Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
File: 3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: t8oY6InYuNZx9qGowwZw/6muVvF4WwnSkIJ22ldk3gw=
Subject key identifier: D3:8F:89:50:5D:8C:96:E5:20:C1:E2:8A:10:1D:D9:66:33:E0:44:EF
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 3628727B234378090939AB2EDAF90F6D2110D9DD
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 28270
IP address blocks: 138.122.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:28:72:7b:23:43:78:09:09:39:ab:2e:da:f9:0f:6d:21:10:d9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=D38F89505D8C96E520C1E28A101DD96633E044EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:34:e1:e1:dd:49:40:b6:bd:25:07:72:d3:
c8:6b:96:20:de:a4:f6:d9:c3:d8:39:9a:0b:bb:d3:
7c:a0:d4:2c:23:c5:1c:85:3a:45:ed:40:c3:5a:49:
b5:a4:8a:76:dd:a0:b9:26:33:29:aa:1f:06:df:e3:
07:ed:99:8f:4d:b7:2f:b7:28:f6:2c:de:69:5c:99:
ab:68:54:94:ae:3b:2e:e5:80:b2:ab:24:8e:df:c8:
a5:ec:50:2c:fb:0a:5c:20:c1:ec:e8:28:f9:a9:16:
cd:01:ed:88:42:64:43:53:14:c7:d8:97:62:46:ff:
17:bb:c1:3f:7c:58:48:d6:c2:aa:29:bb:89:bc:f5:
f4:fd:b0:02:28:d0:d8:a2:b4:5d:e7:d6:7b:44:d8:
50:79:c3:2f:9c:05:bc:9c:1a:ed:e8:69:fd:77:64:
79:9e:d1:20:de:42:70:f0:8c:18:f1:10:2b:ae:2c:
28:11:7b:4b:e8:6c:fe:11:10:d7:61:63:2c:bc:0c:
5a:37:b9:4c:06:c1:f4:9e:57:fd:59:87:ef:60:87:
22:f1:e3:bd:7f:20:f8:8e:d8:ad:a2:3c:59:39:8a:
e9:53:84:6c:1d:d7:44:74:aa:17:13:fb:fe:d7:df:
38:5e:99:3b:7f:b3:1b:f1:b6:96:0f:2b:f2:e1:7c:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:89:50:5D:8C:96:E5:20:C1:E2:8A:10:1D:D9:66:33:E0:44:EF
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a8:0a:7f:c7:25:d3:b8:12:51:a0:d5:27:91:37:3a:46:67:
ce:c0:77:2c:b2:89:50:9c:9a:b8:9b:f2:8c:fe:93:33:e3:2b:
dd:ec:88:24:76:e2:d2:18:c1:ec:c6:9b:93:a6:65:9f:ea:b5:
4b:40:b7:9d:ed:9b:21:e7:8f:fb:e7:d8:48:0d:0a:f2:ea:2f:
4d:0a:84:17:22:f7:0e:b3:57:36:b5:de:37:95:d5:c0:e7:12:
bf:2f:c7:e1:83:5d:e6:7c:00:79:43:fb:fd:c8:cd:cc:a4:a1:
44:bc:c9:bd:b4:c1:6e:d9:ec:57:71:8d:ca:db:a8:35:25:b5:
23:9b:02:ed:36:cc:7e:d1:97:be:13:43:0e:0c:4a:bf:41:a2:
57:35:e0:a4:e2:c4:7f:6a:a6:ec:d9:67:ea:d8:de:1b:e4:bc:
88:2d:a7:d8:24:dd:63:26:0e:dd:38:a9:8f:f7:91:47:f9:3c:
45:71:58:40:6d:25:88:fb:e6:63:74:54:96:82:11:30:05:0e:
cd:b9:fb:d9:c5:08:84:53:58:34:f0:77:e0:b0:be:27:56:7a:
dc:06:98:77:16:cd:00:2e:75:49:1b:1d:97:0d:16:2f:91:1c:
b3:c9:3f:10:61:af:8e:23:4b:23:63:01:93:ba:14:36:85:9c:
4c:7a:8f:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNihyeyNDeAkJOasu2vkPbSEQ2d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTFaFw0yNTEwMTMwMTQ5NTFaMDMxMTAvBgNV
BAMTKEQzOEY4OTUwNUQ4Qzk2RTUyMEMxRTI4QTEwMUREOTY2MzNFMDQ0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZDTh4d1JQLa9JQdy08hrliDe
pPbZw9g5mgu703yg1CwjxRyFOkXtQMNaSbWkinbdoLkmMymqHwbf4wftmY9Nty+3
KPYs3mlcmatoVJSuOy7lgLKrJI7fyKXsUCz7ClwgwezoKPmpFs0B7YhCZENTFMfY
l2JG/xe7wT98WEjWwqopu4m89fT9sAIo0NiitF3n1ntE2FB5wy+cBbycGu3oaf13
ZHme0SDeQnDwjBjxECuuLCgRe0vobP4RENdhYyy8DFo3uUwGwfSeV/1Zh+9ghyLx
471/IPiO2K2iPFk5iulThGwd10R0qhcT+/7X3zhemTt/sxvxtpYPK/LhfBfpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU04+JUF2MluUgweKKEB3ZZjPgRO8wHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKeuwwDQYJKoZIhvcNAQELBQADggEBAK6oCn/H
JdO4ElGg1SeRNzpGZ87AdyyyiVCcmrib8oz+kzPjK93siCR24tIYwezGm5OmZZ/q
tUtAt53tmyHnj/vn2EgNCvLqL00KhBci9w6zVza13jeV1cDnEr8vx+GDXeZ8AHlD
+/3IzcykoUS8yb20wW7Z7FdxjcrbqDUltSObAu02zH7Rl74TQw4MSr9Bolc14KTi
xH9qpuzZZ+rY3hvkvIgtp9gk3WMmDt04qY/3kUf5PEVxWEBtJYj75mN0VJaCETAF
Ds25+9nFCIRTWDTwd+CwvidWetwGmHcWzQAudUkbHZcNFi+RHLPJPxBhr44jSyNj
AZO6FDaFnEx6j2M=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net