Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
File: 3133382e302e3133382e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier: IkCBHldDAckOQfF7qPY8b0JxTfSU6XAHQGjJhxmcdHo=
Subject key identifier: 87:A5:8D:EB:4E:84:51:56:62:8E:A4:64:C0:4E:57:81:45:0B:5B:B1
Certificate issuer: /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial: 3EF7A30DDD2F4FAB71610E61693FD836A45F546D
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
Signing time: Wed 04 Dec 2024 03:40:20 +0000
ROA not before: Wed 04 Dec 2024 03:35:20 +0000
ROA not after: Wed 03 Dec 2025 03:40:20 +0000
asID: 264550
IP address blocks: 138.0.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f7:a3:0d:dd:2f:4f:ab:71:61:0e:61:69:3f:d8:36:a4:5f:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Validity
Not Before: Dec 4 03:35:20 2024 GMT
Not After : Dec 3 03:40:20 2025 GMT
Subject: CN=87A58DEB4E845156628EA464C04E5781450B5BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:58:2a:af:cf:fd:31:9b:0e:7e:fc:30:dd:
95:67:1f:87:9e:00:2b:26:b0:6a:dd:13:b2:74:0f:
e2:06:bf:68:79:e7:54:e0:af:68:d8:48:af:ad:b7:
b7:ba:83:9f:6d:41:7c:02:3c:ba:2f:ad:c0:1b:af:
f4:f9:dd:a4:d7:05:b5:11:66:54:b4:dc:68:0a:8a:
19:02:74:0f:3d:69:e7:d1:70:d8:27:4b:d8:f3:08:
92:f1:45:e6:6c:2a:3a:30:55:cd:5d:93:33:68:ee:
e5:c5:af:94:de:82:7f:8c:97:1a:8c:0e:a5:0b:69:
b3:d6:71:e6:f7:b6:0a:a8:b1:d0:a6:db:4b:ac:97:
08:e8:c0:38:f0:a2:38:b8:28:05:79:4b:81:87:ab:
3b:64:82:97:d2:fa:c6:97:8c:16:44:db:cb:ea:8e:
5c:47:4b:ad:9c:9c:e3:a2:10:b9:f9:a7:6c:16:77:
59:11:44:7c:7a:c2:64:e0:9f:9d:e8:9c:68:7d:2e:
6e:8f:ed:50:fe:86:c4:51:1d:96:65:f3:22:37:08:
bc:34:09:e1:2f:75:aa:7e:4e:1c:e0:70:53:54:96:
10:e8:4e:26:e8:bf:ca:69:5e:a0:c6:45:ed:cd:ac:
76:2e:43:96:60:22:32:db:db:4e:16:ce:d6:10:f4:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:8D:EB:4E:84:51:56:62:8E:A4:64:C0:4E:57:81:45:0B:5B:B1
X509v3 Authority Key Identifier:
keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a2:c4:f9:44:55:a6:0f:30:2d:db:f3:e2:50:82:09:52:d6:
7a:cf:5e:e6:37:c3:5d:d3:6c:0a:c6:30:c5:0e:3a:a0:dc:2a:
69:d8:d2:08:da:00:2c:2f:91:27:8f:5d:13:08:c4:66:9e:10:
3d:8f:f2:46:98:60:05:40:8e:b5:fc:fd:34:eb:8f:0c:c9:50:
ed:5e:a6:d8:a2:cb:52:3f:4f:19:c0:c6:b6:1a:6e:51:04:6d:
32:9e:14:e6:66:c3:1d:0b:60:c5:99:05:f7:2d:e0:32:9a:34:
00:00:09:ab:62:fa:88:3f:05:33:e5:59:04:b5:c6:73:09:52:
1e:2c:d0:fe:4e:25:f8:33:9e:b2:fd:82:63:6a:46:cb:10:83:
11:cb:16:a5:ba:1b:2c:79:d0:a1:4e:4b:7c:2d:57:03:df:7a:
18:a3:05:3a:91:7d:21:4c:0c:6b:7f:d7:05:5f:e7:97:72:7a:
61:8d:52:df:db:50:09:6e:77:69:7c:da:bd:c2:80:ff:aa:f6:
11:28:2a:11:28:1c:b8:94:74:9c:cd:22:09:8e:fb:fa:93:16:
39:84:bd:34:0e:4f:ca:42:1d:66:1a:58:37:3a:df:12:91:b3:
cf:84:25:80:a4:c5:83:5d:3f:fd:c3:ff:8b:e6:b1:39:f3:dd:
bb:df:bf:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPvejDd0vT6txYQ5haT/YNqRfVG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQ0YwNkMwMDAyRDQwREUxRUQyM0U2RjgzMjhFOUY0
RjVFNDY2ODAeFw0yNDEyMDQwMzM1MjBaFw0yNTEyMDMwMzQwMjBaMDMxMTAvBgNV
BAMTKDg3QTU4REVCNEU4NDUxNTY2MjhFQTQ2NEMwNEU1NzgxNDUwQjVCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPAVgqr8/9MZsOfvww3ZVnH4ee
ACsmsGrdE7J0D+IGv2h551Tgr2jYSK+tt7e6g59tQXwCPLovrcAbr/T53aTXBbUR
ZlS03GgKihkCdA89aefRcNgnS9jzCJLxReZsKjowVc1dkzNo7uXFr5Tegn+MlxqM
DqULabPWceb3tgqosdCm20uslwjowDjwoji4KAV5S4GHqztkgpfS+saXjBZE28vq
jlxHS62cnOOiELn5p2wWd1kRRHx6wmTgn53onGh9Lm6P7VD+hsRRHZZl8yI3CLw0
CeEvdap+ThzgcFNUlhDoTibov8ppXqDGRe3NrHYuQ5ZgIjLb204WztYQ9LMPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUh6WN606EUVZijqRkwE5XgUULW7EwHwYDVR0j
BBgwFoAUSzzwbAAC1A3h7SPm+DKOn09eRmgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC80QjNDRjA2QzAwMDJENDBERTFFRDIzRTZGODMyOEU5RjRGNUU0NjY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0NGMDZDMDAwMkQ0MERF
MUVEMjNFNkY4MzI4RTlGNEY1RTQ2NjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzEzMzM4MmUzMDJlMzEzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigCKMA0GCSqGSIb3DQEBCwUAA4IBAQCOosT5RFWm
DzAt2/PiUIIJUtZ6z17mN8Nd02wKxjDFDjqg3Cpp2NII2gAsL5Enj10TCMRmnhA9
j/JGmGAFQI61/P00648MyVDtXqbYostSP08ZwMa2Gm5RBG0ynhTmZsMdC2DFmQX3
LeAymjQAAAmrYvqIPwUz5VkEtcZzCVIeLND+TiX4M56y/YJjakbLEIMRyxaluhss
edChTkt8LVcD33oYowU6kX0hTAxrf9cFX+eXcnphjVLf21AJbndpfNq9woD/qvYR
KCoRKBy4lHSczSIJjvv6kxY5hL00Dk/KQh1mGlg3Ot8SkbPPhCWApMWDXT/9w/+L
5rE58927379G
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:32:03 2025 by rpki-client