Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
File: 3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: n9Gmg9ShYfygN8V3ZKGTOyQ1KG6bK0pDPStrmZ1Am3w=
Subject key identifier: 60:53:C5:EB:F8:16:35:EE:20:9A:86:27:71:C7:1F:DC:A5:04:05:7B
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 655EEAC95BE88C103659BAB865DB069D61AB09CE
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:40:43 +0000
ROA not before: Wed 04 Dec 2024 15:35:43 +0000
ROA not after: Wed 03 Dec 2025 15:40:43 +0000
asID: 53153
IP address blocks: 138.204.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5e:ea:c9:5b:e8:8c:10:36:59:ba:b8:65:db:06:9d:61:ab:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:35:43 2024 GMT
Not After : Dec 3 15:40:43 2025 GMT
Subject: CN=6053C5EBF81635EE209A862771C71FDCA504057B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:2b:3d:6e:6d:97:78:59:27:4c:15:2f:91:
1f:20:de:33:58:b4:c8:d5:ea:fc:12:9b:25:e0:56:
92:39:2e:e3:8c:a0:01:fc:2c:a2:0f:f4:44:6c:95:
8f:be:5c:20:44:27:c9:33:2f:07:15:71:43:f7:7f:
85:52:4a:ec:2f:d9:ef:95:aa:a1:0a:52:7d:ec:b6:
b2:fc:be:f3:e6:49:c5:15:13:20:b4:8c:0a:62:a5:
a1:79:93:73:c3:c6:a1:2e:0e:86:23:a1:bb:86:a7:
87:67:b8:bc:f2:6b:21:8a:42:88:eb:71:6e:7a:27:
5a:a4:98:5c:46:8d:fa:08:54:a7:26:d2:53:45:d5:
d2:83:14:65:d2:68:00:54:f4:88:82:c5:8f:e8:58:
98:49:ae:f8:9d:57:47:d8:3b:2d:7e:ae:41:c5:89:
56:7d:7e:8b:48:15:fb:1b:a9:87:b2:5b:12:b3:30:
47:c6:56:47:39:d3:e5:23:ed:b4:de:c7:ae:80:58:
89:fc:f8:32:86:46:ef:85:6c:2b:3d:36:7d:78:d3:
8f:fb:96:f0:04:ba:2e:9d:d7:9b:1c:15:bc:5c:de:
96:56:b0:66:7d:82:c9:fe:4c:46:2f:f2:a3:a0:91:
b9:6a:7a:cc:c5:96:06:fb:3c:4c:c5:ea:c6:ac:ee:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:53:C5:EB:F8:16:35:EE:20:9A:86:27:71:C7:1F:DC:A5:04:05:7B
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.221.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4d:70:fa:70:50:33:64:fb:03:af:d7:1e:54:96:5b:a1:11:
ed:0b:69:e0:0f:aa:48:ab:4a:d9:16:52:b5:1c:82:e8:fc:e4:
68:d7:46:16:dd:ce:0f:6c:17:e2:54:1d:92:7e:82:8c:80:d3:
2a:f1:b3:43:84:3e:c1:51:37:d8:fd:5b:5e:03:b4:5c:6f:51:
42:dd:a4:51:3b:b7:e9:86:fe:9b:62:dc:53:64:fb:67:6e:00:
b3:9a:27:97:88:18:aa:dd:b1:0d:f4:11:f6:ea:91:37:af:a3:
b4:9d:bc:af:87:f8:43:03:02:a4:c4:c9:6f:69:9b:a4:4f:43:
9d:8b:c7:17:3e:2b:26:31:0a:d5:6c:8c:42:69:91:d2:81:e4:
9c:3f:b2:57:5c:8a:db:4e:99:c0:da:27:39:e7:7a:32:6b:2f:
cb:ae:6d:d0:fe:f1:92:27:22:2d:2b:1f:c7:8b:9b:73:34:54:
33:76:3c:c3:ee:f4:e6:47:c5:49:39:bc:6c:71:61:84:61:58:
56:af:e2:6b:c7:d0:13:56:02:90:dd:f3:ca:48:76:86:19:c6:
78:20:1c:39:d0:c4:cb:11:51:57:f6:dc:ee:1f:1f:44:a1:44:
41:ba:cf:c4:3f:2b:c7:c2:a9:46:b5:d5:82:fc:cd:ea:11:c5:
13:74:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:53 2025 by rpki-client