Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
File: 3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa (raw, json)
Hash identifier: EhnP/DbU2CFt0WzfIaoYEngRCwAdxxvDzbnrttcFgTw=
Subject key identifier: 3C:B8:38:69:E3:44:41:82:5C:4C:EA:AB:2A:DE:81:32:03:AA:2A:FD
Certificate issuer: /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial: 019C9AC9A45C0DD0B882FE043587B666D96609D4
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
Signing time: Wed 03 Apr 2024 18:32:00 +0000
ROA not before: Wed 03 Apr 2024 18:27:00 +0000
ROA not after: Wed 02 Apr 2025 18:32:00 +0000
asID: 263917
IP address blocks: 138.204.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:c9:a4:5c:0d:d0:b8:82:fe:04:35:87:b6:66:d9:66:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Validity
Not Before: Apr 3 18:27:00 2024 GMT
Not After : Apr 2 18:32:00 2025 GMT
Subject: CN=3CB83869E34441825C4CEAAB2ADE813203AA2AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:a2:71:3c:68:c0:71:4f:2d:68:98:df:38:
a4:3f:ea:88:db:6f:88:12:5b:57:8a:f7:b8:00:06:
1d:81:ae:de:4e:ee:74:01:2d:f6:1a:0c:53:09:22:
e2:b6:7d:0b:9d:fa:2c:80:9d:51:5c:88:22:8e:5d:
58:df:b0:2e:05:d6:a9:e0:16:b1:4f:9d:40:f9:90:
97:8a:ea:3c:a9:7e:f5:bd:e3:db:75:52:9c:7f:ef:
36:ae:a1:39:e4:af:0c:05:9e:d3:be:d4:f2:6c:10:
95:f6:ce:37:30:53:36:60:b2:1a:8b:7b:84:c2:d1:
79:75:08:bd:26:c8:8c:86:98:e4:a8:a1:69:f5:ca:
23:5f:36:c8:70:69:f9:4d:82:84:73:d2:e0:5e:5a:
cd:3d:5e:3d:65:a3:59:6c:f9:a6:2c:04:45:c3:db:
f2:67:1e:68:02:58:4b:32:46:9e:8e:ab:c5:28:4e:
d9:3d:3c:31:08:5f:40:15:bc:41:36:d4:bd:9b:10:
e3:f5:d6:bd:5d:40:35:bc:c3:77:e8:9c:b2:ce:57:
8b:a7:75:83:c2:b1:d7:c5:93:eb:28:31:e6:3f:62:
09:99:f9:bf:78:53:a5:71:8b:d7:c7:b1:db:32:f8:
38:65:a8:84:57:c5:f0:5f:99:f5:c4:d0:ca:e7:7f:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:38:69:E3:44:41:82:5C:4C:EA:AB:2A:DE:81:32:03:AA:2A:FD
X509v3 Authority Key Identifier:
keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.232.0/22
Signature Algorithm: sha256WithRSAEncryption
69:6a:d7:4f:a1:7d:37:36:6c:38:63:e8:07:43:7c:4f:52:b6:
9d:64:6c:6b:12:fe:10:4b:a3:de:74:35:26:10:98:e0:0e:32:
fd:59:7d:d6:5f:82:e3:1a:ee:d4:7f:b2:2f:52:6b:5f:c9:ac:
ab:9c:00:6c:df:13:eb:6b:7d:49:05:17:a8:4a:0e:83:74:91:
fd:de:0c:56:aa:d2:b2:fd:c4:52:83:79:75:e7:20:b0:54:d9:
dc:75:b4:09:d7:5e:6f:2e:34:52:ca:dc:18:fe:6e:67:59:88:
a3:76:4b:6f:88:1a:f5:d0:2e:6e:14:f0:c4:e5:36:53:18:52:
1f:2e:22:c6:91:89:b2:af:22:97:67:22:c1:70:fb:ff:09:03:
2f:c6:1d:fc:d0:c1:9d:b3:b1:c7:ea:a5:aa:f2:b8:84:70:4a:
33:7d:78:36:9a:23:a4:c2:70:64:2f:15:0d:a7:6f:25:05:a7:
1d:c3:9f:f3:02:e8:7b:fe:cc:0f:d4:69:c6:8a:37:af:e4:89:
f3:f4:b4:d6:91:4d:36:ae:4c:e3:81:3d:53:ca:8e:7b:82:7d:
3a:6b:71:d1:ee:70:e2:50:fb:c5:f2:5f:25:d8:5c:b2:49:dd:
7b:5f:3c:2d:1c:0d:ab:54:c5:c1:ad:01:69:2a:9e:72:4e:c5:
fe:c5:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:35:57 2025 by rpki-client