Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
File: 3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: tpwzR8NAg8dW3JYixUNG8a+4nyQ5T/D0Dqy+N9d0Ssg=
Subject key identifier: 64:87:71:FB:AE:C5:37:8E:C8:B7:65:C3:74:3F:CA:8A:31:26:91:35
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 696DCE1E38B1B2A073ADF54C723E871C1756CF12
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:41:41 +0000
ROA not before: Wed 10 Apr 2024 12:36:41 +0000
ROA not after: Wed 09 Apr 2025 12:41:41 +0000
asID: 28201
IP address blocks: 138.117.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6d:ce:1e:38:b1:b2:a0:73:ad:f5:4c:72:3e:87:1c:17:56:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Apr 10 12:36:41 2024 GMT
Not After : Apr 9 12:41:41 2025 GMT
Subject: CN=648771FBAEC5378EC8B765C3743FCA8A31269135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:57:0f:83:7d:74:b6:e1:87:29:d9:e2:90:
16:cd:a7:7b:37:db:36:9d:f1:2a:f0:a9:7a:30:5b:
93:8a:e9:9e:7b:d2:32:1e:48:6b:48:bc:3c:c2:ea:
05:57:88:c5:2b:94:72:3e:e4:0f:03:08:af:a0:67:
ae:57:a8:a7:af:82:58:dd:09:02:73:41:1d:78:a2:
92:af:c8:f7:6c:57:72:7c:d2:5d:81:cc:55:cc:8a:
fc:ba:c1:fc:58:ef:be:8f:85:f9:73:88:da:f8:ba:
42:4a:c2:ef:9e:5c:93:42:7e:be:27:86:56:97:ea:
f4:2f:4c:c9:e9:b7:73:8e:ff:15:cd:ad:50:c5:2b:
cc:a9:78:b4:7c:e2:49:d9:17:11:40:7f:aa:04:8b:
97:06:f7:b3:e3:aa:33:57:e0:bb:b2:82:5e:87:cc:
5a:2f:91:f6:87:81:5f:63:43:8f:1d:dc:8b:00:ce:
e2:15:22:b2:2f:7a:fd:f3:5a:98:26:4f:9a:5a:53:
04:e9:82:69:4b:9f:34:31:d6:eb:a1:64:9f:c8:4a:
f8:3c:be:0c:ff:bd:3b:9b:0a:34:93:24:19:b3:cd:
92:8d:2f:39:0a:64:d1:de:23:9e:dc:a4:1c:35:e6:
14:45:ab:52:31:52:58:5c:e8:38:d6:97:32:d2:e8:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:71:FB:AE:C5:37:8E:C8:B7:65:C3:74:3F:CA:8A:31:26:91:35
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:28:32:86:18:91:32:6f:70:87:0c:3e:f9:59:ab:52:52:a0:
27:4f:b8:69:cb:30:6c:f9:c9:1e:c3:5d:7e:98:9c:3b:07:e4:
08:66:05:30:76:49:4b:4b:2e:16:79:90:db:64:67:c1:ef:5a:
c3:73:d9:5c:36:74:a3:c4:72:64:fe:cf:d5:ed:b6:85:e1:88:
1a:a5:65:dd:ab:e6:e2:83:8f:7b:42:bb:55:55:1d:a1:21:c8:
ec:01:40:5a:1a:3b:eb:56:19:70:34:92:b8:ca:a3:21:92:6d:
65:51:1e:15:a5:de:62:7b:e7:fd:4e:ef:c4:f8:b8:88:58:45:
7c:5d:05:aa:e4:0b:0c:77:2a:92:82:0c:f2:41:69:8d:64:54:
b7:40:89:8c:10:e9:4b:49:18:b7:64:a6:a1:50:d9:cf:c2:a9:
de:38:69:0f:75:cd:63:01:f3:89:cc:73:26:d7:d1:2e:d3:94:
62:5a:8d:ce:a2:68:38:be:85:bb:ae:e8:1d:8e:16:13:0d:23:
d6:35:1c:da:3d:b7:c4:b9:71:94:42:8a:39:99:e2:1b:c9:4f:
c7:8c:02:9c:34:60:c9:92:09:9a:a7:30:10:0b:48:26:6b:05:
1f:6a:e2:7d:28:50:f0:9e:7f:e0:f8:41:3f:28:09:7e:77:36:
38:ab:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:26:54 2025 by rpki-client