Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
File: 3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa (raw, json)
Hash identifier: NCRVbGNEfQ2JjT4QIcDBTHpjWoKaM0Z+ASohy5GKlao=
Subject key identifier: DF:C9:0B:CE:C3:84:09:89:95:4E:FD:C9:82:DB:00:68:60:66:E5:D9
Certificate issuer: /CN=82849DD2443C1465238F4BD65D50B28F03615F5C
Certificate serial: 4225DB37F05149D5E97A6C17C2391F482E9609BC
Authority key identifier: 82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
Signing time: Thu 04 Apr 2024 03:56:11 +0000
ROA not before: Thu 04 Apr 2024 03:51:11 +0000
ROA not after: Thu 03 Apr 2025 03:56:11 +0000
asID: 263557
IP address blocks: 138.204.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:25:db:37:f0:51:49:d5:e9:7a:6c:17:c2:39:1f:48:2e:96:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82849DD2443C1465238F4BD65D50B28F03615F5C
Validity
Not Before: Apr 4 03:51:11 2024 GMT
Not After : Apr 3 03:56:11 2025 GMT
Subject: CN=DFC90BCEC3840989954EFDC982DB00686066E5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:22:97:bc:f1:47:0f:ae:9e:59:31:18:f2:
9a:35:86:0d:be:b0:1f:50:49:2c:73:48:89:2a:e8:
89:5b:c3:45:0c:36:3e:d6:83:2c:ac:a9:61:95:f0:
85:31:98:26:df:f7:55:0d:3f:bc:01:30:af:66:a1:
04:66:be:1d:96:b3:c7:b1:a6:e8:e4:e2:4e:51:ba:
a8:67:7d:1c:d7:f3:b4:a5:ee:7f:38:51:ae:a8:b0:
e5:d9:fa:4a:be:1c:5a:0e:8b:21:b9:97:1b:17:85:
a7:44:6f:df:1a:7f:ae:a2:3b:b2:56:25:52:63:03:
76:0d:c8:08:47:42:75:51:bf:d1:b4:68:8c:34:62:
d4:d0:19:d9:90:d4:34:f7:9e:72:a2:e4:f4:58:fa:
8d:a7:d5:fd:f8:de:ae:27:98:e8:49:19:ac:f3:33:
db:48:d1:cf:e6:fe:4a:79:5f:af:46:7e:d6:f0:f0:
9a:d6:6d:20:ed:3b:b9:26:b8:a3:63:19:c9:02:95:
91:74:43:c2:00:17:17:52:64:c5:99:69:96:b2:6e:
fa:81:42:c3:7c:8d:cf:94:e5:97:8c:72:22:8d:12:
d7:ef:87:5f:e2:43:f2:7b:5c:fe:06:08:12:9b:04:
2e:59:b3:cc:74:d5:53:93:99:2d:39:90:ca:7a:98:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:0B:CE:C3:84:09:89:95:4E:FD:C9:82:DB:00:68:60:66:E5:D9
X509v3 Authority Key Identifier:
keyid:82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:61:f8:2e:18:81:c2:85:55:4b:fc:af:f3:c2:2e:2c:22:6e:
05:c5:73:a5:08:b7:d7:e4:6b:97:0a:6c:a8:f3:ab:8b:1b:78:
f4:14:40:81:54:76:00:11:c5:74:14:a5:09:1e:04:f0:6e:f2:
52:46:bd:9f:bf:c7:98:3a:40:a4:ac:41:8d:6b:2c:a3:c5:92:
f5:c6:1d:23:21:dd:04:33:df:93:af:bf:97:18:84:78:55:1c:
23:cd:ce:fa:2f:1a:c0:e3:75:c0:1b:1e:b0:56:89:ed:ed:cf:
e4:88:bc:4d:5f:33:55:57:ba:6f:0d:8b:b1:17:10:e2:c4:86:
0d:2e:b0:23:6f:7a:e3:7a:d9:69:f8:9e:e5:64:e1:50:14:06:
33:49:be:a5:62:8f:fa:19:e1:2c:d2:16:e0:49:b6:c9:44:99:
52:a0:f3:c6:da:9a:e6:9b:ae:2f:91:2a:e8:b4:51:e8:df:ed:
68:ba:58:70:24:50:f4:1f:aa:81:cf:db:8e:92:68:bb:f6:9c:
75:31:80:2e:0a:b9:ed:f9:5d:d3:e0:c8:18:b5:29:3f:7a:ae:
b4:32:c1:53:89:fb:05:81:19:7d:08:b8:ba:8c:f4:d1:75:d4:
16:ae:a4:70:8b:9d:de:08:61:5a:f1:43:62:71:67:66:28:19:
38:bb:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:29:02 2025 by rpki-client