Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e203238323230.roa
File: 3133382e3132322e3233362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: 2tAxjqmU742KBMp4ouL6MBEPAo2CTBs5QYMaVk3c+VA=
Subject key identifier: CF:DA:81:88:2C:83:63:82:EE:40:B9:2D:3C:A7:FC:75:EA:7E:67:14
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 394B273AAB12CB4584DEE1B09F4436CEC25ECDF0
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e203238323230.roa
Signing time: Fri 16 Dec 2022 19:48:07 +0000
ROA not before: Fri 16 Dec 2022 19:43:07 +0000
ROA not after: Fri 15 Dec 2023 19:48:07 +0000
asID: 28220
IP address blocks: 138.122.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4b:27:3a:ab:12:cb:45:84:de:e1:b0:9f:44:36:ce:c2:5e:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Dec 16 19:43:07 2022 GMT
Not After : Dec 15 19:48:07 2023 GMT
Subject: CN=CFDA81882C836382EE40B92D3CA7FC75EA7E6714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:44:43:fb:8b:05:d8:c9:4c:34:bd:ea:d8:
9f:71:30:6d:31:d3:bd:8c:22:62:7b:c1:9e:09:4d:
ba:18:c6:76:26:ab:df:47:0b:07:88:68:b6:72:e3:
d6:ab:28:a1:40:e0:4f:51:8c:b5:a2:d0:c9:29:5b:
9c:73:1d:72:5a:43:93:46:ae:da:c5:07:d1:b0:6c:
3a:2c:f1:d6:02:b8:6b:56:4f:19:b2:9b:8e:da:25:
66:18:03:3f:d6:4b:fc:fa:e5:a8:fd:4b:c3:f1:23:
33:74:18:ca:16:3f:59:18:7f:df:80:eb:a7:7e:57:
8e:71:cb:86:13:78:20:27:6a:c4:72:c9:8f:a8:3e:
66:bb:04:33:ab:56:d3:55:79:f5:6a:70:6d:0f:45:
4f:99:e5:1a:fa:3f:fe:f1:4a:3e:5b:96:1a:95:cf:
90:37:20:14:bc:64:c8:da:5a:09:1a:cf:e3:cb:96:
bd:e0:26:29:09:9f:5b:e1:df:17:6a:b4:99:6f:9b:
92:d8:32:8d:55:30:13:7f:1f:8b:28:b4:79:2f:cb:
fb:ea:eb:3a:64:0e:6b:d1:68:14:c2:49:58:bf:4d:
82:35:5f:92:2b:e9:93:44:55:69:82:ed:3b:42:62:
9d:48:2f:59:97:ce:68:aa:e5:bd:0c:9a:4d:47:b7:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:81:88:2C:83:63:82:EE:40:B9:2D:3C:A7:FC:75:EA:7E:67:14
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:89:44:2a:f5:f6:c1:1f:cd:3b:16:7c:9c:47:e2:d9:31:87:
68:ef:42:1d:7a:56:3a:f5:18:f1:0f:7d:02:37:26:35:d0:57:
92:77:71:d5:9f:8b:8c:b8:e5:82:da:83:07:ea:6e:f6:e5:00:
00:cc:a4:59:e8:b5:e4:67:76:de:81:3e:67:af:d7:97:b7:a7:
36:d0:91:d3:13:83:5f:14:37:d1:48:ae:c1:b4:26:5a:85:88:
de:f5:17:11:36:98:97:59:c9:ce:20:c9:d4:3c:76:4f:46:74:
a5:59:b2:8e:7b:88:67:21:b8:fc:25:16:14:1e:10:9c:19:fb:
6c:3e:c3:1c:59:90:5a:49:06:7e:90:a7:cd:ad:d9:6d:7a:ce:
c6:64:3c:1f:a3:35:36:73:6f:25:16:01:e4:9b:c5:2d:d9:ae:
b0:82:cd:2d:68:88:0a:4d:19:02:b2:21:21:72:2c:ae:60:5f:
d3:fd:03:0e:12:33:c0:08:c0:91:f7:63:87:58:9f:9f:b5:50:
c2:ea:b9:09:c8:2d:db:96:e6:40:28:4d:31:62:25:a4:c4:09:
99:7b:f6:ab:82:69:fc:d2:a2:eb:bd:af:6f:a8:5b:cd:44:09:
bc:d7:a3:3b:4f:e1:16:03:c2:fc:fe:90:9b:3c:b4:eb:5a:9f:
a1:9d:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:19:20 2025 by rpki-client