Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa
File: 3133382e302e3133362e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier: ZUkIBWrz77Q3guDo8uw9JpQ8U9xxnoZJFEsbQSIZJtQ=
Subject key identifier: AB:5E:A4:9C:3F:43:F9:7E:00:00:4F:17:F0:A7:7D:1B:59:96:61:7C
Certificate issuer: /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial: 65363D63AB96157F55841BA3084D88522F8FC5BB
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa
Signing time: Wed 04 Dec 2024 03:39:48 +0000
ROA not before: Wed 04 Dec 2024 03:34:48 +0000
ROA not after: Wed 03 Dec 2025 03:39:48 +0000
asID: 264550
IP address blocks: 138.0.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:36:3d:63:ab:96:15:7f:55:84:1b:a3:08:4d:88:52:2f:8f:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Validity
Not Before: Dec 4 03:34:48 2024 GMT
Not After : Dec 3 03:39:48 2025 GMT
Subject: CN=AB5EA49C3F43F97E00004F17F0A77D1B5996617C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:97:20:fe:dc:25:34:44:00:1c:87:93:b0:
d8:52:2d:0d:c1:d1:ca:f7:86:1c:67:b5:80:30:3b:
19:eb:3e:2a:08:d9:1d:f7:04:80:6e:c8:d0:41:cf:
d1:5c:fd:6c:64:3a:08:d2:20:31:d0:47:4d:70:77:
98:51:d3:4b:b5:e1:ff:86:4f:2a:92:14:cb:aa:92:
d3:94:99:d0:3f:45:ab:61:b6:89:42:b9:a0:49:5c:
50:56:6b:a5:46:d5:89:43:01:04:9c:de:6b:f6:99:
e9:d9:08:78:fc:f1:40:78:ab:1e:58:bb:d9:fd:70:
6f:f3:96:bd:a0:78:83:7c:5f:38:6c:97:33:d7:cc:
33:ca:08:d5:8a:94:d6:39:b9:e7:b7:40:91:41:25:
f9:79:2d:25:85:33:77:57:d4:a7:93:e7:1e:1e:ed:
e3:65:7c:d9:7c:eb:e9:d0:5e:05:90:01:51:28:b6:
c1:9a:4e:0e:3e:7d:1d:f3:71:8b:75:c7:1b:0d:dd:
db:61:78:fb:f3:53:a5:03:e8:17:12:48:29:3a:1a:
23:53:8c:1b:fa:a2:79:07:6f:94:c8:3f:86:9f:41:
13:9b:e4:0f:11:4a:0c:25:25:4e:c0:07:55:ad:45:
a4:f2:71:99:37:96:7f:aa:ba:30:3b:ff:b8:e8:98:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5E:A4:9C:3F:43:F9:7E:00:00:4F:17:F0:A7:7D:1B:59:96:61:7C
X509v3 Authority Key Identifier:
keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:16:b6:7d:ca:94:00:00:ec:11:3c:4e:67:8f:f6:3a:45:be:
ec:36:6b:67:02:e9:e9:94:7a:0b:57:9d:92:cd:98:46:13:8d:
5d:c3:33:9e:28:50:16:f6:c1:7b:04:ba:9e:a6:48:df:6b:4b:
d2:69:6a:33:2c:42:44:54:54:01:ed:90:dc:76:be:2b:7a:db:
fe:c8:26:b1:32:c9:3b:0f:1a:26:23:eb:45:41:d5:c1:8f:cf:
cd:63:b6:af:b3:42:d7:40:bd:9a:e1:d2:82:f7:e9:5b:72:4c:
25:c3:95:04:c9:1c:fd:cc:46:11:72:1a:e5:83:9c:04:2f:8e:
7d:e0:2c:92:42:24:3c:a8:55:36:05:23:75:8c:1e:d8:f3:41:
95:eb:02:9e:a1:2e:77:0d:45:85:47:3b:dd:8f:2b:da:4c:9f:
03:48:65:90:69:62:65:b1:1e:a2:19:a7:fe:68:b2:85:70:71:
f6:b2:dd:44:2b:c3:47:28:a4:47:e4:ab:a3:30:76:79:ab:fc:
a4:32:8e:de:22:28:42:c1:17:99:3f:db:81:c4:e3:71:2b:a8:
7c:d4:24:c9:33:b9:54:47:a4:be:cf:b1:98:29:c9:18:8a:09:
7f:3c:e4:81:58:f1:33:d3:ee:25:ac:1c:43:19:b9:b6:2a:09:
43:fb:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:30:34 2025 by rpki-client