIhvcNAQELBQADggEBAK8XvqWj
YtX8SZfz5+Je6EKt1JjYzj+bQpzdJPI+fnRiCYLSQxkgEhEu1cum0W8eQ59spKN/
gFaNTfG1VC77czg8JxlxEOT14to7Tr9uO4StziuwjjKsey+DlZcX8KE6A6zntRSS
wdb/pQ8ny0jKtynjUusyrNvtZGg/m4d8z/8xwL/6idxkydQOTk44Vv9mc3U0Ujk9
48rjYXbF4m1dVjDflhuokHZ9+C3xoSlNqrcthtt7kQpXlotrBpmFhHJXhLxBJbtH
jFpDjLm5Hl7msvHdL5khelm3KAcRxH6USHljWHLncmiTWwP84Uh5mAfltX3N+sRu
7XclCf3Rn1f1wM0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:27 2025 by rpki-client