Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
File: 3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: GZ+2s+xQMsMbYWyNc4xAgA3iJkmtSQtFSfXZ8bPdbtk=
Subject key identifier: 10:A7:6E:B5:EE:2E:DE:B9:00:3B:F1:6E:67:13:5B:88:AF:6C:E7:2E
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 7B772DF37450FCC15AE8F636D76B0DD7920A1B36
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:49 +0000
ROA not before: Mon 14 Oct 2024 01:44:49 +0000
ROA not after: Mon 13 Oct 2025 01:49:49 +0000
asID: 28270
IP address blocks: 168.228.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:77:2d:f3:74:50:fc:c1:5a:e8:f6:36:d7:6b:0d:d7:92:0a:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:49 2024 GMT
Not After : Oct 13 01:49:49 2025 GMT
Subject: CN=10A76EB5EE2EDEB9003BF16E67135B88AF6CE72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:e1:54:18:85:2f:72:69:b6:b0:9c:2e:48:
3b:d6:49:ee:ad:39:89:ad:94:ba:20:09:5b:df:ea:
26:1d:35:c7:94:fc:4e:27:73:31:7b:f3:e1:7b:be:
b7:da:6a:14:28:64:3c:6a:3a:b4:4d:57:a2:d1:1b:
38:8d:48:b6:4b:69:c5:38:db:ac:f2:9a:3c:0e:80:
02:91:fa:19:d7:99:1c:c2:ef:3e:81:7d:1d:c8:e6:
18:ce:f6:28:3e:54:c8:2a:99:9d:45:9e:10:b4:fd:
49:80:35:a1:dd:34:0c:7a:66:b5:a0:19:a3:78:f6:
44:cd:fe:fd:d5:31:c1:96:d0:66:d4:44:3b:96:3e:
63:37:ec:68:ea:7f:61:4a:8c:2b:24:78:af:51:d7:
28:31:23:10:f4:1b:e2:b0:22:47:d2:a1:03:45:ef:
ce:bc:6f:ca:3f:5e:63:19:d2:1b:e1:bf:3c:37:ea:
92:34:b3:4d:48:8a:f1:6c:1c:c8:46:98:16:bb:ac:
a0:d3:35:2d:85:f3:de:5b:ef:92:d3:52:36:23:be:
d7:43:03:87:b0:9d:56:c4:19:a6:ea:2a:31:67:34:
50:05:2b:82:46:76:83:75:98:fc:42:53:6e:ec:1a:
b7:c6:d2:7c:2f:ce:b2:a5:82:71:cd:1f:d0:1b:99:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:6E:B5:EE:2E:DE:B9:00:3B:F1:6E:67:13:5B:88:AF:6C:E7:2E
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:24:7a:a5:6d:33:d5:c4:6d:c8:e3:92:7b:1e:aa:5b:16:89:
8e:33:94:be:e3:34:2d:9f:f9:b7:94:93:41:c7:c9:df:d2:38:
ce:51:26:21:f2:ed:95:d4:69:1d:5d:b6:38:74:47:70:52:c3:
b8:9e:01:91:3e:49:20:d5:e3:50:e8:61:39:64:49:dc:40:c0:
8f:73:35:a1:7b:61:83:71:f5:86:c9:ae:c6:7a:fb:72:de:80:
65:63:5b:05:18:68:e0:d6:b6:6c:29:97:85:fb:7b:6a:88:82:
18:f1:5f:ec:45:66:46:4e:a7:19:df:13:c3:e7:28:14:9b:ec:
07:4a:34:0a:6b:07:87:7c:7b:eb:6c:17:6f:8a:3d:06:6f:00:
15:3f:b4:c1:82:d7:97:19:47:03:24:db:4e:3e:25:9f:e7:be:
93:2e:c6:0f:15:9f:7c:2f:a2:bf:3b:71:86:b1:cd:d2:73:db:
81:a3:e0:87:bd:3e:43:6d:86:4f:65:1d:a4:e6:d2:ee:bc:60:
28:bd:fc:af:e0:15:56:22:1b:46:17:0a:60:7f:46:bb:56:dd:
de:1a:18:e7:3a:a2:52:99:2e:af:23:ff:96:e1:8f:76:e1:ff:
43:3f:9f:92:2e:f7:cb:4e:23:fd:fb:98:65:15:c8:7e:cd:77:
af:e0:35:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe3ct83RQ/MFa6PY212sN15IKGzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NDlaFw0yNTEwMTMwMTQ5NDlaMDMxMTAvBgNV
BAMTKDEwQTc2RUI1RUUyRURFQjkwMDNCRjE2RTY3MTM1Qjg4QUY2Q0U3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnXuFUGIUvcmm2sJwuSDvWSe6t
OYmtlLogCVvf6iYdNceU/E4nczF78+F7vrfaahQoZDxqOrRNV6LRGziNSLZLacU4
26zymjwOgAKR+hnXmRzC7z6BfR3I5hjO9ig+VMgqmZ1FnhC0/UmANaHdNAx6ZrWg
GaN49kTN/v3VMcGW0GbURDuWPmM37Gjqf2FKjCskeK9R1ygxIxD0G+KwIkfSoQNF
7868b8o/XmMZ0hvhvzw36pI0s01IivFsHMhGmBa7rKDTNS2F895b75LTUjYjvtdD
A4ewnVbEGabqKjFnNFAFK4JGdoN1mPxCU27sGrfG0nwvzrKlgnHNH9AbmehtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEKdute4u3rkAO/FuZxNbiK9s5y4wHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo5IAwDQYJKoZIhvcNAQELBQADggEBAI0keqVt
M9XEbcjjknseqlsWiY4zlL7jNC2f+beUk0HHyd/SOM5RJiHy7ZXUaR1dtjh0R3BS
w7ieAZE+SSDV41DoYTlkSdxAwI9zNaF7YYNx9YbJrsZ6+3LegGVjWwUYaODWtmwp
l4X7e2qIghjxX+xFZkZOpxnfE8PnKBSb7AdKNAprB4d8e+tsF2+KPQZvABU/tMGC
15cZRwMk204+JZ/nvpMuxg8Vn3wvor87cYaxzdJz24Gj4Ie9PkNthk9lHaTm0u68
YCi9/K/gFVYiG0YXCmB/RrtW3d4aGOc6olKZLq8j/5bhj3bh/0M/n5Iu98tOI/37
mGUVyH7Nd6/gNQI=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net