Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
File: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier: 9vUvMSAFYKng7Eg/DXBxiGz3Hg/sIZ/VzWz2DjZqw3s=
Subject key identifier: DD:46:79:0B:F7:0F:8E:2D:5B:F9:03:A1:35:38:09:1D:8C:DE:56:9B
Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial: 4BC4755340F6F4EC28368827EF74B75D5281E6
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
Signing time: Fri 05 Apr 2024 01:04:59 +0000
ROA not before: Fri 05 Apr 2024 00:59:59 +0000
ROA not after: Fri 04 Apr 2025 01:04:59 +0000
asID: 264411
IP address blocks: 138.204.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c4:75:53:40:f6:f4:ec:28:36:88:27:ef:74:b7:5d:52:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Validity
Not Before: Apr 5 00:59:59 2024 GMT
Not After : Apr 4 01:04:59 2025 GMT
Subject: CN=DD46790BF70F8E2D5BF903A13538091D8CDE569B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:dd:34:5a:be:24:33:2e:36:29:f3:43:26:
6e:4a:06:23:24:84:83:6b:7c:ca:a2:98:7a:9a:87:
80:ed:79:a1:95:35:88:97:c0:19:61:65:37:c9:8f:
a2:ca:29:eb:d5:85:d4:24:db:fd:1e:4c:b9:79:21:
ef:b1:95:80:f9:81:dd:60:7d:ba:dd:3c:8c:a3:ac:
b9:df:96:ee:d2:2a:8d:df:68:5c:45:a0:9a:59:6e:
62:b2:31:32:1b:4b:61:3e:65:34:3d:16:d3:bb:18:
2c:dd:b3:c0:99:90:d5:ea:1e:5b:a1:8f:39:a2:75:
64:7a:48:b7:ad:f2:45:0c:e9:96:43:a6:06:5f:08:
8a:20:d7:69:7b:b8:36:35:96:83:5b:dd:d8:ed:09:
f8:89:12:4b:2b:fa:2c:d8:26:94:98:15:02:2b:d3:
bc:0f:2e:39:e6:24:22:df:29:5c:55:62:61:13:05:
48:6a:6f:52:1f:fd:44:f1:42:92:2a:e9:44:54:a5:
91:d5:84:4c:59:bf:8b:27:eb:7a:2d:73:19:bb:c5:
26:71:b5:df:8c:a7:98:1b:1e:6e:8c:a5:ec:34:62:
7f:3c:c3:7c:2b:01:c9:11:33:c9:cc:6a:df:85:dd:
87:c8:45:c0:76:45:ac:a4:19:1f:57:96:2e:b5:47:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:79:0B:F7:0F:8E:2D:5B:F9:03:A1:35:38:09:1D:8C:DE:56:9B
X509v3 Authority Key Identifier:
keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.124.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a4:dd:dd:9a:01:e6:7a:2b:2f:ec:4d:40:2d:1a:2c:66:00:
6a:6d:59:7a:20:f8:36:e1:8e:19:35:71:5e:f0:63:0f:11:da:
34:26:05:c5:53:b2:1f:5c:a5:26:e4:78:2a:b3:24:c6:24:a7:
61:b8:95:0c:32:75:39:02:c3:8c:45:2b:a1:43:ac:fc:1d:5f:
e3:8f:5e:68:23:30:eb:ca:74:04:a7:c5:71:43:61:83:ae:62:
95:64:99:ac:7e:35:86:58:b4:26:65:0b:79:ac:5b:af:2a:86:
2a:6d:a6:ae:d6:63:34:22:47:77:1f:79:af:40:ed:11:3c:e3:
79:77:be:0d:b1:c9:07:24:fc:4f:99:9d:f3:23:db:de:34:d0:
f9:46:93:ed:52:1c:00:f1:02:04:9a:ff:03:4d:3e:0c:60:8a:
7d:ff:3e:9b:dc:ad:28:2e:bd:0b:1a:e3:e0:aa:12:16:bc:85:
26:43:89:dd:66:cb:27:87:17:95:64:9e:8d:91:1b:37:bd:ce:
01:76:e9:71:6f:4c:c3:a2:f4:a1:8e:58:79:fb:4c:3b:20:0f:
e2:84:9d:21:80:b9:6c:e9:91:db:15:df:3a:09:d8:c1:d4:7a:
da:b8:22:a7:32:76:e9:ef:04:67:fa:a4:28:84:53:b3:4d:a0:
8a:2e:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:50:53 2025 by rpki-client