Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
File: 3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa (raw, json)
Hash identifier: c4Lr8uMgZz+VNkAQVmGJOj/S12FDiZ/iqFSCiJQxV5E=
Subject key identifier: 0D:EB:CD:69:7D:B7:97:D0:76:DF:50:EF:11:D7:99:C6:AB:41:1C:CF
Certificate issuer: /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial: 1B7CEF5D72677879384135DBCBE4AEB69C787270
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
Signing time: Wed 03 Apr 2024 18:30:36 +0000
ROA not before: Wed 03 Apr 2024 18:25:36 +0000
ROA not after: Wed 02 Apr 2025 18:30:36 +0000
asID: 263994
IP address blocks: 138.255.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7c:ef:5d:72:67:78:79:38:41:35:db:cb:e4:ae:b6:9c:78:72:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
Validity
Not Before: Apr 3 18:25:36 2024 GMT
Not After : Apr 2 18:30:36 2025 GMT
Subject: CN=0DEBCD697DB797D076DF50EF11D799C6AB411CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:46:53:ad:a1:d2:e6:af:73:a5:2d:e1:3b:
12:eb:94:96:91:81:dd:e8:ca:1e:c6:87:1a:0d:1c:
9c:94:0a:e7:f9:9b:44:18:51:3e:35:93:81:27:28:
b4:89:ba:84:03:5d:1d:58:17:c9:bd:8d:c9:42:79:
09:e3:72:ad:fa:9f:1c:17:54:f8:85:7d:db:e8:ff:
76:df:8b:e3:2b:b6:25:cb:a8:68:e9:7f:35:8c:31:
9c:a5:63:c4:24:a1:fd:ce:43:9e:7c:c0:23:b1:a6:
1f:ec:20:50:b0:c7:e2:18:fc:ca:6f:f8:46:38:6b:
93:d8:95:eb:50:c7:7a:2a:b8:6f:a5:1f:04:32:17:
3c:71:68:cc:95:38:5c:96:f5:78:cb:2a:77:6a:0a:
d7:46:bb:94:c0:db:49:9b:67:8c:17:c5:aa:6d:6a:
b3:14:e5:a8:11:a7:b5:ec:c3:13:3a:17:fd:bf:db:
1b:d0:af:f9:68:42:51:a1:fd:0b:72:ca:c1:ad:9f:
b7:4c:5d:ff:b8:c1:c5:4a:f2:2b:6c:59:b2:7d:20:
0e:d3:ae:38:e8:8b:04:f3:3a:48:2a:f7:6d:74:6f:
a8:97:63:60:fb:8d:d8:89:c2:b0:99:a0:66:50:1c:
8d:89:83:82:b0:9e:b1:78:c4:e5:38:5b:12:ce:c9:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:CD:69:7D:B7:97:D0:76:DF:50:EF:11:D7:99:C6:AB:41:1C:CF
X509v3 Authority Key Identifier:
keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:81:10:df:a8:21:0b:94:4a:cc:bd:d7:a5:39:f1:fd:96:35:
9c:3b:ce:2e:39:c5:5c:c7:9c:72:8e:c5:62:4f:4c:65:0c:c6:
ec:dc:c3:f1:ad:2a:5c:32:61:52:ad:80:fc:2c:01:89:f9:08:
de:fc:7b:21:e7:7e:1d:59:c7:65:a7:be:50:f7:f5:b2:6f:f3:
94:90:e5:0e:5a:35:86:54:5b:f2:6f:80:e6:b0:2d:1f:a4:39:
37:d7:1a:8d:6b:cb:e0:4a:82:21:67:f0:26:5a:4b:ba:8a:c8:
84:13:e5:6d:80:5e:d4:12:1e:99:11:34:18:6e:37:bb:20:93:
e5:8e:69:91:a2:34:4d:e4:c7:f9:2f:44:0a:9f:74:e8:17:4a:
36:42:33:92:76:e9:c8:42:07:2d:52:b8:74:6c:4d:9b:6e:92:
0c:4b:e7:f2:aa:a1:7b:df:c1:f2:c3:18:87:62:2c:f8:19:5f:
7a:95:d5:6f:9a:b4:ad:a7:18:63:43:6c:cf:2a:6e:42:c0:45:
e6:e1:b2:0f:4a:01:18:57:1d:2d:5a:ba:36:3f:11:9a:e6:a3:
c1:c2:73:15:fd:21:62:a0:be:de:82:45:98:05:5f:d6:fe:52:
bf:7a:56:c1:b5:1b:0d:f2:80:1b:f2:dd:ed:16:ca:87:5b:59:
8b:ce:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:12:02 2025 by rpki-client