Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
File: 3133382e39372e302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier: w+9rPO6KVzR5vVb0xstuY+wLIUWkyv4ryDCXx8cCk5g=
Subject key identifier: 43:38:25:1C:71:41:0C:F2:53:59:3A:EC:6B:2F:23:CE:E8:17:CA:5D
Certificate issuer: /CN=C8227B1004F0E52AEFCA2984DB262B4EED604F8D
Certificate serial: 19EB4DBE0505EC51AC132A5F8691109CEAB03E38
Authority key identifier: C8:22:7B:10:04:F0:E5:2A:EF:CA:29:84:DB:26:2B:4E:ED:60:4F:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
Signing time: Thu 30 Jan 2025 13:23:00 +0000
ROA not before: Thu 30 Jan 2025 13:18:00 +0000
ROA not after: Thu 29 Jan 2026 13:23:00 +0000
asID: 262346
IP address blocks: 138.97.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:eb:4d:be:05:05:ec:51:ac:13:2a:5f:86:91:10:9c:ea:b0:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8227B1004F0E52AEFCA2984DB262B4EED604F8D
Validity
Not Before: Jan 30 13:18:00 2025 GMT
Not After : Jan 29 13:23:00 2026 GMT
Subject: CN=4338251C71410CF253593AEC6B2F23CEE817CA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:f5:6a:83:b3:a6:4d:fa:ad:87:1e:56:04:
24:eb:27:6a:35:73:00:fb:86:c1:92:51:a0:4c:df:
3d:1e:60:b1:4e:9e:1f:c1:d2:dc:37:02:d7:68:9a:
f7:b0:82:57:e1:3f:33:0e:78:1b:a2:93:0f:1c:29:
9d:6a:93:62:23:97:9b:c9:83:e9:a0:e4:10:41:41:
0a:80:cc:e9:06:b5:14:44:99:10:3d:e1:ec:f3:3b:
ee:20:e1:e9:c2:ab:a5:4a:ec:c0:02:ad:e7:d1:2b:
58:e8:17:b8:6e:0f:27:23:a4:a9:cb:63:02:ac:c8:
ec:58:a1:7b:87:40:10:ed:fe:a6:d1:b6:91:1d:d1:
38:f9:28:0d:eb:bf:53:24:fe:fb:b5:ed:d2:99:8d:
09:d2:fc:a0:c1:e7:22:cc:88:0d:62:47:48:35:33:
8b:1a:ca:13:31:d2:75:14:03:b3:14:a6:a8:95:dc:
49:82:bd:62:8b:eb:fc:13:ba:01:39:88:34:8e:c5:
81:d9:99:9a:fd:ba:e5:d8:a4:94:b5:c5:26:6c:7b:
0b:3c:56:38:95:70:d6:9c:7f:f9:95:d9:54:49:f3:
6f:19:c7:ae:ca:e6:d7:a9:c5:26:de:88:fc:09:68:
c6:33:39:4c:5c:7a:58:50:6e:02:cf:17:71:82:0c:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:25:1C:71:41:0C:F2:53:59:3A:EC:6B:2F:23:CE:E8:17:CA:5D
X509v3 Authority Key Identifier:
keyid:C8:22:7B:10:04:F0:E5:2A:EF:CA:29:84:DB:26:2B:4E:ED:60:4F:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:86:e0:b0:b2:62:0a:50:07:66:95:94:d2:d3:68:19:4c:85:
c7:63:2f:af:b9:46:f5:1f:60:c6:68:8f:da:ed:23:dd:0d:1a:
17:8a:29:4c:d8:92:cc:6e:bb:10:18:ba:62:96:18:bd:89:19:
d3:b9:71:2b:f0:f8:11:99:2b:f5:5d:66:c6:7d:cf:03:fd:19:
a8:1a:e4:22:bb:28:1b:db:15:11:1e:bb:41:e8:24:54:4b:45:
45:98:cf:56:9d:9b:80:fa:6b:0c:3e:d6:c2:18:71:40:32:e2:
f4:d2:75:db:83:af:f2:58:c4:b1:a5:c8:1b:42:9c:d8:e2:3c:
59:52:d5:48:9e:42:94:ab:84:a4:b7:29:87:ea:70:95:6e:d5:
ce:9c:ca:a1:b6:11:32:89:9c:9d:26:31:a7:17:4b:60:44:a8:
ae:72:57:f8:0f:a9:f2:2a:d8:6f:c3:9c:8d:2a:a7:0f:a5:7d:
42:c3:eb:9a:3f:92:a7:8f:5c:e7:db:a4:70:7e:39:ef:00:7f:
e3:1a:21:5f:6d:44:86:e0:ba:33:77:f2:7b:97:a0:78:22:d6:
7d:f4:04:0f:53:38:18:a8:74:b4:15:ed:1f:1f:91:ee:7d:02:
fd:77:26:8a:8c:3a:d5:99:7c:50:00:c5:e2:68:bb:a7:0b:a3:
51:64:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:52:53 2025 by rpki-client