Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa
File: 3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier: rP9RZkTeTXXkzNdZ1s9fh/rktmH6SO02nJqdn7KvkDs=
Subject key identifier: CF:AC:B0:E4:E7:E4:C4:4F:B2:BE:30:C8:6D:10:92:99:C5:79:BA:E2
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 05DF386E23F8371A5DDE01D468DD8ADDDEFD4C30
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:44:59 +0000
ROA not before: Tue 24 Oct 2023 12:39:59 +0000
ROA not after: Tue 22 Oct 2024 12:44:59 +0000
asID: 61678
IP address blocks: 138.122.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:df:38:6e:23:f8:37:1a:5d:de:01:d4:68:dd:8a:dd:de:fd:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:39:59 2023 GMT
Not After : Oct 22 12:44:59 2024 GMT
Subject: CN=CFACB0E4E7E4C44FB2BE30C86D109299C579BAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:80:35:c9:60:cf:85:53:f8:f6:68:9a:80:
30:75:62:34:81:c3:b2:d8:93:a6:f4:f8:c7:1d:9f:
e9:5b:c8:83:d7:6b:75:bd:54:08:48:28:5f:2f:36:
65:5e:21:5e:12:36:88:22:9a:a7:9f:83:54:1f:1a:
07:13:97:6a:07:81:b6:9d:15:0c:86:eb:c6:fe:ac:
39:0d:09:b1:2c:96:1f:45:44:d5:89:f8:b6:c2:75:
5c:7f:6f:dc:26:34:5e:ad:eb:5b:03:bb:38:3c:09:
b7:cc:d1:8e:1b:26:6d:68:ce:6a:98:be:08:73:d8:
d0:17:e0:2a:33:de:3a:14:53:09:71:f5:0c:32:e8:
38:dd:4f:67:49:da:ed:3e:a7:22:c1:ab:dd:57:40:
93:c3:50:38:54:a8:84:44:5b:d1:5e:83:e6:c4:2a:
33:09:12:3f:92:db:36:68:1a:d0:7c:db:51:3d:41:
f5:1b:37:47:3f:de:82:6a:a4:4f:dc:07:e3:71:60:
e4:88:41:e2:4a:89:c7:47:75:ba:86:07:8f:17:bb:
b0:52:0b:53:5d:76:75:18:ae:66:85:34:58:04:a3:
ef:49:5e:d2:db:7e:12:2c:18:c8:2e:3d:6b:9c:fa:
32:cf:d2:39:1b:8b:9c:27:2b:09:50:64:8b:cc:8e:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:B0:E4:E7:E4:C4:4F:B2:BE:30:C8:6D:10:92:99:C5:79:BA:E2
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.140.0/22
Signature Algorithm: sha256WithRSAEncryption
41:f3:b9:e5:61:46:d9:ec:7e:b3:6b:92:78:70:c6:21:38:96:
0f:fb:4d:7f:2f:ea:f6:43:e4:35:b4:09:1c:2f:32:96:d3:4b:
e4:d6:d3:2a:6f:9c:80:ba:00:34:bc:0d:5d:3c:0c:4f:9e:c3:
98:d3:4d:8d:5b:7c:75:8d:d6:db:a7:c4:98:ab:ca:d9:5a:97:
b1:c0:83:d6:bb:38:8d:09:73:b5:41:50:2c:bd:b6:c0:94:a2:
8b:49:ae:b7:2c:ea:bb:8c:4a:e7:a7:94:df:9b:ed:6a:ba:6a:
19:3e:55:72:85:60:3d:f7:dd:d5:e8:46:71:f7:65:53:ba:eb:
34:d5:cb:70:e1:39:86:e3:b0:68:4a:ff:9f:81:d2:8e:a3:20:
f2:f0:be:3c:51:5f:17:7b:6e:91:b0:f1:7e:e0:07:e7:39:7f:
eb:c5:20:7d:67:66:27:0b:b5:13:fc:65:be:fc:21:64:5b:93:
0a:e0:0e:c6:2f:05:c4:8d:c4:8d:4e:0b:b2:1a:5e:ee:b6:45:
75:e4:53:b8:56:ea:1a:5a:04:23:d7:7e:b6:a0:b7:1c:0f:2f:
d3:68:5e:88:01:9b:3c:df:8d:d6:ea:b5:62:4b:b3:64:6f:88:
9d:11:6d:1c:c5:0e:ca:45:ab:ec:9c:96:2b:02:00:9c:1f:7f:
48:41:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org