Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
File: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier: 0LU0INcZOBmMH98UsjZlyv6LSxCVXlVBktxVTStixTQ=
Subject key identifier: BE:2B:23:81:64:DD:60:1A:28:1A:56:81:2E:AE:E6:BD:F8:09:C5:2F
Certificate issuer: /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial: 028FB46F2BB808FDA8091004326F4F083FF3B556
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
Signing time: Tue 23 Apr 2024 19:32:34 +0000
ROA not before: Tue 23 Apr 2024 19:27:34 +0000
ROA not after: Tue 22 Apr 2025 19:32:34 +0000
asID: 263995
IP address blocks: 138.255.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8f:b4:6f:2b:b8:08:fd:a8:09:10:04:32:6f:4f:08:3f:f3:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Validity
Not Before: Apr 23 19:27:34 2024 GMT
Not After : Apr 22 19:32:34 2025 GMT
Subject: CN=BE2B238164DD601A281A56812EAEE6BDF809C52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:82:1a:80:6e:64:31:6d:6e:2a:32:7d:d9:
7f:6f:76:46:b6:1c:00:56:78:21:8b:c6:82:96:f3:
44:ff:03:39:2b:3b:a2:f6:12:ec:b3:e4:8a:24:e4:
cf:df:51:13:80:f1:ee:fb:4c:e4:70:c1:e7:f4:9d:
c4:4f:89:e4:91:e8:d9:11:95:47:ae:63:f5:f0:88:
a9:c2:e3:e8:b4:f7:c4:ea:a0:89:ee:8a:0c:93:23:
b4:b7:ee:7f:0e:53:e7:f4:d3:37:21:69:7a:53:85:
e0:e1:7d:86:e0:d4:dc:3e:08:80:ae:6e:b4:93:2b:
4f:ed:2d:18:48:40:2f:ff:67:7a:46:0c:3b:64:4f:
c8:5a:42:cf:05:c9:de:29:ae:ce:96:70:96:0e:ba:
8a:1c:a8:cd:b7:1b:d9:ab:d1:49:c4:13:f6:25:2f:
39:cf:d8:7a:06:e9:27:8c:51:d7:cd:c2:57:3e:a3:
fa:0e:da:65:88:f6:10:e0:ea:5b:e1:4e:ec:0e:9f:
83:78:cf:63:06:2b:97:79:95:d3:2c:54:4b:29:07:
23:6d:ec:8c:24:1c:11:a3:36:de:75:f4:93:ff:40:
2c:be:4e:56:30:68:01:15:d3:42:6c:dd:1b:ab:29:
a7:e9:07:29:72:30:21:b1:20:0b:00:d1:ab:e9:6d:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:23:81:64:DD:60:1A:28:1A:56:81:2E:AE:E6:BD:F8:09:C5:2F
X509v3 Authority Key Identifier:
keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5b:2d:4b:f3:f3:c1:35:c4:5e:5b:52:ea:6e:f9:28:c4:10:
2d:16:5a:7b:e1:fb:48:90:d9:80:94:01:8e:fa:b1:d4:d0:62:
93:4f:b1:53:7b:a1:2a:5d:f4:20:8f:ea:7f:1d:d5:90:41:a8:
b7:d9:0f:ed:62:57:8f:36:5d:75:a3:46:2d:f9:16:b1:be:4e:
85:32:55:51:cb:28:e1:0d:c2:e0:72:cd:4b:4a:68:e9:2f:83:
fa:c1:94:b2:66:04:24:04:3e:5d:72:0c:fa:db:78:27:9b:b5:
42:de:52:da:b6:2c:29:6c:76:51:f0:33:26:f7:5e:c7:35:c6:
a6:15:75:c5:a3:c5:37:5e:85:29:d0:70:c9:f0:d1:29:f3:1c:
a2:3f:61:56:82:49:c2:fc:9b:03:bf:81:81:cd:0c:1d:d9:80:
33:79:99:fc:d7:d9:fc:94:79:c5:2e:97:78:f7:d1:27:ea:73:
e1:a5:e6:0c:78:1c:85:66:89:23:b6:10:c9:8d:b1:e1:c1:8b:
da:d7:15:e6:a7:05:d2:03:c3:1f:36:d4:97:36:f5:62:58:f3:
f6:69:ed:f5:ef:07:75:04:08:25:07:67:51:41:82:e0:23:c1:
a4:9a:d4:f6:b3:a9:08:43:3c:26:c5:c9:db:cf:a9:56:42:06:
fd:bc:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:21:16 2025 by rpki-client