Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
File: 3133382e302e3130302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: j2UA8gNenn7wu760xYPyxEQdymNskGvxt/FPEejHNq0=
Subject key identifier: A7:12:27:A0:07:45:BF:F5:39:2D:F3:C2:59:5C:82:1C:0F:10:BD:9B
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 3A1EDC31402315F3F4E6BB2079C6472EE3CBA763
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:09 +0000
ROA not before: Tue 12 Mar 2024 19:46:09 +0000
ROA not after: Tue 11 Mar 2025 19:51:09 +0000
asID: 28220
IP address blocks: 138.0.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1e:dc:31:40:23:15:f3:f4:e6:bb:20:79:c6:47:2e:e3:cb:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:09 2024 GMT
Not After : Mar 11 19:51:09 2025 GMT
Subject: CN=A71227A00745BFF5392DF3C2595C821C0F10BD9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:73:dc:76:38:9e:c2:da:be:6a:b8:9c:ea:
7e:14:38:25:c2:4a:14:98:50:8e:a5:e5:9f:7e:d0:
dd:9c:29:07:0f:3c:0a:6e:b0:1e:dc:07:64:fd:be:
d8:c3:c3:e4:44:06:ac:da:6f:74:3b:95:6c:ea:dc:
cd:fa:d4:64:8d:93:2a:b8:3a:28:d1:d5:4c:45:6e:
fc:6b:af:ee:be:1b:0c:2d:4b:45:12:6a:1f:4f:b8:
18:c5:9d:52:27:e4:09:92:af:8e:d6:16:fb:ee:a0:
d9:ff:5c:88:28:9c:db:15:e8:39:3f:f0:ac:62:e0:
5c:0e:a6:87:3b:b0:13:a3:fc:d6:67:d3:47:98:16:
31:b1:6e:79:c9:8b:4f:ce:24:17:ea:62:1b:cc:6f:
d5:0b:e2:42:9f:48:3b:60:ca:a5:6b:df:6d:ab:86:
3e:66:17:8d:19:09:b8:2c:c7:2b:75:a9:f3:46:6c:
45:bf:e8:6e:24:f5:15:25:a7:5c:4c:42:dc:f9:7c:
4f:90:b4:7b:c9:1a:83:f1:71:7b:b0:dc:dd:fe:1a:
be:1d:95:87:c7:ee:e2:3a:8c:f9:a1:77:4c:8e:dd:
68:b2:61:b5:ef:b1:80:c9:a9:49:65:67:63:ae:ef:
ed:c2:9d:b6:b4:23:e7:67:ba:f6:4f:c5:99:6a:d1:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:27:A0:07:45:BF:F5:39:2D:F3:C2:59:5C:82:1C:0F:10:BD:9B
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:73:7e:70:2e:c5:1a:14:fb:94:51:03:b9:82:d0:82:31:b8:
dd:cc:06:41:23:1b:33:19:9b:a2:31:23:e1:59:d9:fc:57:8a:
c1:9b:3f:76:ab:e9:e9:d5:f2:53:71:5b:86:ed:95:d0:53:70:
5f:c5:94:74:37:25:36:e0:97:3c:50:2c:00:6d:13:7b:95:83:
71:17:db:c6:f8:bb:34:48:39:70:95:ea:f9:1b:3b:bd:a4:b6:
b3:d1:b8:47:47:a5:07:ee:5a:51:b8:c8:57:fc:38:e8:d9:6c:
47:67:9f:70:92:f8:cf:c3:ad:9a:61:af:5e:8f:9d:c0:d1:92:
14:5a:51:f5:5e:50:f5:e8:95:cf:9e:86:32:a3:dc:1e:4c:2c:
16:e3:19:ea:82:1d:1a:22:3a:da:59:dd:a4:57:76:4d:79:7a:
96:77:80:47:58:7f:0c:1e:59:2c:a7:e8:21:ab:bd:d3:70:5d:
59:d1:fb:41:fa:b2:fd:c4:1a:ba:2a:5c:78:51:c7:f3:f7:db:
6b:8b:05:70:2c:fd:17:c9:9e:26:6a:b0:6b:b9:0c:67:5d:63:
45:38:e5:de:93:76:53:fa:1d:d1:a5:a3:e8:d5:b7:6b:5a:3a:
e9:08:1c:b8:cb:86:fe:f6:43:b4:db:93:31:19:7b:d3:ad:8e:
74:5e:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org