Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa
File: 3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa (raw, json)
Hash identifier: pB2QMbH+Ja7d5Rb/TJh3ti1qdfbB+L3YOFEG1ywr5uY=
Subject key identifier: F6:34:AE:AC:A4:E1:FB:BA:0E:F6:27:50:DE:6D:EF:71:EC:C9:44:BE
Certificate issuer: /CN=FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA
Certificate serial: 2A6BA160F4B9AE7B572B4C15338A6AB5E9C502C4
Authority key identifier: FC:1D:0F:FD:FC:EE:4A:A7:A9:72:BD:C7:6D:34:C1:E6:63:2E:7A:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa
Signing time: Tue 24 Dec 2024 18:56:07 +0000
ROA not before: Tue 24 Dec 2024 18:51:07 +0000
ROA not after: Tue 23 Dec 2025 18:56:07 +0000
asID: 264259
IP address blocks: 138.118.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6b:a1:60:f4:b9:ae:7b:57:2b:4c:15:33:8a:6a:b5:e9:c5:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA
Validity
Not Before: Dec 24 18:51:07 2024 GMT
Not After : Dec 23 18:56:07 2025 GMT
Subject: CN=F634AEACA4E1FBBA0EF62750DE6DEF71ECC944BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:72:ca:c4:7c:4a:16:e6:03:c3:bc:e8:70:
0d:40:39:e5:2e:66:4d:64:5c:a0:dc:2b:ba:ff:e0:
3c:bd:0c:4f:07:42:4d:91:69:1c:7c:cb:23:72:f6:
ad:e0:97:37:1f:93:56:e7:ab:dc:ca:f2:03:05:16:
59:67:c3:e6:c7:a6:1d:f2:40:df:95:5b:92:93:02:
ef:3e:88:9e:6c:4d:5e:cf:0f:2a:9e:b6:83:42:33:
96:73:e1:fe:bc:aa:db:33:4b:dd:d1:d4:c2:82:94:
0b:dd:f8:18:ad:22:91:3c:9c:60:90:52:05:47:e2:
5a:f6:70:78:a3:04:d5:03:e3:92:0a:ed:e1:08:6d:
38:f7:7d:af:44:b7:d9:64:3c:4a:36:07:fc:48:2b:
7a:9b:51:30:18:22:47:27:4e:dc:26:15:79:e8:b7:
f5:ad:d2:8d:11:36:b6:c5:36:c2:a5:8c:5b:b2:39:
0e:32:5b:1b:a3:bc:a1:64:1c:80:79:56:8b:e3:ff:
c7:be:22:05:11:2e:10:b6:a0:f3:1a:8b:e9:81:95:
74:a2:2a:49:a8:2f:b6:98:c4:60:22:2e:08:2a:ac:
eb:57:af:cc:bf:67:4f:74:79:26:50:cf:18:ab:ca:
9b:a6:f4:d5:31:96:bf:6a:56:b8:27:0f:a7:55:48:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:AE:AC:A4:E1:FB:BA:0E:F6:27:50:DE:6D:EF:71:EC:C9:44:BE
X509v3 Authority Key Identifier:
keyid:FC:1D:0F:FD:FC:EE:4A:A7:A9:72:BD:C7:6D:34:C1:E6:63:2E:7A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ba:7a:c6:e2:09:a1:d1:ff:27:aa:f7:7e:54:b8:22:45:7d:
9d:79:4e:8d:b0:eb:4a:d2:b9:b7:95:49:e0:c0:c2:43:a4:34:
bc:27:a9:0f:d6:cc:6c:d5:1d:88:ca:14:c8:35:43:87:38:99:
8b:f2:cc:f8:f9:fe:6a:06:34:ea:a9:29:07:3d:f3:af:16:85:
d1:05:1b:f3:32:9c:69:3e:44:bb:0c:f7:84:f0:42:57:4e:55:
2c:f3:b6:0e:a0:77:58:35:43:6a:18:80:e5:b8:d6:09:e7:c1:
e4:b6:87:9c:07:40:f8:54:90:24:0e:cb:23:34:d0:24:eb:f5:
49:52:d5:b1:53:90:2e:fd:e0:a1:1b:f1:27:3f:c4:7d:91:ac:
1f:6e:a0:2c:6a:db:de:55:63:4c:19:b9:fd:fe:04:a6:bc:ac:
c5:71:3b:74:4b:0b:82:ef:ed:33:97:fb:86:85:1a:29:e1:8f:
7f:59:7b:78:ad:17:0c:e8:d0:6d:00:4e:07:86:90:81:98:4c:
a4:ab:2f:21:43:16:11:22:cc:e1:49:af:f3:8d:e6:83:90:da:
0c:a2:d9:13:82:db:9b:0f:7d:bf:ee:6a:f8:7e:8d:22:32:01:
9e:bc:22:54:2e:43:66:fb:1c:90:b7:f8:d4:4d:d0:f6:c3:75:
ed:6a:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:00:10 2025 by rpki-client