Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133392e302f32342d3234203d3e20323634333239.roa
File: 3133382e3132322e3133392e302f32342d3234203d3e20323634333239.roa (raw, json)
Hash identifier: c6/X6u7UPSmN5J6Zv0+x4acfPnRB6aZ/D2GR0R8Migs=
Subject key identifier: FA:B1:F8:AF:9C:57:BD:49:19:4F:7F:67:96:57:DE:24:FB:A2:2F:D8
Certificate issuer: /CN=2E940954738793728401E2B3BA1BF1AE600FF21A
Certificate serial: 6462BAA85D72DA80C28E5CFCC496C7C6CDB4119F
Authority key identifier: 2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133392e302f32342d3234203d3e20323634333239.roa
Signing time: Mon 22 Jul 2024 19:39:18 +0000
ROA not before: Mon 22 Jul 2024 19:34:18 +0000
ROA not after: Mon 21 Jul 2025 19:39:18 +0000
asID: 264329
IP address blocks: 138.122.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:62:ba:a8:5d:72:da:80:c2:8e:5c:fc:c4:96:c7:c6:cd:b4:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E940954738793728401E2B3BA1BF1AE600FF21A
Validity
Not Before: Jul 22 19:34:18 2024 GMT
Not After : Jul 21 19:39:18 2025 GMT
Subject: CN=FAB1F8AF9C57BD49194F7F679657DE24FBA22FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:dd:03:90:63:79:f4:f7:c2:a3:62:1d:ba:
b4:12:a9:a2:c6:ba:4f:d4:18:fd:54:aa:f7:22:2b:
7f:68:36:47:81:6e:2e:0d:5a:d9:55:3f:37:39:11:
62:d4:f7:e9:aa:fd:4e:8e:98:28:0a:c3:78:97:c0:
8f:6f:2f:c4:c5:be:9f:ac:05:3b:d1:1b:6c:54:01:
22:18:c7:3c:17:80:44:2a:d5:74:dd:93:09:e7:ff:
82:77:2f:fc:cd:43:5f:99:aa:6e:c8:4d:d2:40:f6:
7d:e6:56:56:5a:db:9a:56:f5:7f:15:e0:68:9c:08:
77:81:3b:9d:74:9f:de:97:9f:01:09:fc:92:8a:b3:
61:8d:32:e4:5c:d7:7b:0b:60:32:9f:1a:c1:f8:57:
0a:0f:50:2a:53:bc:24:eb:57:86:f1:32:b9:af:44:
2d:4f:52:19:ee:73:84:d9:28:01:85:bd:e5:68:f8:
08:f1:0e:2f:62:c9:f2:6d:d8:90:29:1d:52:27:62:
55:f4:37:69:03:4a:51:0a:9f:33:b4:56:ae:05:64:
d8:59:7f:b5:dd:f0:e7:11:67:b2:79:7a:43:64:76:
cf:91:54:38:71:f8:da:ce:0f:f5:eb:de:99:52:51:
7f:64:6f:19:ae:01:7a:40:5e:ac:4f:b9:c8:0b:aa:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:F8:AF:9C:57:BD:49:19:4F:7F:67:96:57:DE:24:FB:A2:2F:D8
X509v3 Authority Key Identifier:
keyid:2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133392e302f32342d3234203d3e20323634333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.139.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a6:32:33:59:77:a5:79:7f:58:f1:8b:0c:0d:0c:b4:32:a4:
61:b6:0c:0a:44:8c:19:6c:22:88:fb:4e:f2:e7:20:59:f3:c0:
0a:53:cc:78:05:53:ee:1d:de:41:27:ab:99:c3:e5:62:e0:b6:
09:c6:70:52:50:7e:a6:68:ef:ec:07:2b:32:e4:3c:8c:56:54:
f6:e5:97:63:a3:90:c6:a0:e3:3b:a7:eb:3e:23:9b:95:ee:f5:
57:e9:b7:62:4f:da:89:a3:48:09:7e:68:71:a1:45:96:bd:50:
c6:0d:0c:3f:94:0c:85:3a:4d:61:cd:36:e4:9d:26:70:4f:60:
d7:06:45:5f:d1:03:c9:92:d7:e6:6b:27:97:15:43:e2:c2:d7:
e6:24:a8:b2:b0:e6:31:94:2d:a7:28:11:cb:71:fc:3b:0a:e8:
32:71:95:80:c6:78:7e:a9:5b:df:8a:19:c8:ae:95:67:f9:c5:
3d:1e:a1:4a:4b:0a:75:6f:5d:ab:a9:05:f0:a7:e3:09:40:c8:
0b:ee:09:0b:48:95:d7:dd:d2:9f:1f:46:c2:d7:bf:5a:dd:70:
e3:43:28:76:87:4a:65:cf:1b:62:a0:77:1b:3f:e6:ac:b7:2e:
7a:fd:0c:91:43:d0:8c:65:ef:16:fd:ff:0b:74:32:79:4f:a7:
55:e2:e4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:35 2025 by rpki-client