Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa
File: 3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: vVJTuP45dU6pgQb2NnpB/C0zFRJaIgj2ysKEBBkYISo=
Subject key identifier: C1:D3:4C:89:5F:83:2C:DF:33:A4:88:D4:74:83:DF:55:CE:8F:64:F4
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 33C3F2CAD271E6EA39F1D5AECDAAA5AFFB8547C0
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:40:45 +0000
ROA not before: Wed 04 Dec 2024 15:35:45 +0000
ROA not after: Wed 03 Dec 2025 15:40:45 +0000
asID: 53153
IP address blocks: 138.204.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c3:f2:ca:d2:71:e6:ea:39:f1:d5:ae:cd:aa:a5:af:fb:85:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:35:45 2024 GMT
Not After : Dec 3 15:40:45 2025 GMT
Subject: CN=C1D34C895F832CDF33A488D47483DF55CE8F64F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:02:1d:85:bb:a9:b9:73:eb:35:df:19:3a:
f1:25:f3:21:e0:51:a7:44:b2:4a:35:05:bf:a4:9e:
c5:6f:b0:ac:6d:76:d2:74:f2:b2:c0:9a:8d:fd:d3:
34:c4:e5:ee:39:37:be:b4:18:95:a2:ad:4d:7d:71:
4f:0c:a1:69:59:3a:d8:d6:ee:a9:54:b9:de:30:39:
3f:31:ee:d8:54:36:95:90:ea:a1:65:cc:60:c4:37:
d7:b4:18:80:87:32:ad:32:c0:7e:60:3f:4e:31:5b:
9a:f8:64:2e:6f:0c:a2:a6:5c:8a:45:89:8c:6f:7a:
1d:b9:a3:86:76:32:a2:42:67:39:cf:a3:f7:36:b9:
c6:55:a7:1e:8a:20:f9:06:60:b3:0a:69:7f:e8:bc:
13:0a:5a:91:81:46:e9:fe:8c:e9:18:cb:a8:90:42:
a2:a5:df:74:cd:4e:bb:a2:6e:d2:ce:60:ad:33:93:
8b:6f:8e:2b:fa:08:b5:f2:f4:e5:9d:81:51:e1:70:
4d:9d:3b:99:82:30:b1:f7:62:ab:41:c5:1b:24:b7:
7a:87:49:ca:bb:da:3b:0c:c8:2f:06:12:8e:5b:d7:
10:26:bc:2a:1f:4f:40:ab:25:ae:a3:ab:69:d4:62:
c7:4c:46:a1:4a:d9:63:83:9b:60:6c:d5:5c:ab:b5:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:4C:89:5F:83:2C:DF:33:A4:88:D4:74:83:DF:55:CE:8F:64:F4
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.222.0/24
Signature Algorithm: sha256WithRSAEncryption
09:43:bb:78:9d:32:75:9b:21:9b:e9:36:3c:bc:4e:4e:1b:c6:
57:2f:d3:87:1b:40:11:4f:34:31:1f:36:53:e9:6a:b5:d1:b5:
bb:8d:cf:ab:3c:12:b4:5d:da:6b:ea:c2:80:14:d0:8a:84:af:
71:b6:54:73:b6:b0:88:72:0e:9d:38:df:7d:1e:1d:b5:ca:99:
7f:dc:f9:dd:45:7b:0c:e6:6b:37:0a:31:1f:4d:93:8f:12:1f:
7f:5d:56:2b:7f:ec:39:54:de:64:30:6e:76:ca:b8:af:fd:36:
fe:27:dc:0a:00:3e:47:25:bf:9c:f5:67:fd:25:2b:27:a1:c1:
a8:56:06:9b:19:31:11:cc:c6:43:7d:85:ef:00:79:bc:12:43:
3b:fd:00:50:b7:a4:e6:5b:46:d0:29:02:9b:dd:9a:9b:92:72:
45:fb:5d:7a:8b:8f:74:30:9f:34:e8:53:5e:75:39:0d:6d:03:
9f:bb:c7:c7:0b:cf:6a:f0:60:64:64:b3:d9:53:d6:f3:43:03:
d6:65:f9:a3:aa:b7:af:0d:11:13:7d:9a:a7:64:ab:97:5d:2f:
96:32:cc:a1:fd:12:16:6b:e3:b0:42:79:5e:b8:8a:d6:b9:e3:
52:16:02:de:4c:2f:8d:32:b9:dc:3b:d4:5e:26:c4:9d:90:c1:
40:91:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:20 2025 by rpki-client