Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa
File: 3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa (raw, json)
Hash identifier: SP85QlXXhyZ6Z6CTkd1pwfs1cdEVmdi3/yDB7TnYMjc=
Subject key identifier: B4:93:99:F2:0B:CD:3E:45:60:E7:EA:42:06:2B:44:0A:18:0A:D6:3C
Certificate issuer: /CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Certificate serial: 3E393E034A81C70FE72F66BE8C9BD7778D1E4B7B
Authority key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa
Signing time: Fri 17 Jan 2025 11:42:27 +0000
ROA not before: Fri 17 Jan 2025 11:37:27 +0000
ROA not after: Fri 16 Jan 2026 11:42:27 +0000
asID: 264232
IP address blocks: 138.117.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:39:3e:03:4a:81:c7:0f:e7:2f:66:be:8c:9b:d7:77:8d:1e:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Validity
Not Before: Jan 17 11:37:27 2025 GMT
Not After : Jan 16 11:42:27 2026 GMT
Subject: CN=B49399F20BCD3E4560E7EA42062B440A180AD63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:99:b8:da:b8:fa:2f:b7:1c:83:2e:3f:da:
18:cf:0a:0c:65:79:1f:fc:fe:e7:39:16:94:6f:8b:
e3:e3:43:58:9b:fe:93:d4:b4:bc:19:0f:e4:9f:17:
07:86:c5:a3:86:8a:7e:f3:5d:55:77:06:23:6e:0d:
9e:f3:bf:f2:7a:66:d4:2d:e6:ab:81:21:b7:c3:a7:
f9:83:8c:ba:ec:c2:8b:00:0a:35:76:61:90:a6:94:
52:f8:3e:68:76:22:cd:80:be:d7:3d:54:68:98:29:
07:9a:c8:d3:96:dd:86:b4:c5:af:b6:50:56:9c:4d:
73:ee:46:78:3c:a4:ee:dc:2a:0d:6f:0b:05:5f:d3:
a3:ad:83:c1:eb:aa:63:88:03:c6:1d:be:6e:06:0e:
1e:47:9a:cf:f2:78:59:2c:3e:47:fe:6c:c0:fc:cb:
52:24:e0:09:4c:0f:a5:39:19:d3:47:13:ed:83:0c:
e4:4c:0a:7b:6b:71:f1:fa:e5:c1:b6:2f:6e:b9:44:
f0:94:b4:70:60:4f:cc:13:72:81:75:5e:ed:ee:ce:
56:fa:15:4b:42:8f:0e:0a:d1:9c:64:f8:d7:bd:7e:
95:53:41:dc:82:6d:1e:4a:b7:84:f9:29:2b:e8:68:
cb:de:58:c5:c5:c1:16:9d:b7:63:76:c3:9b:fe:9d:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:99:F2:0B:CD:3E:45:60:E7:EA:42:06:2B:44:0A:18:0A:D6:3C
X509v3 Authority Key Identifier:
keyid:75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.92.0/23
Signature Algorithm: sha256WithRSAEncryption
28:a2:60:c3:62:00:8d:e6:5d:a0:3a:b8:f2:8d:67:d8:da:d7:
05:ca:40:86:4d:e4:3e:15:84:a8:90:ef:0a:d3:9d:6e:03:9e:
95:dc:ff:d7:01:61:8c:27:25:e7:e3:ff:24:8d:f7:a6:c1:b4:
4d:00:12:5b:3f:c3:4c:cc:5c:45:56:e9:50:fb:c6:2a:21:af:
df:f3:ec:f4:58:98:08:85:51:43:13:de:ad:bc:67:07:2c:92:
3d:63:3b:53:dd:43:6c:89:c9:80:c4:b8:3c:b4:a2:a4:02:6b:
f8:2f:2f:0c:c0:8a:2e:f9:27:c7:90:73:07:de:09:b9:8b:ca:
25:85:80:33:e9:94:2c:6d:11:bb:03:e6:81:86:43:54:79:0f:
7d:91:79:df:9a:2d:5b:c5:e9:8a:93:b8:7c:e2:1a:9a:ff:f9:
a5:ca:f9:db:09:84:57:c4:89:18:fb:b3:e2:11:21:c0:b4:bf:
b5:03:b5:aa:35:ef:d1:9f:91:46:e5:08:ce:68:c6:70:9a:e2:
8a:c6:4d:fe:b7:78:0c:82:a6:62:9f:e4:ae:32:d4:7f:f1:8a:
57:08:06:df:10:06:98:fa:56:ed:f3:f8:9a:cf:cc:52:1b:b5:
9e:14:a0:e0:41:8d:cb:42:79:80:93:77:85:3e:12:35:8a:16:
15:78:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:40 2025 by rpki-client