Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
File: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier: 3cJZ0tzkyNmMYGGNHtnqwK8rd8v6qOL0heL2UhlNYTQ=
Subject key identifier: 7C:4D:56:A0:22:52:76:49:E0:92:67:1A:5F:DA:C1:34:45:14:5E:57
Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial: 6234E7E47F9A720646D644F8FA610A71FB500BF2
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
Signing time: Thu 04 Apr 2024 15:27:02 +0000
ROA not before: Thu 04 Apr 2024 15:22:02 +0000
ROA not after: Thu 03 Apr 2025 15:27:02 +0000
asID: 264233
IP address blocks: 138.117.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:34:e7:e4:7f:9a:72:06:46:d6:44:f8:fa:61:0a:71:fb:50:0b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Validity
Not Before: Apr 4 15:22:02 2024 GMT
Not After : Apr 3 15:27:02 2025 GMT
Subject: CN=7C4D56A022527649E092671A5FDAC13445145E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:92:b3:59:a6:15:e0:7b:a6:4a:e3:38:c6:
6f:e1:71:0e:ef:76:d5:66:24:ed:9d:a2:9a:42:9e:
62:1e:55:e4:b3:f7:00:e1:ab:00:40:40:5c:ce:9b:
cf:4e:60:d9:de:94:85:f1:4a:7c:ab:52:a2:a0:7d:
21:19:95:ca:30:b1:7c:01:72:b6:9b:7b:12:54:24:
b9:51:aa:8a:eb:95:e2:e2:16:1d:ca:0c:74:10:fc:
b0:ba:ca:a7:b4:03:cb:db:17:9a:e5:81:32:5c:6f:
48:23:f1:54:41:1e:c1:63:57:1b:91:ed:8e:75:d6:
09:d3:14:17:f7:f6:28:80:84:28:7d:b6:5c:bd:12:
95:a6:ec:51:0c:cd:46:71:b5:e0:82:cf:d1:16:d4:
da:d5:8b:36:c6:cd:a2:58:3f:24:61:20:0a:f0:12:
cf:7a:1f:09:a6:bd:2e:ca:2a:4d:fb:65:12:85:94:
6b:7d:1a:c1:a6:43:93:0e:e1:c6:72:e4:d8:c5:63:
a9:60:3b:1a:17:bd:09:4d:7a:6e:b0:dd:b1:f4:bb:
08:19:64:a4:45:03:e3:5e:89:96:ec:27:c6:d8:c4:
c4:cd:fb:ca:18:88:ff:61:d6:e9:8f:2f:de:2a:f1:
61:fd:b8:a9:04:53:ca:31:16:dc:ee:f7:65:87:91:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4D:56:A0:22:52:76:49:E0:92:67:1A:5F:DA:C1:34:45:14:5E:57
X509v3 Authority Key Identifier:
keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:9b:38:b8:50:5e:f1:da:ab:95:00:89:81:bb:8b:7b:1d:22:
78:89:68:8d:5a:1b:4b:53:d7:86:04:32:05:e6:a9:3d:24:bd:
e9:60:e8:ff:ce:ab:02:1f:40:06:e1:dd:b1:fa:fa:17:df:95:
bf:a9:ff:f1:3b:e2:87:85:bd:4b:da:99:be:c1:52:59:af:a0:
f5:c8:5e:34:49:0a:b4:5e:24:7c:3c:d0:95:19:80:08:85:30:
01:d2:b5:bd:6e:71:65:6d:30:cd:5d:b9:e2:e7:3d:b0:bb:64:
c0:cb:38:79:7e:6b:44:e7:a4:37:6d:c7:2c:e7:bb:60:76:39:
ff:6f:15:f2:d6:19:e7:01:e5:64:3f:23:b6:3d:38:dc:cd:2b:
08:32:5f:53:54:85:98:44:f9:2c:9a:46:b6:af:46:5a:66:7a:
1d:25:00:f7:d5:62:c6:7e:db:ca:b1:63:12:f1:6e:f8:9a:68:
a7:c6:44:48:5d:4c:41:83:0c:d0:6e:85:73:b6:83:bf:71:4e:
16:ff:27:82:f1:6e:ff:6c:2a:f0:76:28:55:80:e4:7f:0d:d7:
8c:9c:0b:8e:f3:db:bb:b0:90:d7:7b:f9:8a:5a:41:f8:e0:d9:
b4:49:7f:41:77:df:3e:87:d0:f9:97:6e:fa:55:7e:5e:89:b8:
e8:ca:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:33 2025 by rpki-client