Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
File: 3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier: HmsLsQ4SubALTJgDEvBw4Bp/z5b602mD7SlXKQCYn5A=
Subject key identifier: 4C:7F:67:E2:2E:D5:23:51:F4:0A:C7:58:41:EE:B0:69:A9:63:C4:09
Certificate issuer: /CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Certificate serial: 61372B6FD9CAD8DF91733F1999810E9B555D6178
Authority key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
Signing time: Fri 20 Dec 2024 13:58:57 +0000
ROA not before: Fri 20 Dec 2024 13:53:57 +0000
ROA not after: Fri 19 Dec 2025 13:58:57 +0000
asID: 262669
IP address blocks: 138.94.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:2b:6f:d9:ca:d8:df:91:73:3f:19:99:81:0e:9b:55:5d:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Validity
Not Before: Dec 20 13:53:57 2024 GMT
Not After : Dec 19 13:58:57 2025 GMT
Subject: CN=4C7F67E22ED52351F40AC75841EEB069A963C409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:64:14:e6:8a:ee:5f:06:86:6d:c7:e2:44:
7c:d8:ab:e7:57:77:d3:a4:6f:8a:20:f9:a8:30:23:
81:43:46:6a:68:be:9a:5d:d5:4f:36:e0:f9:c8:ca:
c9:7a:a4:de:85:84:3a:c4:c8:da:a5:d9:48:3f:73:
ee:31:34:5c:be:ef:3f:15:33:a5:ff:5f:60:2c:b1:
18:95:8c:bc:93:16:6b:f1:fc:0a:67:96:cd:de:ae:
5f:7e:81:ea:52:d8:ed:3d:6d:65:78:4c:39:dc:00:
00:92:c9:f5:a3:90:c5:00:02:94:6d:85:27:0a:36:
4a:3d:da:a0:b9:a4:c6:fc:61:8c:b9:aa:e4:68:01:
bd:15:8f:8a:b8:52:cb:48:20:2f:5f:a3:08:52:1b:
11:84:ff:66:88:07:30:41:25:c9:f9:09:d2:5d:d0:
3a:a7:e2:fc:7f:d9:0b:8f:5b:a4:4c:e4:82:82:f0:
ed:c0:c3:29:cf:92:f0:a1:74:22:5f:7d:bf:3e:ff:
76:8e:47:21:44:f4:5f:ae:6d:8b:e1:68:c3:1c:91:
8a:aa:7e:f9:38:b4:5e:3e:99:80:59:cd:03:4e:c5:
2d:4c:05:c4:2b:d2:15:25:19:6d:27:2c:ee:66:81:
52:3c:a0:ff:15:f0:65:d3:35:7a:c7:a9:e0:1a:66:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:67:E2:2E:D5:23:51:F4:0A:C7:58:41:EE:B0:69:A9:63:C4:09
X509v3 Authority Key Identifier:
keyid:24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c8:66:09:0e:5d:0b:0c:e1:23:2f:0b:fc:59:35:cb:2f:8a:
75:dc:45:eb:b9:e4:52:cc:92:b1:59:d9:8b:83:fb:b4:c9:1d:
bd:cf:e5:b1:4e:07:03:2b:23:ce:47:09:3b:fa:9e:4d:f1:57:
a7:b1:5f:63:b6:5a:b9:e2:ce:6f:50:fe:6c:4b:c3:f6:64:a8:
b8:3c:30:90:6f:b7:a6:d8:13:5f:14:b1:04:3f:81:0d:e8:0a:
47:18:52:e7:41:02:63:4f:ff:f8:26:b2:dc:e6:56:04:d8:b1:
37:93:a0:19:e0:e0:f5:d8:82:93:53:01:19:61:f9:a7:53:87:
d0:85:ed:5d:85:ce:d4:f2:93:a5:88:ff:29:5e:ea:32:cf:1c:
1c:1e:53:a3:a1:63:43:b0:66:e2:f2:c3:df:a1:87:cb:4e:57:
15:1b:a2:67:fc:ac:2c:8a:19:bb:d0:7f:92:2a:b6:75:c5:37:
a8:e7:20:62:80:4f:56:a1:a3:84:16:36:72:7c:f3:9a:b8:bd:
05:7a:f9:66:dd:e1:69:a5:a1:fb:b9:e7:a4:7b:56:98:6e:8a:
c9:ab:cb:b1:ec:79:60:17:6f:74:d7:7a:11:2e:43:46:ea:e9:
73:0b:cc:d4:74:ed:29:86:42:1d:f0:3e:2e:5d:b2:62:6e:f8:
fd:b9:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:36 2025 by rpki-client