Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e2033333536.roa
File: 3133382e3230342e3232302e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier: ZEr/WoXHJnwevCD4j/QGT+rSfjZC/lfaTQJuMyPUqUU=
Subject key identifier: B4:22:20:14:4A:76:4D:94:9A:CB:93:AA:F9:EE:BC:D6:0B:05:CC:D2
Certificate issuer: /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial: 238C9001C318D9CCE063D1628979030FB04F14E9
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e2033333536.roa
Signing time: Thu 23 Feb 2023 16:52:04 +0000
ROA not before: Thu 23 Feb 2023 16:47:04 +0000
ROA not after: Thu 22 Feb 2024 16:52:04 +0000
asID: 3356
IP address blocks: 138.204.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8c:90:01:c3:18:d9:cc:e0:63:d1:62:89:79:03:0f:b0:4f:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Validity
Not Before: Feb 23 16:47:04 2023 GMT
Not After : Feb 22 16:52:04 2024 GMT
Subject: CN=B42220144A764D949ACB93AAF9EEBCD60B05CCD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:8a:8a:95:7d:5f:b2:5a:b9:1f:c6:74:4f:
0b:c2:5c:18:32:a8:85:42:83:64:80:f1:12:bd:4a:
c8:c0:e0:04:69:1a:76:11:8e:be:40:7e:00:ea:ad:
52:ea:4a:8a:f5:03:3f:80:5e:59:79:5e:66:21:be:
e0:27:14:e0:e7:70:c7:51:f7:dd:de:df:d6:37:30:
c6:66:58:08:dc:a9:e0:43:68:1e:e5:91:6f:4c:fb:
a0:a3:f0:da:e2:7e:2e:40:08:17:08:f8:ce:e2:71:
f1:e2:4d:c0:30:17:5e:73:d7:bc:8c:b0:5f:28:6b:
95:c0:c8:d0:2c:48:18:a2:5f:91:ed:03:ee:c9:61:
05:80:bc:b8:a6:31:21:f9:9b:15:f1:20:30:ce:da:
e1:6a:7d:7e:d3:e6:3e:17:da:f2:dd:b6:ee:39:ed:
b4:fa:86:17:e4:93:a6:ca:65:92:0e:7a:63:18:4a:
bd:7a:df:00:1d:cd:57:75:a8:ed:30:36:99:9e:f4:
0c:b5:4e:fd:31:8b:39:fa:5f:51:56:10:c5:18:26:
d4:93:a6:29:ac:d1:32:ac:66:97:fb:c7:d0:71:29:
6d:6d:57:08:9b:ac:6f:9b:d5:4c:6c:89:cb:e6:53:
f5:ca:4b:25:ef:19:be:49:96:93:76:82:47:7c:4e:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:20:14:4A:76:4D:94:9A:CB:93:AA:F9:EE:BC:D6:0B:05:CC:D2
X509v3 Authority Key Identifier:
keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/22
Signature Algorithm: sha256WithRSAEncryption
75:6e:d0:58:e1:5f:5c:9c:66:01:10:ce:7c:e4:23:b8:6a:e1:
54:2e:4b:54:77:6d:7e:8f:d8:a1:78:47:f7:60:20:fc:04:1a:
1c:72:73:81:4f:1e:f1:9c:9a:e0:fa:20:28:8a:dd:13:96:32:
61:37:05:61:0d:55:30:fb:e3:f6:c6:4a:72:8e:da:84:6a:57:
6a:8a:53:d0:24:0f:16:57:cf:62:0f:0b:0e:a8:c6:74:4c:66:
50:35:aa:fb:c7:2e:e8:7f:7d:35:b4:dd:d5:57:00:fb:05:7b:
1a:9b:e2:e9:3a:af:ff:43:e7:7f:ae:3e:c7:a0:d7:e7:c5:26:
02:4d:b1:fe:1a:a7:37:56:37:3b:b5:d2:b4:8b:86:2d:54:1a:
49:bf:0c:aa:9b:54:15:c0:3a:95:c4:86:da:7c:07:61:e9:09:
ef:9a:a2:a1:38:d2:6a:bf:7d:a4:a7:37:0c:83:59:99:a2:a6:
7e:aa:09:6b:e4:2e:c5:cf:d0:77:77:7a:31:76:4e:a2:7a:04:
33:9f:0e:57:36:ce:a5:bd:f5:01:a9:fa:61:06:39:a3:b8:9e:
1f:1d:17:c7:3d:ec:ef:80:d7:ee:3c:1d:16:5e:0c:56:f0:25:
0d:9a:6b:04:b9:bc:b0:c9:34:cf:9d:6e:26:91:32:b8:06:0e:
ed:b3:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:29 2025 by rpki-client