Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
File: 3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier: /GoAra99crLde5jwGfBMfVD08b6av3/8ORTQZ64VWD8=
Subject key identifier: 38:80:41:05:44:E4:6F:93:01:D2:AA:94:AF:03:BF:CE:CF:25:8A:31
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 02BD6A4FF16AFDE4A387E7F53EDB2829C81FA2BB
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
Signing time: Mon 25 Nov 2024 17:04:03 +0000
ROA not before: Mon 25 Nov 2024 16:59:03 +0000
ROA not after: Mon 24 Nov 2025 17:04:03 +0000
asID: 61844
IP address blocks: 138.255.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:bd:6a:4f:f1:6a:fd:e4:a3:87:e7:f5:3e:db:28:29:c8:1f:a2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:03 2024 GMT
Not After : Nov 24 17:04:03 2025 GMT
Subject: CN=3880410544E46F9301D2AA94AF03BFCECF258A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:c3:99:70:5c:e8:17:ac:50:59:b3:e0:73:
14:91:3d:ba:81:da:a6:3a:98:fa:d8:13:c4:22:02:
bb:0f:07:4a:07:2a:d0:36:d9:f5:22:29:da:00:d5:
21:27:3e:5e:57:10:78:e6:07:48:6e:82:f8:64:86:
91:48:78:b4:8b:be:cb:f9:6b:f9:37:83:00:a5:68:
c5:f1:c4:a7:55:36:9d:c5:45:eb:55:1c:bd:b2:63:
e8:1b:5b:01:dd:bf:55:54:b4:7c:e9:04:6a:a6:14:
b5:cb:82:8c:b6:65:cb:f0:36:c9:26:ac:4c:49:ce:
6e:33:de:9a:88:4b:f1:31:f6:5e:5c:71:fe:06:f1:
a9:1d:ba:d0:6e:6a:85:ca:87:97:b7:b9:49:49:70:
da:1a:08:a6:ba:d9:00:26:e0:10:61:d9:25:e4:05:
ec:f0:4d:cb:a6:5f:a9:b7:7b:10:1c:db:be:78:b1:
c0:4b:62:22:2f:2b:66:9a:16:d6:0c:00:9e:fc:c6:
f5:76:19:10:e7:cd:67:3c:6e:d3:4b:e8:5f:55:ec:
2d:37:37:24:fd:27:b1:6c:52:52:77:60:5c:b9:5d:
b7:93:c6:e9:0f:d3:6c:11:f9:1f:4a:9f:21:ca:da:
79:8c:1f:f7:d4:de:74:38:9a:8c:98:05:49:b3:8d:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:41:05:44:E4:6F:93:01:D2:AA:94:AF:03:BF:CE:CF:25:8A:31
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:dc:1b:8e:ee:c4:00:2f:00:8b:63:cb:52:82:e5:f3:bf:43:
56:62:77:ea:eb:99:e8:39:bc:33:13:83:5e:f8:c0:47:d8:f1:
24:fb:a2:15:bf:19:57:c0:2a:f6:f7:e7:fe:8b:93:0a:8f:ee:
5b:12:f5:50:36:99:a1:f7:d5:4e:db:1f:53:45:b0:4a:10:dd:
76:46:90:59:fc:e7:9c:37:a1:77:60:64:91:3c:2d:aa:83:99:
20:3c:e8:5a:f0:7e:be:d0:b7:d2:30:d6:99:1d:fd:44:0f:30:
e0:6b:5d:3b:83:7a:b5:27:05:76:9d:a8:5e:84:e3:a1:9a:11:
66:4a:38:d0:52:69:82:51:5b:d5:15:84:c4:39:0a:3e:b7:e7:
2d:2d:1e:a6:b4:55:67:9a:90:08:0a:39:ac:6c:7e:4e:91:a3:
21:0b:7e:98:55:33:35:79:03:83:64:4d:7d:b4:b1:56:26:cc:
1e:07:b7:80:82:a0:ac:8a:b8:20:c7:12:70:e2:f0:bf:51:cf:
01:f1:2f:72:1a:6e:f2:e0:86:a8:61:f9:e7:80:83:32:7b:e2:
c2:32:4a:70:1a:a5:40:c6:5d:67:3d:43:da:6d:2f:aa:7a:9b:
e5:aa:40:2e:b4:30:94:dd:c3:9e:a8:ed:ea:7c:d6:4a:08:30:
1f:b1:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:24:27 2025 by rpki-client