Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
File: 3133382e35392e34352e302f32342d3234203d3e20323634353935.roa (raw, json)
Hash identifier: 5OanmR+5IB2QtfWd6PxMz/uwf95jM57k748qiDUlsr8=
Subject key identifier: 34:17:48:7E:FB:E4:99:EB:38:F5:06:34:D2:4E:17:22:E8:CE:50:67
Certificate issuer: /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial: 3704A2E3A19003FC207BFD46633F73E252167F2F
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
Signing time: Mon 01 Apr 2024 14:40:11 +0000
ROA not before: Mon 01 Apr 2024 14:35:11 +0000
ROA not after: Mon 31 Mar 2025 14:40:11 +0000
asID: 264595
IP address blocks: 138.59.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:04:a2:e3:a1:90:03:fc:20:7b:fd:46:63:3f:73:e2:52:16:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
Validity
Not Before: Apr 1 14:35:11 2024 GMT
Not After : Mar 31 14:40:11 2025 GMT
Subject: CN=3417487EFBE499EB38F50634D24E1722E8CE5067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:79:84:50:cd:25:6f:9b:04:d3:a7:97:74:
ab:9e:12:06:19:b6:43:3c:98:d0:19:cd:d1:ba:6f:
1e:51:22:e3:a0:cd:30:2b:6e:14:e8:8f:c1:e2:38:
1d:67:17:1c:4c:95:12:7f:a2:36:ea:16:7a:e6:3d:
7d:2d:78:7d:45:d9:cb:13:7f:14:fe:f8:aa:ae:43:
b9:3c:5c:31:e8:fd:75:a4:e1:09:f3:5a:cd:86:f1:
d8:54:65:58:61:77:d2:73:15:1a:1d:a4:9f:89:d4:
d0:33:68:ec:f6:9f:4a:ea:1b:ed:2a:d6:72:c5:b7:
a9:4a:9c:cb:7f:b4:f7:12:88:51:9e:7b:38:56:10:
df:19:39:46:d5:96:51:56:60:21:95:b2:29:7e:04:
e5:fa:35:1b:b6:cb:ce:b8:bb:69:3e:d1:9a:59:6d:
00:4b:9f:0f:50:5b:4f:91:0d:1d:8a:e0:85:39:59:
56:21:e5:34:61:17:27:0b:97:f4:db:fc:70:16:58:
e4:18:3e:db:86:87:7a:ca:77:fc:4a:e3:de:10:a3:
7b:a2:5a:c0:79:c3:d7:a7:9b:75:50:88:65:6f:74:
ec:a1:89:d5:54:5b:eb:36:6e:57:d9:d5:33:56:ce:
31:57:ae:60:0e:0d:a8:4a:d0:70:1a:a5:27:01:b9:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:48:7E:FB:E4:99:EB:38:F5:06:34:D2:4E:17:22:E8:CE:50:67
X509v3 Authority Key Identifier:
keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34352e302f32342d3234203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:39:5c:5e:aa:7a:dd:db:24:e3:46:aa:eb:17:91:15:4b:5d:
54:d8:e5:5c:d1:22:6f:8f:0a:6f:58:38:84:94:d6:d9:bb:24:
e9:b3:ea:76:ae:94:ac:f5:c0:49:51:48:bb:ad:ec:e4:de:22:
43:13:1f:76:ab:0f:bb:f2:14:dc:e7:5e:66:4a:b2:07:59:2d:
11:a6:05:23:b9:b7:dc:3f:ac:5e:12:62:f6:37:30:10:c7:4c:
c4:20:5b:52:30:43:00:73:35:72:03:eb:a5:75:21:73:d7:62:
5b:c8:62:94:24:a3:90:35:1d:f8:34:dd:dc:c0:49:5f:1b:f1:
67:19:10:b4:f0:73:1c:cb:f2:20:0f:ba:d9:7a:a7:ca:38:a4:
f7:eb:a6:17:8f:e1:9f:0a:9b:46:87:4e:bd:99:17:0c:a2:a6:
d7:8b:6b:51:82:ad:9f:0d:ac:1d:2e:20:92:f2:7a:4a:a7:87:
a8:16:e9:23:0a:32:9a:4d:fd:7d:be:91:a4:80:a7:d5:41:f4:
04:71:e2:b2:98:34:16:5d:5e:d3:10:1d:91:ef:5b:79:6f:91:
bf:3d:ee:49:14:8a:29:4c:ce:31:d3:85:36:58:f9:98:3b:cf:
2d:34:80:d9:69:e9:fc:b5:e7:dc:bb:0d:7c:ea:66:79:23:55:
a2:73:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org