Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
File: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (raw, json)
Hash identifier: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=
Subject key identifier: C1:E2:77:AE:EC:69:A9:02:1F:BE:F5:00:BE:4E:19:58:7E:03:2C:33
Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
Certificate serial: 4997AD202A58CA498F2D46329756651765C51A27
Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
Signing time: Fri 17 Jan 2025 19:39:08 +0000
ROA not before: Fri 17 Jan 2025 19:34:08 +0000
ROA not after: Fri 16 Jan 2026 19:39:08 +0000
asID: 61862
IP address blocks: 138.185.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:97:ad:20:2a:58:ca:49:8f:2d:46:32:97:56:65:17:65:c5:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
Validity
Not Before: Jan 17 19:34:08 2025 GMT
Not After : Jan 16 19:39:08 2026 GMT
Subject: CN=C1E277AEEC69A9021FBEF500BE4E19587E032C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:35:b4:e2:e7:fb:43:87:f0:6e:41:b3:ed:
cd:78:4c:85:ca:b1:bd:f1:54:fa:52:36:1f:16:28:
a1:c9:b7:87:07:b9:91:aa:fe:2f:b9:46:6a:90:87:
fc:01:69:e9:9e:3d:f9:6e:3c:f7:de:13:cc:23:b8:
30:e4:23:47:0b:29:12:df:0b:e4:62:8b:6c:fc:ca:
fa:cb:4b:8d:e9:b9:a7:80:64:28:99:b1:61:49:83:
16:75:41:4c:43:ed:01:7e:70:29:74:86:48:68:9f:
2a:ac:0b:51:1b:05:2e:57:c6:70:e8:c1:41:87:01:
25:b8:4f:50:6c:cb:e8:5e:9f:99:6c:c8:2c:3d:60:
23:ca:e5:d8:7b:51:a9:ef:f5:44:df:a7:40:74:79:
13:57:51:3a:ff:db:42:c7:67:86:ff:88:24:e3:80:
19:ea:28:b4:96:b2:7e:74:4b:63:11:22:5b:62:a9:
d1:0b:60:b5:b7:17:b7:e7:6e:5d:c9:24:bb:48:47:
59:9e:ab:3f:c8:eb:27:5e:1a:8d:9c:46:1e:f3:a5:
f9:ab:18:51:2a:82:c5:a0:f2:5a:51:68:7f:55:06:
9d:ab:e5:9d:37:27:02:aa:03:c3:a3:cc:7d:f3:f2:
ab:fe:76:52:47:ed:a7:99:9f:7d:0b:4e:e7:85:73:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:77:AE:EC:69:A9:02:1F:BE:F5:00:BE:4E:19:58:7E:03:2C:33
X509v3 Authority Key Identifier:
keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
90:03:63:70:a0:7f:75:36:93:a6:ca:e9:7d:2c:0a:62:e9:cf:
5f:6f:62:f2:e6:ff:8b:43:e4:42:34:83:89:78:aa:8d:c2:0c:
28:27:61:40:0a:67:9c:4b:89:bd:93:64:d6:6f:fb:7c:3f:4a:
d9:81:cb:2c:24:14:16:35:70:f2:d5:72:b6:49:42:a8:a0:82:
54:86:72:26:90:3d:3b:90:86:8b:26:d3:24:c8:cc:64:a6:4b:
09:2a:aa:91:ee:b3:60:2d:83:fe:36:ba:cd:01:a6:0e:db:01:
bc:80:86:f0:8e:8a:7b:30:c2:ff:8a:8d:c6:10:c0:e9:1d:2e:
a4:74:f0:0d:b5:d2:6d:71:14:48:32:d8:95:d4:ae:91:1c:31:
ad:ec:94:f6:5b:78:1c:4a:a1:6f:c7:51:be:b5:d2:2a:ea:f6:
81:82:4f:10:e8:4d:27:81:6e:ae:15:4b:d8:e3:c6:e8:d7:40:
c0:92:52:a5:d7:58:16:de:46:ea:d8:e3:89:f1:e1:47:e5:ab:
87:7f:23:ce:79:f2:fa:0d:60:48:b9:34:f1:04:17:c4:92:0b:
d2:04:a3:03:eb:50:3f:76:60:50:94:13:6b:50:fe:11:77:3d:
34:a3:62:0f:fc:d3:7f:02:db:53:61:ff:c4:3d:69:93:0e:58:
7a:ce:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:14:26 2025 by rpki-client