Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa
File: 3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa (raw, json)
Hash identifier: tkoXo9viUWWMuLUfPITE1Yag3R9jBooCvHyWSt8vbC8=
Subject key identifier: B2:D9:FD:A7:E2:C8:2D:6B:5E:1E:D2:73:C4:B7:D2:71:BC:1F:4A:AC
Certificate issuer: /CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
Certificate serial: 3AE18D663CFAAF482C1ACFFB4CC9BB6286F42F8B
Authority key identifier: F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa
Signing time: Thu 16 May 2024 20:23:37 +0000
ROA not before: Thu 16 May 2024 20:18:37 +0000
ROA not after: Thu 15 May 2025 20:23:37 +0000
asID: 264343
IP address blocks: 138.185.72.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:8d:66:3c:fa:af:48:2c:1a:cf:fb:4c:c9:bb:62:86:f4:2f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
Validity
Not Before: May 16 20:18:37 2024 GMT
Not After : May 15 20:23:37 2025 GMT
Subject: CN=B2D9FDA7E2C82D6B5E1ED273C4B7D271BC1F4AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:1c:cc:ae:f2:01:83:4c:36:b6:57:0b:bf:
c4:ca:ec:ab:5e:6b:b6:cb:20:5a:b2:9e:90:a0:1d:
66:39:ff:25:5b:92:a3:5b:c2:71:7f:b5:4e:95:55:
d7:c2:2b:51:e4:ef:fb:3d:7d:e6:f2:e4:4b:7f:4d:
2b:a7:f8:11:4c:d7:ef:7e:a8:e6:e8:d0:3e:9d:b8:
ac:bb:01:b6:51:c9:1f:30:42:ee:d9:19:df:4b:07:
0e:c4:4b:28:6f:18:5b:1d:70:50:ed:cc:0e:4e:72:
fe:d3:cf:22:b6:62:3a:18:41:10:83:08:1c:02:8b:
98:9e:fc:43:b4:3e:c0:aa:1c:3a:d0:ec:88:75:a5:
4f:4b:e6:3b:e9:d7:52:56:03:fb:80:aa:7d:02:0f:
de:a9:6a:0e:1c:df:78:23:18:79:34:e8:ff:c8:9f:
cc:95:1f:ad:ea:23:00:d6:e4:70:ea:83:fe:2f:b8:
dd:bc:5d:d1:68:f0:95:59:c5:f0:dd:e9:3c:b2:dd:
da:1c:69:7b:6b:4b:e0:1d:3f:2e:62:73:e1:cf:65:
1c:6d:37:b7:7d:0d:19:a0:b2:1a:0e:bc:d7:aa:5f:
c9:3d:d1:e4:fc:22:a6:87:7d:6e:ac:67:de:85:89:
eb:27:59:1a:f5:85:07:0c:97:44:ef:46:b9:b4:b1:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:FD:A7:E2:C8:2D:6B:5E:1E:D2:73:C4:B7:D2:71:BC:1F:4A:AC
X509v3 Authority Key Identifier:
keyid:F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3233203d3e20323634333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.72.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3b:2d:5e:8a:6e:df:41:ee:6e:b9:dc:6f:33:9e:29:7d:27:
11:e7:97:3f:5c:99:7c:32:3e:ad:45:2c:a2:48:50:5a:cd:94:
5d:74:2f:87:cb:e3:94:ba:e2:34:3c:a8:1e:de:8e:c4:80:b2:
f8:ad:ba:40:0c:6d:7f:ca:02:7a:05:0c:82:a2:b5:e2:67:0c:
25:ff:7e:53:ef:26:e9:40:de:69:d4:44:a2:b3:41:e3:5f:02:
55:71:a1:9f:c7:43:82:7c:38:53:1f:a0:86:38:42:07:8b:1c:
16:45:7b:dd:c3:ac:63:5c:1b:a1:54:37:62:5b:14:7c:6c:d5:
3b:3d:27:c6:68:48:9a:9c:39:11:18:12:3a:e1:0a:a6:ab:72:
5b:7b:d0:09:57:62:5c:50:db:78:24:7e:49:d2:3a:26:ae:da:
b6:e0:96:d4:d9:fd:46:ff:97:d9:28:dc:da:7e:6a:27:81:ca:
ff:55:d8:ef:e6:f7:d0:b2:a1:9f:bc:98:a0:f5:4b:12:5c:21:
a9:26:67:ef:c4:ee:f4:58:1c:f7:8a:e1:a0:e2:67:0c:ec:5a:
d6:1d:9f:66:2a:de:91:71:90:a5:3e:83:55:3b:a1:e4:8a:95:
0e:55:67:18:b8:3a:ed:07:03:48:3c:ea:4f:d8:76:08:50:2d:
ee:7c:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:53 2025 by rpki-client