Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
File: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (raw, json)
Hash identifier: Ngw/Xvarno/W/Y632B9fkAfNzMhT2vf9bMUn2puUHpo=
Subject key identifier: E8:22:2D:52:F7:A6:34:DE:F0:2B:BF:58:C3:CD:C8:10:C7:27:F3:22
Certificate issuer: /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial: 346C9B8BDB1977C6CF85780C9A0C5009A5728BC0
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
Signing time: Thu 14 Nov 2024 03:21:02 +0000
ROA not before: Thu 14 Nov 2024 03:16:02 +0000
ROA not after: Thu 13 Nov 2025 03:21:02 +0000
asID: 264267
IP address blocks: 138.118.224.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6c:9b:8b:db:19:77:c6:cf:85:78:0c:9a:0c:50:09:a5:72:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Validity
Not Before: Nov 14 03:16:02 2024 GMT
Not After : Nov 13 03:21:02 2025 GMT
Subject: CN=E8222D52F7A634DEF02BBF58C3CDC810C727F322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:95:aa:62:0e:a2:7f:14:5c:94:cc:58:c9:
d9:a9:8b:f5:e9:4c:62:dc:2b:1f:1a:95:e8:96:fa:
4e:45:9c:48:b6:f2:8e:06:8f:76:ef:39:01:4c:64:
96:9b:5c:e0:17:e9:82:a8:c2:88:43:b3:3b:6c:75:
52:95:09:74:bb:e9:c5:98:32:98:b1:93:c3:cf:f1:
23:d0:c2:7b:1a:0b:37:5d:c5:34:4a:d0:3e:3a:b8:
27:0e:8d:5f:19:6b:bc:81:86:bb:71:10:97:8b:3c:
98:93:91:fc:1d:d9:4c:40:47:ab:c4:3c:9f:7b:58:
3d:3b:2b:8b:5f:ae:4c:af:21:68:0e:3c:cf:e5:d4:
99:5a:89:0a:ff:29:e3:2b:8f:ab:4a:63:97:f5:5d:
1f:a9:63:8e:39:8d:2f:62:f8:af:b9:fc:45:c6:46:
d3:6c:1e:83:68:3d:55:87:ce:b7:19:ec:8b:74:e9:
57:6b:cf:af:8c:d6:0e:dd:d3:98:21:eb:f9:09:e3:
52:e9:e5:f0:b0:51:91:e3:c0:ef:a1:e8:ca:d8:8a:
90:80:bc:be:8d:9a:40:2a:37:6b:b0:ae:aa:bc:9c:
39:c5:0f:35:b6:67:7d:a3:84:18:79:39:cb:81:b5:
e0:bd:8a:13:39:7b:2b:a2:b6:a6:6e:68:2d:0a:b5:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:2D:52:F7:A6:34:DE:F0:2B:BF:58:C3:CD:C8:10:C7:27:F3:22
X509v3 Authority Key Identifier:
keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
02:db:c0:39:6a:b1:17:82:86:fa:17:c7:0c:f3:bd:ee:ba:f3:
c1:02:48:c5:02:af:db:6c:6f:4f:c2:43:be:af:a3:27:2e:d4:
9f:1a:d5:96:65:02:c8:76:26:63:3f:30:de:bd:82:59:d7:cb:
39:5a:7b:ec:ac:ee:23:7c:e0:f3:e8:0e:0c:73:26:63:b2:46:
9d:82:87:41:a3:00:32:56:30:85:17:7c:86:fd:25:1f:a5:93:
cf:41:49:2f:f8:89:41:af:a5:61:73:17:f2:be:78:4e:8e:bb:
a1:ba:ea:eb:d1:36:ab:cc:95:29:fd:30:c1:5a:ea:b1:b6:56:
f7:f9:a2:67:84:e4:35:6b:85:a7:75:63:84:02:7e:e5:4d:66:
e7:69:18:8f:49:06:65:a8:ec:1b:44:f5:46:bf:20:83:61:85:
47:44:55:35:e7:45:f1:f3:bd:42:00:bc:06:f9:88:4d:2a:d6:
4a:18:b9:6f:a6:a4:39:b2:82:d9:25:80:0d:ac:e9:e9:f9:9f:
c2:de:11:ac:52:8e:f7:98:65:87:73:30:d2:ab:d4:df:a9:c5:
b8:cc:03:2c:a0:f0:d4:df:68:63:62:d8:40:fd:04:db:3f:28:
d8:72:6d:eb:e9:f1:20:8f:06:42:7c:34:9c:23:6b:be:22:5a:
ff:fc:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:31 2025 by rpki-client