Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
File: 3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier: KJhflDZGBnEPq3TAdlvN8CrHUFC4hXs4FiNsmPKP3v8=
Subject key identifier: D4:F2:1D:A0:43:8D:A6:03:E4:D5:B3:C6:AF:E2:80:05:DE:07:F6:77
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 4BDB52539D4BEF86D2404EB8F8A703E701F8C763
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:29 +0000
ROA not before: Tue 01 Apr 2025 13:08:29 +0000
ROA not after: Tue 31 Mar 2026 13:13:29 +0000
asID: 52721
IP address blocks: 138.185.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:db:52:53:9d:4b:ef:86:d2:40:4e:b8:f8:a7:03:e7:01:f8:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:29 2025 GMT
Not After : Mar 31 13:13:29 2026 GMT
Subject: CN=D4F21DA0438DA603E4D5B3C6AFE28005DE07F677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:29:7c:6d:83:99:e3:c7:e2:a9:78:c6:fa:
83:38:9d:4d:31:99:e7:dd:a5:a0:a6:90:42:da:12:
ba:81:a7:e0:29:81:6e:91:43:df:d2:12:91:f0:6e:
2e:8a:13:84:4c:2f:7c:2e:c7:d3:74:8b:c9:ed:2f:
a3:2c:97:b5:f6:1e:a2:c9:d8:c5:78:dd:f0:a7:3d:
71:cf:98:ca:bb:f6:d6:3d:5a:e2:cb:6d:bb:5c:f8:
e3:81:24:bc:71:94:78:d3:04:ad:be:3e:92:30:39:
53:9f:a5:83:85:50:64:21:45:31:8a:f1:3d:3c:16:
a3:a0:62:4e:00:00:ce:13:18:50:1d:b6:de:6f:f7:
fb:15:e0:46:a6:09:ef:b8:7c:88:38:fa:3c:90:2a:
db:f8:84:6d:8d:2e:21:6b:b5:49:d4:a5:c5:0c:c8:
bc:96:37:5a:76:54:45:1f:08:fc:40:f5:66:8e:37:
39:49:a6:06:bc:7a:52:33:d1:49:f0:6b:de:fc:88:
ec:63:dc:13:32:c2:a1:db:5c:06:3e:dd:9b:d8:7d:
4b:e2:c0:ca:aa:f2:e0:89:b1:92:91:84:73:7d:08:
f5:08:97:5d:a8:7b:b5:19:31:63:33:fe:96:46:52:
18:a1:3a:cb:1d:f7:84:92:d3:44:3b:91:db:8b:26:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:1D:A0:43:8D:A6:03:E4:D5:B3:C6:AF:E2:80:05:DE:07:F6:77
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/22
Signature Algorithm: sha256WithRSAEncryption
75:15:69:9a:96:e3:58:a8:48:60:6d:56:05:09:35:9d:a2:3d:
bc:65:57:16:0e:83:1b:38:68:7d:d8:68:51:7a:a5:4f:05:f2:
a0:42:ca:bc:e4:e7:78:85:6b:22:67:ab:4e:d9:15:7f:00:80:
2c:86:7d:48:63:8e:76:c1:4e:0b:ef:9c:9f:d5:0e:8e:f6:87:
96:1b:05:93:73:0e:fe:a0:0f:fb:67:bd:29:eb:da:44:f1:8d:
db:24:f6:82:f0:b7:51:d7:aa:c3:24:a9:9d:b6:5c:6b:11:21:
e1:35:e7:fe:ad:f5:c7:2d:bd:6b:67:2c:3a:c9:55:43:54:91:
29:3e:5b:46:b9:be:c4:67:1d:ef:e4:75:33:1c:c3:33:a5:0e:
e4:fc:2d:5e:51:b0:f3:5e:6d:66:4f:62:f9:19:b7:76:83:ed:
3e:b5:01:6b:65:23:1c:17:f3:b0:45:2c:df:21:57:54:5b:4f:
83:04:cc:58:b0:c3:92:ae:ad:1b:ea:f4:e3:45:da:45:30:61:
b5:78:52:95:bf:98:cd:96:4c:e7:a7:b4:13:9f:b1:35:a6:6f:
00:a4:6b:40:46:56:af:bb:95:db:a1:d2:ed:f9:09:c5:88:e0:
c2:e7:fa:d9:fa:46:60:0f:3d:7c:b9:23:e7:19:a3:2a:68:b1:
7b:d9:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:48 2025 by rpki-client