Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
File: 3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa (raw, json)
Hash identifier: D/r0y3N2RH60nODdsXf1TrEtigqlC3rNydMzBYzg8zM=
Subject key identifier: D1:8A:FD:FA:9B:69:23:43:FA:B2:E1:E1:D3:F4:D0:42:C2:98:8E:6B
Certificate issuer: /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial: DB4AA3A8F126F2EE52C6D95ACF0E6C0A114B1B
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
Signing time: Wed 22 Jan 2025 20:20:20 +0000
ROA not before: Wed 22 Jan 2025 20:15:20 +0000
ROA not after: Wed 21 Jan 2026 20:20:20 +0000
asID: 263866
IP address blocks: 138.186.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
db:4a:a3:a8:f1:26:f2:ee:52:c6:d9:5a:cf:0e:6c:0a:11:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Validity
Not Before: Jan 22 20:15:20 2025 GMT
Not After : Jan 21 20:20:20 2026 GMT
Subject: CN=D18AFDFA9B692343FAB2E1E1D3F4D042C2988E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:c7:1c:6c:f9:2b:ba:28:25:d2:0c:52:a4:
ef:2e:c0:8d:e2:f9:e7:56:80:75:81:ef:c4:e6:2e:
d3:b2:35:20:28:c1:f4:2b:65:60:f6:04:ba:35:d0:
95:e2:94:54:4d:7a:d8:cd:43:7f:b2:2b:7b:d1:e1:
c1:58:2d:c6:c5:05:68:1b:c0:28:b3:08:10:3b:05:
b9:d0:32:d1:f5:36:5a:f3:64:e8:ae:73:cf:a1:3c:
a2:de:99:9c:34:1a:38:51:e4:40:90:8e:e7:9d:40:
7b:99:9a:28:de:7a:87:6e:71:30:54:e0:67:a8:be:
18:b2:f2:89:da:29:a3:ca:0c:f5:ad:d6:34:18:75:
41:dd:1a:5b:d4:2d:d9:9e:ec:7c:80:51:4e:5d:27:
2e:a5:8e:a3:5a:f0:45:dd:4e:1b:6a:eb:7a:ec:b5:
30:64:50:4b:97:fc:46:eb:7c:6a:66:96:fb:d3:9b:
2b:0d:f0:d4:43:97:81:01:f2:bd:cd:31:4a:9f:f1:
06:5a:7d:63:48:30:6c:fc:f4:17:6e:5b:a2:34:c0:
0e:63:9f:bf:f9:5c:93:ed:b9:77:9f:e7:ad:04:67:
59:91:45:23:65:e9:42:fe:fe:00:e6:a0:e8:09:09:
f4:6d:6f:be:b7:ba:98:fc:26:e8:27:b2:ef:15:49:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:FD:FA:9B:69:23:43:FA:B2:E1:E1:D3:F4:D0:42:C2:98:8E:6B
X509v3 Authority Key Identifier:
keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.114.0/23
Signature Algorithm: sha256WithRSAEncryption
63:30:34:2a:dd:00:c0:5b:88:c0:b8:04:81:1a:fc:0d:04:eb:
6e:f4:dd:f0:75:31:f2:8b:8b:a3:7a:ab:95:bc:31:34:bc:b4:
2d:06:c7:95:2a:b9:91:c2:58:ab:45:b1:28:4b:c4:e3:20:26:
37:09:67:cb:7e:fb:1d:b1:c9:29:63:60:ac:d4:9c:57:f9:3d:
47:37:67:ab:1f:95:2c:0a:e0:bb:68:ba:db:7c:de:27:b7:84:
da:ef:2d:d9:b4:ad:e8:fa:37:72:1f:74:c2:24:5b:e2:2e:2d:
37:34:fd:bf:52:e0:c9:9b:6e:30:0f:bf:84:43:68:f0:ab:18:
8c:dc:40:74:3e:ee:62:5a:4b:d7:6a:46:ef:fa:35:a6:98:5a:
9b:70:67:39:e8:d6:5c:26:9f:4d:46:03:6d:bd:eb:00:c1:c1:
47:d9:87:e5:78:13:00:c3:4e:5b:0c:cf:a2:ce:ef:8c:40:20:
3e:31:56:dc:de:9f:5a:1c:66:a2:06:0a:d6:10:05:4a:54:47:
27:ce:69:b0:f3:98:9b:55:3a:ee:75:9a:7a:7f:4b:80:01:fc:
86:00:c1:52:ae:6f:15:1b:de:17:81:58:ba:49:64:ec:ca:e6:
f2:92:f6:38:a2:50:01:09:7e:be:9a:53:05:c9:6f:48:2a:1d:
9f:49:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:19 2025 by rpki-client