Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
File: 3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier: YsTOK/pN2edYUFulK7J/WJBCVLLW5JuV34VNzmKgBT8=
Subject key identifier: B8:E6:3D:0F:5B:38:41:E4:A5:AF:AC:66:87:CF:04:48:DE:48:5B:ED
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 6E4D6EDFC6C398551A8139033F5861DB258432F7
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:35 +0000
ROA not before: Tue 01 Apr 2025 13:08:35 +0000
ROA not after: Tue 31 Mar 2026 13:13:35 +0000
asID: 52721
IP address blocks: 138.185.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4d:6e:df:c6:c3:98:55:1a:81:39:03:3f:58:61:db:25:84:32:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:35 2025 GMT
Not After : Mar 31 13:13:35 2026 GMT
Subject: CN=B8E63D0F5B3841E4A5AFAC6687CF0448DE485BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:eb:d0:b7:c4:58:da:c7:f0:62:ac:b5:cc:
69:3f:e0:fc:fa:6b:cd:57:d0:32:40:17:a6:24:0d:
70:f3:d5:74:9a:33:b1:99:a9:2b:b4:e0:34:2c:cf:
87:ed:ab:6f:6a:f5:b0:99:2e:c4:fa:59:a2:7c:b3:
29:18:81:c9:50:c6:f4:ea:33:1b:46:68:29:c3:9b:
d1:dd:a6:bf:9b:6d:a5:74:04:43:f2:f4:41:25:6f:
31:20:36:10:e9:b0:aa:66:b1:79:67:fc:b2:1b:c9:
af:a9:98:05:55:51:02:6c:ed:a1:2d:ba:02:86:53:
f0:cd:30:0f:44:7f:2d:98:34:bd:a6:e0:94:72:f8:
cb:40:61:74:da:69:fd:7d:c0:36:06:58:68:25:84:
e7:9b:9c:20:84:a3:98:e2:b3:e8:8d:2c:77:37:81:
e7:e1:ff:94:23:f5:69:9b:57:1f:6a:59:e9:f6:b8:
a2:7d:f6:cf:1c:8d:f3:02:59:c8:97:e0:05:ae:33:
84:9a:16:d5:72:50:b0:99:ea:42:79:a6:93:5c:87:
43:d7:68:25:fe:a6:52:40:11:97:b2:00:b3:ae:32:
fe:fe:11:6e:aa:00:f3:53:4d:fa:01:30:f8:eb:00:
83:fd:5e:b0:d2:62:95:91:76:a4:ec:27:30:df:89:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:3D:0F:5B:38:41:E4:A5:AF:AC:66:87:CF:04:48:DE:48:5B:ED
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/24
Signature Algorithm: sha256WithRSAEncryption
33:52:22:63:37:d3:12:bc:ed:23:09:b0:c0:e8:8f:a5:25:b3:
31:bc:76:16:3f:c4:b6:5e:ca:36:fd:fe:76:80:99:79:a3:b1:
dc:b3:20:e6:f4:11:20:50:a1:5a:cc:ab:25:6b:a0:b0:7c:90:
bd:e2:dd:eb:75:21:b6:1d:5f:9b:dc:00:a3:d4:4c:7d:aa:cf:
f0:76:5d:17:a6:14:35:b6:ba:f8:64:1d:0e:20:6f:f1:88:90:
9e:d8:ae:73:e8:c0:66:f0:39:96:c6:13:c3:6e:37:2a:f9:aa:
cd:8b:9c:4c:34:f1:84:b2:eb:17:fb:30:36:46:a9:51:cc:0e:
a7:9e:06:df:a4:ce:ee:4a:23:20:76:1e:13:d2:96:92:02:92:
02:bc:a9:66:aa:20:d3:6d:b9:79:02:dd:80:57:14:40:c7:8a:
83:04:b7:f8:a1:af:07:97:80:3c:ef:04:7e:25:10:22:0a:bf:
b4:a5:98:08:ce:81:d0:ef:51:f8:2b:7a:ef:3c:0c:75:72:df:
96:06:c4:b6:18:4b:b3:f6:9d:88:e4:e9:1f:d7:eb:52:80:89:
4a:d6:c5:02:47:cd:b9:7e:af:b3:20:56:0a:8b:51:a0:ff:dd:
2a:ba:f4:a7:d7:ba:33:63:3c:13:6f:c4:6e:16:dc:e2:03:72:
ff:6d:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:21:59 2025 by rpki-client