Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
File: 3133382e3131382e39322e302f32322d3234203d3e203533313731.roa (raw, json)
Hash identifier: 9CEzMSIoCoXge6dRPjJlZ6XLyM9XYov20orinidzzf8=
Subject key identifier: F4:6A:7E:53:8A:0A:BB:BF:C1:CE:7D:D4:46:B1:C6:34:83:0C:1F:57
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 0A77FFDADCE13315CFCB72A3C249861C402751DB
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
Signing time: Mon 25 Nov 2024 17:04:17 +0000
ROA not before: Mon 25 Nov 2024 16:59:17 +0000
ROA not after: Mon 24 Nov 2025 17:04:17 +0000
asID: 53171
IP address blocks: 138.118.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:77:ff:da:dc:e1:33:15:cf:cb:72:a3:c2:49:86:1c:40:27:51:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:17 2024 GMT
Not After : Nov 24 17:04:17 2025 GMT
Subject: CN=F46A7E538A0ABBBFC1CE7DD446B1C634830C1F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:2b:15:75:97:0d:9f:cf:1b:ca:66:c2:b2:
59:36:92:7e:a0:6d:1d:4e:8c:00:8f:db:b5:77:db:
b2:45:ce:38:67:5e:8b:f3:2a:32:94:25:e7:4e:25:
88:3e:ef:70:56:ce:0a:bb:71:2c:55:6e:e3:1b:21:
f3:c6:9c:d1:a7:84:0c:b9:b7:78:22:7f:d5:47:df:
53:57:2e:c1:e4:60:f4:52:2c:09:cd:b1:6d:5a:9b:
d4:90:28:0d:b3:b6:c7:f1:8d:79:1d:d7:f3:d8:6f:
1c:a2:68:15:2f:33:1a:51:6f:62:fb:7c:ba:38:4d:
55:d1:1f:53:2b:92:02:13:b4:c1:df:c9:97:f0:1d:
c2:c6:16:51:91:97:80:01:ed:69:50:da:4f:4b:a8:
71:2f:fb:d7:8f:10:1e:a6:cd:1a:40:4f:c5:0e:ad:
07:e4:74:ba:ce:fc:0f:0e:32:21:35:a5:6d:3a:1c:
08:3e:04:43:af:b9:5c:a4:d5:34:30:cc:d6:eb:a8:
32:06:63:0a:a2:79:70:e1:8c:bf:be:28:b5:1c:69:
77:b7:83:95:9d:11:fa:f0:35:53:9b:58:4b:88:02:
6a:97:d3:62:a6:a0:8a:9d:ab:8a:21:b4:03:3c:28:
96:61:78:cb:c2:90:55:92:7c:9f:6c:0b:6a:02:ca:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:7E:53:8A:0A:BB:BF:C1:CE:7D:D4:46:B1:C6:34:83:0C:1F:57
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:8f:35:d6:86:b1:94:7f:e0:3c:5e:56:87:3e:96:ef:fa:3e:
7d:f8:04:dc:13:87:c6:74:72:11:c9:99:e1:df:b5:31:db:e5:
ff:b0:b9:08:69:b6:78:49:d8:bb:26:4e:14:cb:c4:83:cb:8c:
13:3d:a4:7d:fa:9a:a2:6a:04:0d:a0:63:12:06:7f:85:41:14:
c1:0d:6d:a4:c6:f9:30:70:a7:a1:ec:a8:8c:3d:62:f5:47:fc:
e9:07:80:55:25:70:76:05:ec:91:10:8b:bf:bf:61:bd:a7:26:
4b:ae:cf:d2:4a:e9:0f:04:3f:4a:9e:b6:35:de:64:dc:b4:c6:
84:c7:73:d1:69:c6:74:5b:35:1f:da:62:9b:ab:64:1c:e6:4f:
7e:f5:34:ce:0e:31:45:2f:ca:2a:da:af:97:1e:d5:8c:58:b1:
8c:e5:78:e4:04:08:4e:d5:0b:8b:79:19:a4:1a:7d:70:8f:d7:
29:5b:51:76:36:78:0c:31:fe:b6:8e:ab:6b:0b:79:28:46:85:
c2:1e:c4:c8:ab:e7:6c:7c:4b:03:60:07:23:41:49:7c:c5:38:
d4:39:f6:58:db:46:d8:72:a3:bd:14:7b:8d:ef:13:24:59:e6:
7f:33:93:19:54:4d:ae:34:1d:6b:92:95:f6:66:ae:60:b8:4b:
4f:b4:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:44 2025 by rpki-client