Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File: 3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier: gzGeplzkaDAMkcN68qjjIX5PHakWIq0qO+39icoDitU=
Subject key identifier: 9D:6F:3D:5B:E1:D0:15:FF:B9:EC:60:31:07:93:98:62:A7:52:E3:E4
Certificate issuer: /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial: 550CCFD3BE03318ACF9270511BDCD1E543761188
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time: Mon 09 Jun 2025 11:41:15 +0000
ROA not before: Mon 09 Jun 2025 11:36:15 +0000
ROA not after: Mon 08 Jun 2026 11:41:15 +0000
asID: 264561
IP address blocks: 138.0.252.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:0c:cf:d3:be:03:31:8a:cf:92:70:51:1b:dc:d1:e5:43:76:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Validity
Not Before: Jun 9 11:36:15 2025 GMT
Not After : Jun 8 11:41:15 2026 GMT
Subject: CN=9D6F3D5BE1D015FFB9EC603107939862A752E3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:7a:0a:6d:31:b8:32:ff:47:bb:f0:ad:09:
1a:6a:45:d4:68:24:83:5e:74:ec:7d:16:13:2f:b8:
6e:a1:b5:40:9a:66:03:7a:4c:9d:0d:06:e5:44:b5:
a3:0d:e8:29:de:ec:e7:36:4d:d3:77:03:4c:4a:97:
5a:90:8d:63:21:05:44:1e:2c:5c:39:c5:f7:bf:de:
45:92:f4:ec:3a:d6:01:18:06:75:45:fa:87:fc:ff:
10:75:ef:d2:b7:c1:30:7a:45:d5:7c:63:1d:ec:5d:
1b:5b:f0:8f:e1:a7:92:ac:65:bb:44:d0:7c:c0:e2:
45:1a:1d:32:bd:1d:aa:9c:ed:31:17:59:5b:99:e6:
ec:78:e0:c0:56:29:8b:e0:b7:0e:e8:15:1c:8a:bc:
09:3d:b6:d6:87:ac:26:d1:13:98:1c:fb:1a:67:f1:
1b:f1:35:5c:f4:80:41:26:da:aa:ee:63:43:65:8a:
b7:61:a0:4b:f7:f8:d2:02:35:4c:f7:b0:68:73:cd:
00:d7:96:81:cf:07:7e:03:0f:99:32:36:fe:ba:c9:
ec:30:3c:03:78:4d:4e:fd:2a:70:03:1d:7a:c5:8e:
83:90:0b:c0:4f:77:f4:fb:20:1b:bb:25:43:7b:05:
6a:67:f3:1d:f4:70:18:db:86:c4:c0:d6:86:fb:4c:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:3D:5B:E1:D0:15:FF:B9:EC:60:31:07:93:98:62:A7:52:E3:E4
X509v3 Authority Key Identifier:
keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:1e:5f:3e:e0:e9:70:fc:a6:39:37:97:f5:73:bf:cd:24:f1:
ad:71:34:d1:8c:c9:23:e7:03:8d:d2:51:54:67:9a:de:16:4a:
ec:22:79:4a:d1:fa:8a:0d:9b:cd:02:7f:de:cb:93:24:64:41:
2a:81:93:8c:d1:dd:2e:22:3b:9f:87:34:a7:56:29:ef:87:94:
cd:16:4e:db:2c:2d:18:23:14:b5:16:a7:e6:2b:a1:6a:2c:00:
70:a5:bf:1b:38:77:41:74:4c:db:88:23:9e:bf:a1:83:28:38:
b8:af:10:43:73:3d:ff:42:73:00:fd:07:26:a3:22:50:9e:be:
d3:da:ea:c2:2e:ee:1e:42:02:98:bf:03:7f:25:ac:82:56:04:
78:38:9f:3c:c2:c4:2f:78:f7:ac:7f:87:11:a8:53:12:c7:71:
4d:51:fd:a3:bb:e2:8d:6a:69:37:62:f4:6e:e0:0b:c3:b6:a5:
40:4f:19:c2:bd:17:82:e8:3c:f3:12:30:83:bb:da:87:17:51:
48:76:e9:7d:44:e1:a7:42:95:7f:6f:bb:07:8a:22:c8:2d:c7:
47:3b:7a:a0:7a:a7:95:cd:53:05:46:3d:19:59:11:66:ab:ce:
e2:11:23:81:e6:ef:8e:c6:dd:49:53:c1:1e:8b:89:08:70:fa:
8e:82:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:10:57 2025 by rpki-client