Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
File: 3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa (raw, json)
Hash identifier: uOTCXcJUdwGtc94NsKtNIejlJ++NnNHAphQPM/+CB4A=
Subject key identifier: A8:9C:1A:82:D2:22:EF:E1:15:69:63:15:5A:9A:DD:69:66:DC:3B:60
Certificate issuer: /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial: 557FF2D5997CEFC0F53BC1030132D4EB3B0224FA
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
Signing time: Wed 22 Jan 2025 20:20:21 +0000
ROA not before: Wed 22 Jan 2025 20:15:21 +0000
ROA not after: Wed 21 Jan 2026 20:20:21 +0000
asID: 263866
IP address blocks: 138.186.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7f:f2:d5:99:7c:ef:c0:f5:3b:c1:03:01:32:d4:eb:3b:02:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Validity
Not Before: Jan 22 20:15:21 2025 GMT
Not After : Jan 21 20:20:21 2026 GMT
Subject: CN=A89C1A82D222EFE1156963155A9ADD6966DC3B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:0f:58:52:75:79:8f:da:9a:27:4b:7d:fd:
f8:75:a7:0f:57:83:25:10:63:22:37:3a:cb:7e:fb:
1e:cd:f9:72:85:40:53:45:19:24:9a:93:4b:66:a6:
e0:b1:50:46:d5:bb:28:1c:b2:80:da:9f:b5:68:93:
95:c5:85:e4:1d:52:5a:d2:6a:0e:9c:41:d9:fc:c0:
54:82:93:39:7a:9f:c0:93:91:eb:12:b1:5f:3f:d8:
d1:68:07:c4:40:84:54:35:78:20:f8:56:2c:34:c5:
09:7b:d0:0a:25:65:6d:9e:97:4c:8f:ab:19:c5:5f:
0e:d7:6f:4a:13:0b:39:46:3e:ab:84:ff:a5:af:30:
ae:fe:29:4a:c0:b4:14:6d:ad:c8:73:7f:92:08:31:
f3:4a:62:a8:57:37:26:c5:59:b6:84:85:f9:a4:a6:
49:80:da:09:20:7f:78:6c:9b:1b:d3:a1:f2:39:79:
d4:29:82:fc:ef:ec:2c:d1:e2:8e:61:34:40:bf:27:
4c:c4:93:d4:74:02:0c:be:00:ed:8b:0e:9c:33:2a:
a4:15:fe:19:41:56:59:22:7b:91:79:c8:db:cb:6c:
eb:6e:1d:8f:67:f1:34:6c:02:4e:17:9c:43:c3:33:
14:a2:fa:5a:1d:87:f3:e7:35:ed:7a:7f:97:a4:05:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:1A:82:D2:22:EF:E1:15:69:63:15:5A:9A:DD:69:66:DC:3B:60
X509v3 Authority Key Identifier:
keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.112.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:d5:14:21:77:7d:7f:ef:88:ba:bb:f7:de:d6:16:f7:ca:64:
bc:c6:7f:ba:8e:53:f6:ba:48:94:85:c9:ce:b3:26:bd:63:74:
fb:aa:e8:56:44:71:b1:1e:77:75:de:15:8f:fb:42:0b:08:03:
1e:ba:e1:ae:53:9f:25:82:a9:b1:5c:5a:7e:5b:05:a3:40:09:
77:dd:d8:66:6d:91:9f:42:bb:97:6d:8c:a4:57:8e:c4:44:5c:
dd:01:e0:9d:9e:f1:8c:63:c9:d3:00:77:de:26:00:c0:06:82:
2b:6c:2a:f6:f8:1b:04:bf:f5:ef:0b:3b:83:a7:1b:24:3f:92:
e7:39:4a:7d:fc:c0:3f:90:11:90:7d:5a:81:3f:34:e5:f5:d3:
1c:79:c5:b2:af:37:a3:75:20:5a:7a:73:47:b2:88:49:12:5a:
d9:52:07:ba:db:00:ce:29:8a:7a:65:50:dd:63:1b:b8:9d:f6:
3f:d3:46:48:24:3a:08:39:b0:d8:5e:e0:9c:43:2b:77:f0:08:
75:71:59:9f:8c:27:ed:93:9d:9c:df:ee:e2:23:22:dc:f2:76:
52:ef:ed:3d:bd:f7:ca:d8:33:5e:71:7a:c7:83:92:54:db:c4:
a8:cf:c1:c5:00:9b:3a:19:7f:bf:5b:40:2e:33:fe:51:c8:e0:
7f:ea:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:54 2025 by rpki-client