Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
File: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier: te9dM/vi02hOJYa63nbqx+ItnCy/6UpGoTr9av2znFg=
Subject key identifier: 32:AD:92:9C:F4:84:2A:45:24:65:D6:87:EB:C2:C0:76:B7:17:FE:E5
Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial: 347CBBDACC13FC42DA7D6E7937E4E0219B5A4B0B
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
Signing time: Wed 03 Apr 2024 18:31:25 +0000
ROA not before: Wed 03 Apr 2024 18:26:25 +0000
ROA not after: Wed 02 Apr 2025 18:31:25 +0000
asID: 264126
IP address blocks: 138.59.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7c:bb:da:cc:13:fc:42:da:7d:6e:79:37:e4:e0:21:9b:5a:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Validity
Not Before: Apr 3 18:26:25 2024 GMT
Not After : Apr 2 18:31:25 2025 GMT
Subject: CN=32AD929CF4842A452465D687EBC2C076B717FEE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:27:ca:74:4a:73:d2:08:4e:c8:03:9a:b7:
c8:e1:80:96:e5:30:e8:16:2c:34:f1:aa:c8:0d:50:
63:ba:f2:62:94:10:74:27:11:b1:0e:0a:ed:0f:04:
04:49:d5:8b:02:df:36:e9:9e:49:85:20:11:77:f1:
26:30:fb:3a:b1:e8:64:f3:06:60:29:99:3c:0a:ef:
98:3f:29:3b:c0:07:6d:21:b8:a9:fe:e7:e2:24:be:
d3:43:5a:aa:ef:18:50:59:80:f4:3b:f4:0e:85:be:
3c:42:2e:31:0a:96:d2:2c:a2:1e:1e:24:7c:8b:21:
87:a2:53:2e:7c:a8:51:b3:88:60:51:de:1c:95:69:
39:77:3f:4d:b5:f6:a0:11:71:15:09:6c:6c:99:da:
7e:f5:d7:06:e7:e7:56:73:86:d1:fe:0d:16:88:f4:
e1:f1:8f:33:45:de:32:d5:ec:64:84:81:e9:6e:19:
c7:99:51:28:be:a3:1f:64:4a:2d:aa:e6:59:61:a9:
90:ae:44:fc:8b:0f:5a:a7:14:19:fa:b0:ec:ec:37:
e4:75:55:6b:29:56:25:10:b1:51:70:9f:22:f5:57:
8e:c3:fd:2f:2c:3d:cd:93:87:bf:42:08:a8:4d:8d:
83:76:1d:6f:94:50:ef:89:ea:53:df:6a:1a:bc:43:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:92:9C:F4:84:2A:45:24:65:D6:87:EB:C2:C0:76:B7:17:FE:E5
X509v3 Authority Key Identifier:
keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ce:71:9d:fd:95:26:f6:61:75:b0:89:8c:84:fb:59:9d:21:
da:5f:65:29:03:60:58:e4:8e:d7:c4:19:4f:a0:5a:6a:7f:9e:
4e:e7:fe:72:8c:02:ae:8f:71:98:e4:d2:72:a1:d4:58:c3:74:
77:fd:5b:48:92:3e:c4:23:e2:36:5e:d6:39:54:31:77:da:dd:
ba:d6:ee:03:7c:91:7f:07:74:ae:32:c9:f2:7b:f2:d2:0e:e6:
a4:21:19:ac:8a:9c:e0:4b:02:17:ef:71:33:d4:b1:40:b5:0f:
6e:f0:5f:3d:43:1a:2e:6d:be:f7:42:90:cb:c9:98:7d:58:0f:
ee:b5:06:34:90:33:51:fe:72:43:95:b5:55:68:2a:e8:5c:20:
cd:00:28:5b:6b:1a:b7:f1:81:63:b6:d9:f5:66:ce:2b:74:a9:
45:6a:59:9a:d2:c6:8e:06:89:91:17:b7:3a:72:8b:17:b7:38:
8d:45:44:4e:62:d3:9c:be:81:45:44:ce:4e:26:b2:ca:44:64:
f4:9c:b8:eb:10:9e:2a:6b:12:87:b7:6a:b4:0b:fd:37:6d:db:
ad:43:11:da:d3:72:16:31:92:f3:c6:f4:5d:e4:d4:d6:af:ef:
6e:10:aa:ae:eb:a8:93:9f:69:e6:6d:f3:09:3f:b5:a2:41:fd:
e6:c2:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:16 2025 by rpki-client