Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa
File: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (raw, json)
Hash identifier: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=
Subject key identifier: 8B:F2:BB:28:76:5A:E0:FD:C0:11:AA:BA:A0:95:35:63:56:20:CF:5F
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 5976A32CC5E7B33E1BE2AA45AB987AEE3F53ED0B
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa
Signing time: Fri 20 Dec 2024 15:02:05 +0000
ROA not before: Fri 20 Dec 2024 14:57:05 +0000
ROA not after: Fri 19 Dec 2025 15:02:05 +0000
asID: 53158
IP address blocks: 186.209.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:76:a3:2c:c5:e7:b3:3e:1b:e2:aa:45:ab:98:7a:ee:3f:53:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Dec 20 14:57:05 2024 GMT
Not After : Dec 19 15:02:05 2025 GMT
Subject: CN=8BF2BB28765AE0FDC011AABAA09535635620CF5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:61:fe:ff:7b:1d:9f:b2:d3:00:03:d3:c8:
41:e2:7b:d4:76:20:16:0c:2e:8e:f2:5e:78:17:b0:
25:47:28:bb:8c:ea:27:07:ce:53:53:82:1f:7f:54:
2f:8f:2d:a5:28:9e:c2:ef:c7:74:24:08:7e:33:ae:
14:53:d7:34:8c:eb:0a:cf:26:af:93:db:c2:0b:d6:
d4:c0:ee:33:d9:75:e5:65:24:36:4b:d1:9e:ba:91:
a7:25:8b:ba:6f:af:39:31:c8:7c:79:14:e4:60:e1:
b3:95:d1:75:84:a6:2c:22:71:30:9d:3e:38:54:03:
b2:b4:b8:33:ae:16:2f:f9:4d:76:f4:22:f8:55:91:
b4:2a:ba:d3:6e:83:36:f7:24:cc:eb:bd:1a:26:8b:
40:99:19:51:9e:90:65:85:db:c6:31:5f:23:e2:85:
59:41:62:a9:70:8d:69:57:5e:c4:93:33:f2:d8:80:
ba:97:09:e5:4d:98:e4:39:a0:26:d2:b0:ff:fa:ec:
63:1d:e1:59:a1:22:4b:10:e5:0b:58:46:2d:d1:e1:
6e:07:aa:68:b1:31:ef:df:46:f6:1b:36:6d:16:fd:
84:58:21:c7:1a:40:04:ea:33:47:a2:b6:1d:de:54:
76:2e:e0:68:d6:c9:e6:2d:ac:50:bb:f2:d5:9d:33:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:BB:28:76:5A:E0:FD:C0:11:AA:BA:A0:95:35:63:56:20:CF:5F
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:08:b7:59:5e:09:53:80:b7:78:1f:2a:8d:7f:cc:50:48:4d:
f3:62:d0:fb:f7:40:cd:72:4e:4e:dc:6c:b7:ec:d1:9f:92:59:
84:07:7c:ce:84:a0:c8:a6:47:4e:27:bd:4a:3f:cc:6a:87:ad:
61:fb:a1:d4:3c:04:2f:17:28:ba:12:b9:40:49:af:32:be:42:
c8:27:a2:da:78:4c:b3:29:bb:22:40:86:48:a7:9d:0c:41:ef:
31:7b:d9:f6:2f:19:25:cc:f2:87:2a:10:ad:1e:6a:89:7f:f8:
46:12:1e:44:a3:22:4d:a5:04:43:9a:df:e1:a2:ea:bd:1f:7c:
5d:65:6d:19:bb:44:33:50:01:5c:18:1f:ad:e0:56:a5:bb:ac:
05:e2:07:40:37:24:22:7d:9f:4c:79:3d:7d:23:34:38:bf:1b:
95:0b:e9:1b:40:bd:bc:78:e9:3a:b1:37:58:3b:df:27:97:7a:
90:9d:0e:a2:84:97:fb:ef:f0:f0:9b:f5:4d:9e:6a:b0:00:ac:
0a:01:75:e6:66:57:1c:cb:61:93:87:85:de:22:81:92:27:2d:
02:e8:4c:cc:16:e1:0e:eb:94:92:e8:95:0d:76:de:11:4d:46:
0a:fe:0f:c2:44:f1:d0:e1:bf:8a:d1:e2:4a:74:31:b5:40:b0:
70:03:d6:f6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUWXajLMXnsz4b4qpFq5h67j9T7QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5
NzZCMDcxNzAeFw0yNDEyMjAxNDU3MDVaFw0yNTEyMTkxNTAyMDVaMDMxMTAvBgNV
BAMTKDhCRjJCQjI4NzY1QUUwRkRDMDExQUFCQUEwOTUzNTYzNTYyMENGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDHWH+/3sdn7LTAAPTyEHie9R2
IBYMLo7yXngXsCVHKLuM6icHzlNTgh9/VC+PLaUonsLvx3QkCH4zrhRT1zSM6wrP
Jq+T28IL1tTA7jPZdeVlJDZL0Z66kacli7pvrzkxyHx5FORg4bOV0XWEpiwicTCd
PjhUA7K0uDOuFi/5TXb0IvhVkbQqutNugzb3JMzrvRomi0CZGVGekGWF28YxXyPi
hVlBYqlwjWlXXsSTM/LYgLqXCeVNmOQ5oCbSsP/67GMd4VmhIksQ5QtYRi3R4W4H
qmixMe/fRvYbNm0W/YRYIccaQATqM0eith3eVHYu4GjWyeYtrFC78tWdM1PhAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUi/K7KHZa4P3AEaq6oJU1Y1Ygz18wHwYDVR0j
BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl
LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF
NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzEz
ODM2MmUzMjMwMzkyZTM0MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzEz
NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEutEwMA0GCSqGSIb3DQEBCwUAA4IBAQBcCLdZXglTgLd4
HyqNf8xQSE3zYtD790DNck5O3Gy37NGfklmEB3zOhKDIpkdOJ71KP8xqh61h+6HU
PAQvFyi6ErlASa8yvkLIJ6LaeEyzKbsiQIZIp50MQe8xe9n2LxklzPKHKhCtHmqJ
f/hGEh5EoyJNpQRDmt/houq9H3xdZW0Zu0QzUAFcGB+t4Falu6wF4gdANyQifZ9M
eT19IzQ4vxuVC+kbQL28eOk6sTdYO98nl3qQnQ6ihJf77/Dwm/VNnmqwAKwKAXXm
Zlccy2GTh4XeIoGSJy0C6EzMFuEO65SS6JUNdt4RTUYK/g/CRPHQ4b+K0eJKdDG1
QLBwA9b2
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:17 2025 by rpki-client