Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa
File: 3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier: plQ11Q4M93u03bgmZVoJFO8HuiIFk23WjWdM5CabYW8=
Subject key identifier: 01:BD:A1:5A:51:E3:5B:DC:F0:65:90:64:20:91:95:AD:3D:3F:F8:B8
Certificate issuer: /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial: 3D2ABD77B706F86105A9C5864E1B5DB136426254
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa
Signing time: Mon 23 Jan 2023 21:40:31 +0000
ROA not before: Mon 23 Jan 2023 21:35:31 +0000
ROA not after: Mon 22 Jan 2024 21:40:31 +0000
asID: 262992
IP address blocks: 138.121.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2a:bd:77:b7:06:f8:61:05:a9:c5:86:4e:1b:5d:b1:36:42:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Validity
Not Before: Jan 23 21:35:31 2023 GMT
Not After : Jan 22 21:40:31 2024 GMT
Subject: CN=01BDA15A51E35BDCF0659064209195AD3D3FF8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:38:b9:07:d6:64:28:61:27:0a:ce:1b:92:
fc:b4:77:d7:c4:a4:c5:bf:18:1c:bc:70:a0:6e:a5:
39:9c:c6:38:b2:0a:13:b4:e9:fc:07:89:6f:c5:66:
d6:3e:ab:6a:bb:03:ee:29:5b:1a:d6:5e:73:c3:a6:
c8:ae:3c:2e:cd:9a:f6:20:e6:d6:52:21:98:41:5d:
43:3b:b5:cf:20:df:4f:c4:27:99:ed:dc:21:ef:7d:
31:be:5f:3b:18:e3:f4:21:4a:e2:82:48:39:7f:9c:
78:93:03:2d:a2:b2:a0:1d:18:13:41:53:2a:7e:a4:
8f:62:c9:18:23:87:9a:9e:94:0f:7a:06:07:99:f1:
d5:fc:9f:5d:a5:e0:76:e7:db:f5:e2:22:02:71:d7:
08:68:24:4c:32:b9:db:a5:d5:1c:f3:9c:b0:ce:06:
61:37:db:80:4a:99:58:57:10:37:64:91:e7:0c:6a:
19:d5:a2:c6:e2:e6:2f:89:87:87:28:a1:2c:41:00:
5b:d9:8e:22:14:bb:c4:c4:5c:70:ad:9c:b2:e3:72:
e6:c3:74:70:8c:ce:e9:51:ce:06:ec:82:25:c6:0e:
19:d0:e5:a1:61:cd:cc:00:2c:1f:69:99:f7:bc:34:
48:d9:0a:c8:ad:97:57:5e:82:9a:09:25:4d:04:a3:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:A1:5A:51:E3:5B:DC:F0:65:90:64:20:91:95:AD:3D:3F:F8:B8
X509v3 Authority Key Identifier:
keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
71:59:9d:d6:6a:4c:24:1f:40:bb:1f:aa:28:6d:e8:bc:d4:fc:
36:09:5e:ff:0b:dd:e8:f4:cb:c1:f4:9a:1c:0d:18:60:df:db:
fb:96:10:81:b6:31:69:03:2e:42:0d:45:55:23:bb:05:77:aa:
99:03:51:49:b9:18:a5:67:b2:40:04:c7:cc:65:14:43:b7:e8:
8d:f7:87:e6:58:85:ca:78:e3:59:ec:b2:ab:28:c1:5e:0c:06:
0d:1f:8c:15:c8:94:55:d2:4e:9c:5d:01:e4:9d:a5:8e:e0:1f:
d8:97:e1:4c:e7:f9:20:66:00:07:64:61:15:10:b8:b6:81:a1:
32:32:5b:dc:09:4a:4f:43:12:08:22:d8:23:9d:e2:f5:d1:2f:
91:df:df:d0:19:87:4f:99:76:20:68:c2:4e:59:38:85:5e:f0:
10:fb:df:aa:9f:76:b7:f7:ef:3a:e7:11:a5:0e:51:ed:a2:93:
ab:a4:94:29:3f:85:78:e9:a1:21:7f:3e:95:57:41:a7:92:78:
24:24:90:bb:7d:d6:f9:0d:6b:98:99:18:67:eb:cb:7f:98:d7:
95:5e:c7:41:64:46:6f:92:24:32:37:39:06:89:78:af:e7:2b:
dd:fb:b2:c2:41:f6:fe:60:2f:4e:76:2a:6d:f1:df:8f:2a:a4:
43:3d:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:11 2025 by rpki-client