Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa
File: 3133382e33362e3233322e302f32322d3232203d3e203631363936.roa (raw, json)
Hash identifier: S0dh3QZobX8fJtnu+ZgghAM1KixAQmZfgG19BARuWiM=
Subject key identifier: CA:D5:33:90:5F:D9:8D:60:FB:46:0D:09:2F:12:4D:38:45:34:05:DD
Certificate issuer: /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial: 0DA6A87744AEA99C0DF5639354709E0E619CCCEC
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa
Signing time: Fri 06 Oct 2023 19:47:10 +0000
ROA not before: Fri 06 Oct 2023 19:42:10 +0000
ROA not after: Fri 04 Oct 2024 19:47:10 +0000
asID: 61696
IP address blocks: 138.36.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a6:a8:77:44:ae:a9:9c:0d:f5:63:93:54:70:9e:0e:61:9c:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Validity
Not Before: Oct 6 19:42:10 2023 GMT
Not After : Oct 4 19:47:10 2024 GMT
Subject: CN=CAD533905FD98D60FB460D092F124D38453405DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:94:a2:30:89:ac:f8:cb:48:c4:c9:5a:78:
44:bf:9a:97:a8:5c:38:b6:4e:49:74:80:a3:e2:ff:
9f:a6:65:ac:ef:cc:03:34:0e:c8:e6:ca:82:62:38:
08:6d:58:5e:b0:4d:5f:e6:46:81:ca:ec:52:0b:0c:
b3:a1:8c:13:f3:34:7a:e0:93:86:73:f9:5e:d6:8f:
f7:47:48:10:df:b4:40:5c:43:2d:39:3e:d8:1f:fa:
61:f0:83:dd:31:b1:1c:06:82:93:bd:72:20:36:63:
cc:eb:a7:41:a4:39:ae:da:78:2c:f5:13:b0:a9:9d:
84:02:51:9c:9b:78:de:28:ff:ec:0e:ac:3d:66:d1:
6a:92:82:96:bb:df:f5:fd:a9:d7:91:22:a2:9f:6e:
9d:bc:54:b3:73:a5:01:75:0c:66:39:c4:ea:ae:a3:
c0:d6:e7:bc:a2:9c:38:a4:eb:0f:1e:f9:fc:96:ec:
5f:65:0a:b7:47:67:17:90:0c:4c:98:5a:ff:d7:86:
ee:59:de:8f:cf:41:6f:0f:5b:09:5e:4c:29:f9:82:
62:04:96:ed:b5:87:76:c7:b6:ff:45:85:ab:11:aa:
fa:8c:6d:5c:f5:9e:14:c9:4e:db:5e:04:f6:c5:49:
1d:57:3a:52:59:0a:33:38:63:7f:b5:2f:f5:42:0b:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:33:90:5F:D9:8D:60:FB:46:0D:09:2F:12:4D:38:45:34:05:DD
X509v3 Authority Key Identifier:
keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:9f:2d:88:a9:58:2f:74:46:8b:3d:91:ca:3a:7c:65:ed:54:
39:af:6c:9d:c3:3a:a3:b6:a7:9b:cb:5c:f1:63:57:93:40:fd:
07:bb:6b:f2:e3:fa:cd:d1:bd:34:da:8f:af:b0:0b:62:ea:a6:
f8:b7:42:3e:9a:15:3e:12:7b:6c:fb:db:d8:ff:a9:33:63:89:
a3:a7:5d:fb:06:b0:2a:05:cc:53:77:17:40:92:76:3b:81:4e:
f4:04:48:19:c0:11:9a:40:cd:a6:97:9f:2e:e1:d2:7b:7e:5a:
d4:21:f1:ac:66:df:fc:a6:6e:c5:1c:1b:9e:e2:cd:80:60:79:
b2:d9:27:95:9f:35:8f:2e:2d:be:3b:6e:f2:91:ce:8d:e1:47:
8d:0e:aa:56:2f:1a:42:54:63:36:58:01:f9:8b:35:2d:eb:c8:
38:09:c8:be:e4:78:bd:c2:5b:16:4a:f3:07:0d:0a:31:4f:58:
23:bf:5d:59:3e:a9:f5:78:e6:9d:cd:41:a3:cf:d7:9d:3b:9e:
6b:6c:9b:e9:55:9b:1d:0a:dd:56:c7:9e:23:e7:9a:4d:05:6a:
fe:9d:18:98:ca:ef:75:3c:4f:47:d8:bf:e2:65:d4:6b:9f:6e:
0d:be:5b:ed:0f:88:ee:d2:b4:99:37:fb:55:c7:0e:13:98:40:
22:84:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:00:36 2025 by rpki-client