Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3332203d3e20323632333737.roa
File: 3133382e3131372e3231362e302f32322d3332203d3e20323632333737.roa (raw, json)
Hash identifier: 3IRAKp8yQLMzCoUpXDLmogLH9EByAvgE1oDcUAa6z6c=
Subject key identifier: 71:BD:33:C2:03:7E:75:4A:BC:F9:62:00:97:F6:49:42:47:1B:4B:1F
Certificate issuer: /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial: 5ADCEFC79065DA91487AEB850AB5ED007895754B
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3332203d3e20323632333737.roa
Signing time: Fri 02 Jun 2023 12:16:48 +0000
ROA not before: Fri 02 Jun 2023 12:11:48 +0000
ROA not after: Fri 31 May 2024 12:16:48 +0000
asID: 262377
IP address blocks: 138.117.216.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dc:ef:c7:90:65:da:91:48:7a:eb:85:0a:b5:ed:00:78:95:75:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Validity
Not Before: Jun 2 12:11:48 2023 GMT
Not After : May 31 12:16:48 2024 GMT
Subject: CN=71BD33C2037E754ABCF9620097F64942471B4B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:40:b7:2d:93:1d:f7:a7:47:f9:d5:62:ba:
b7:81:6b:7d:44:64:a9:10:9d:f1:09:10:a9:94:b3:
43:6f:d7:ca:a6:1a:31:81:44:6b:64:be:85:3a:32:
d3:2e:1a:1a:9a:03:f1:db:90:64:de:1a:0e:d5:a0:
ec:28:58:2f:f0:d0:14:2e:a1:d6:22:4f:e4:cb:8a:
fd:69:af:a2:cd:e7:82:70:d7:3c:9a:1e:94:8d:33:
18:b8:0e:ce:db:a7:7c:da:c2:de:b8:51:13:f2:22:
7a:c0:1b:19:91:0b:24:d9:96:03:4d:ce:af:a3:21:
33:5b:65:67:d9:ff:88:9a:8e:8e:c5:65:92:dc:4d:
e4:3e:e7:b4:84:08:7b:d8:75:a8:e9:8d:73:93:d6:
09:3a:17:78:de:90:96:86:8a:98:d9:1f:67:b1:a1:
2e:9c:29:ce:b7:06:c6:cf:24:03:e2:a6:0a:0f:71:
e5:5a:ea:9b:b8:cd:dd:34:59:56:49:f2:82:8b:d3:
6d:fa:07:c7:da:cc:10:32:57:b0:ac:e7:f1:2e:95:
54:46:9c:67:36:1e:5e:20:bb:2c:b2:a3:75:31:f7:
37:b8:09:f7:80:21:b6:6e:a7:84:15:16:37:b5:f2:
5d:57:69:e3:61:aa:58:ad:f8:43:c3:67:c6:f9:90:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:33:C2:03:7E:75:4A:BC:F9:62:00:97:F6:49:42:47:1B:4B:1F
X509v3 Authority Key Identifier:
keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3332203d3e20323632333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f1:2b:e8:d1:28:11:0e:17:66:3b:8d:d8:2e:7e:24:18:b3:
3c:82:be:1c:23:0b:92:82:6a:cf:69:b8:57:a7:d9:70:f7:6e:
b7:ab:cc:e8:0b:0a:c6:49:bb:c6:db:89:3f:59:37:55:97:66:
2e:f9:55:78:7f:78:cc:93:de:0c:3d:1b:45:cb:bf:9b:e5:b9:
8f:5e:9a:0d:51:f6:ef:14:3d:5f:ee:74:7f:61:d0:ff:51:0f:
24:e3:8d:f2:33:9c:b1:46:e5:de:be:3c:26:ab:12:f3:cc:df:
df:bf:85:c4:2e:d2:52:c6:5a:44:8b:18:e7:a7:a8:1e:df:f2:
f3:18:2b:0c:3e:12:3e:cf:e2:40:1a:1a:e6:05:63:a3:eb:fa:
83:01:47:26:fc:42:c8:5c:4d:ce:5b:b7:fa:62:85:07:6c:a4:
08:9a:82:e8:28:74:44:48:d3:a1:ab:c4:5e:0e:f1:eb:74:cc:
1c:83:2b:d0:c8:38:2c:7b:8d:c9:15:62:6f:24:5d:3e:34:c6:
7d:d8:73:76:ce:df:fa:10:ad:93:35:c2:78:f6:08:47:de:33:
e9:cb:cb:21:b2:ed:b7:24:18:b2:8a:1f:7f:bb:e8:88:12:73:
50:40:23:27:af:8c:0b:95:23:ea:4d:e6:13:7e:64:59:9c:3c:
e3:05:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:10:40 2025 by rpki-client