Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa
File: 3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: Wr2EXC9tGpX8t6SpSiG15u1jEt703d/zcaO6uyMT8LY=
Subject key identifier: EF:C6:46:1D:8E:9E:EE:3D:97:45:85:D8:C2:72:3E:CC:9C:F3:CC:F5
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 3FED101CB859964C818CC55B5B9C2DD1D52F8EC5
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:06 +0000
ROA not before: Fri 22 Dec 2023 20:20:06 +0000
ROA not after: Fri 20 Dec 2024 20:25:06 +0000
asID: 263073
IP address blocks: 138.219.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ed:10:1c:b8:59:96:4c:81:8c:c5:5b:5b:9c:2d:d1:d5:2f:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:06 2023 GMT
Not After : Dec 20 20:25:06 2024 GMT
Subject: CN=EFC6461D8E9EEE3D974585D8C2723ECC9CF3CCF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:85:c8:b1:40:16:5b:07:b2:ae:53:c8:a7:
b2:f5:76:41:be:d6:85:22:22:40:2e:98:a7:e2:16:
10:fd:cb:d1:d9:34:52:76:35:b5:0b:64:a4:7f:90:
21:03:36:74:a2:06:c6:47:3f:89:78:7a:a2:4d:cc:
22:93:50:3d:15:53:77:be:01:23:12:9a:ca:a2:3b:
cb:20:c9:10:4f:53:3f:e9:e8:27:d0:18:f4:09:d4:
ea:c0:b4:49:d5:b8:38:4f:dd:c7:0c:46:67:c0:0f:
ae:29:c4:fe:3e:02:ae:02:dc:0c:78:7a:1f:c6:ef:
e1:1f:c0:c0:2c:92:2b:01:b4:7a:c1:01:bb:c4:5f:
af:7f:a7:14:5c:aa:90:b3:3e:b9:25:fa:37:bf:10:
e1:84:d8:8d:09:28:7d:b3:67:fa:75:44:c5:38:b0:
88:ac:2f:e0:db:46:0a:ac:dd:11:5d:81:51:1f:7e:
cf:39:81:b2:d7:78:38:bf:29:ff:a3:de:ec:3c:7b:
77:6a:c5:2b:1b:2e:45:8d:80:f5:49:6f:60:08:cb:
51:ce:14:ca:8c:20:e3:81:b5:51:00:f1:3a:e6:5b:
49:04:b3:a6:82:52:a5:6b:09:a9:91:d0:45:8e:1e:
9a:4f:f8:ee:7b:c3:76:78:51:85:14:07:f5:07:84:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:46:1D:8E:9E:EE:3D:97:45:85:D8:C2:72:3E:CC:9C:F3:CC:F5
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e7:e4:64:1b:dd:0d:ed:f9:d9:24:e3:11:a6:01:ea:a6:fa:
91:42:18:f4:a3:57:81:35:a8:b7:99:9a:67:32:eb:e7:4b:83:
87:39:7a:f1:ce:0a:38:c6:f9:fb:86:2a:7a:94:98:52:58:a4:
f5:1d:39:b2:cb:7c:9d:d7:c7:33:9c:1a:eb:51:a1:e5:66:5f:
4b:de:ca:9b:3f:a4:16:6b:97:b7:a0:00:f7:b2:78:1d:5b:9f:
b7:8a:70:27:21:2a:c3:9e:38:97:7a:6f:fd:df:3f:00:16:ff:
55:dd:ec:5a:f1:20:68:fa:16:9e:71:f0:f4:5c:25:56:1f:1e:
67:4a:e9:77:66:63:51:db:ac:45:e9:5a:e8:ce:81:50:2d:29:
f8:b4:f9:36:eb:4f:66:8f:6d:73:47:bf:02:30:84:32:48:64:
13:64:1e:f7:d3:8d:0f:ce:8e:49:84:96:75:4f:d3:3a:78:f1:
93:e6:4f:33:34:7e:93:a8:d1:ba:04:c5:a2:e9:84:b7:c2:d3:
ff:67:26:5c:c0:61:a7:63:04:cf:c5:37:01:31:ce:c9:ef:5d:
27:9e:af:b6:73:a7:e7:27:9d:ed:52:41:2a:d5:d4:0b:34:a0:
43:ce:79:33:06:5f:a0:36:00:dd:61:cf:ba:92:9c:8c:35:e5:
e4:8d:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org