Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39392e302f32342d3234203d3e20323633393232.roa
File: 3133382e3231392e39392e302f32342d3234203d3e20323633393232.roa (raw, json)
Hash identifier: Tr6IBEx+9PKGQtnnOqsiOljNU2wetipNRlvh9kJ5/9I=
Subject key identifier: C2:C6:44:86:7C:29:58:07:B5:07:9C:49:B2:5C:B7:A4:E9:50:F6:1D
Certificate issuer: /CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
Certificate serial: 29E1F11E67584A0BC2AA3DF20C9AE8B7C7A29F5D
Authority key identifier: A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39392e302f32342d3234203d3e20323633393232.roa
Signing time: Sat 25 Mar 2023 21:14:06 +0000
ROA not before: Sat 25 Mar 2023 21:09:06 +0000
ROA not after: Sat 23 Mar 2024 21:14:06 +0000
asID: 263922
IP address blocks: 138.219.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e1:f1:1e:67:58:4a:0b:c2:aa:3d:f2:0c:9a:e8:b7:c7:a2:9f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
Validity
Not Before: Mar 25 21:09:06 2023 GMT
Not After : Mar 23 21:14:06 2024 GMT
Subject: CN=C2C644867C295807B5079C49B25CB7A4E950F61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:98:dd:5a:93:c6:ab:33:13:69:c1:b3:c2:
86:39:ea:a9:91:b1:58:a2:66:4d:7f:17:0a:9f:a9:
b6:69:51:fb:79:3b:c2:0b:45:bb:88:8c:a7:4d:54:
3d:e0:e5:6b:30:6f:08:2f:e1:eb:ef:f1:9b:25:ac:
06:ad:79:42:cd:ab:cb:dc:06:dc:b6:14:06:f2:39:
0c:f1:b6:ae:bc:4a:55:7e:33:27:5e:11:5c:a5:74:
eb:f8:ee:f3:03:8c:78:99:19:0c:2a:1b:ed:1b:48:
9b:9b:54:2a:6e:a3:49:97:2e:02:2a:21:43:d9:f6:
00:4f:01:7d:38:0d:9a:28:7b:aa:a8:02:c0:b8:43:
52:a1:42:71:5d:dc:63:24:5d:f4:5e:69:86:03:fd:
e5:18:97:d1:97:cd:57:11:27:48:f9:61:41:55:f3:
c2:3d:63:1c:66:0d:68:ff:45:9d:4c:d2:81:04:94:
c5:9b:14:60:52:c4:92:e0:dc:58:e0:dc:c0:f0:41:
8f:8c:9f:a4:b7:39:b7:bd:f1:73:a3:bd:14:14:e7:
25:e8:e5:7c:12:29:63:26:51:c9:c9:78:88:61:4f:
88:d8:b0:74:0f:e2:a7:dd:06:71:bb:05:03:18:8b:
e7:93:3b:fc:9a:a6:d4:05:92:34:fc:bd:eb:30:dc:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:44:86:7C:29:58:07:B5:07:9C:49:B2:5C:B7:A4:E9:50:F6:1D
X509v3 Authority Key Identifier:
keyid:A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39392e302f32342d3234203d3e20323633393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b5:aa:92:91:74:44:48:ff:4c:92:e9:97:0a:a8:8f:35:c4:
b3:d6:99:8d:5c:70:22:e5:68:d5:c3:8f:3f:fd:73:4a:9f:45:
da:66:8a:a8:ee:89:30:9c:6f:c9:10:11:35:07:11:0e:5e:26:
f5:38:9b:b0:b2:db:ee:12:de:dd:5f:ed:f4:dd:03:d7:da:51:
a2:f0:92:b5:6e:02:73:bf:a4:ca:d4:85:4b:72:1e:d6:51:f3:
90:a2:e3:d2:95:7a:4a:19:4f:96:c2:ce:a3:1d:b9:81:cd:0a:
d1:f0:70:e0:aa:17:27:ec:af:69:fa:68:b0:9b:cd:2e:65:d2:
fe:cd:93:3f:af:1f:17:e5:32:b9:22:39:91:4c:e5:b6:ae:89:
48:b9:c1:b1:ed:fb:b3:14:5d:3c:7f:0d:8a:d8:bc:c5:81:85:
6d:b8:ca:7a:44:b7:ad:2b:eb:c2:fe:59:3e:06:e0:da:7d:58:
c0:f1:eb:bd:3d:dd:8f:38:17:7a:e9:5d:5c:40:6c:f1:a3:b3:
de:0d:dd:af:30:fc:64:bc:a8:95:53:b1:b0:dd:51:c3:fc:47:
35:e8:44:d7:d2:8e:8d:a6:9f:60:19:70:5e:2c:4b:4d:80:4c:
04:e0:83:0d:63:7a:b4:96:3d:d9:47:67:6f:9c:13:cc:f2:4f:
3f:97:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:04:44 2025 by rpki-client