Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa
File: 3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa (raw, json)
Hash identifier: ci1wVEjj7Y8sgSCqxUKot0kiAS/GMeIpwdD5xS9zPOE=
Subject key identifier: 0D:D1:DC:09:49:3C:52:82:EE:B6:7E:82:33:DA:88:79:29:FF:61:BC
Certificate issuer: /CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Certificate serial: 7D586CD34BCB981C8E270D61BD26F67EBF5880AE
Authority key identifier: CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa
Signing time: Sat 30 Mar 2024 00:46:21 +0000
ROA not before: Sat 30 Mar 2024 00:41:21 +0000
ROA not after: Sat 29 Mar 2025 00:46:21 +0000
asID: 264269
IP address blocks: 138.118.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:58:6c:d3:4b:cb:98:1c:8e:27:0d:61:bd:26:f6:7e:bf:58:80:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Validity
Not Before: Mar 30 00:41:21 2024 GMT
Not After : Mar 29 00:46:21 2025 GMT
Subject: CN=0DD1DC09493C5282EEB67E8233DA887929FF61BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:cd:b4:25:1b:bf:a4:40:32:d7:78:dc:21:
b3:55:e9:61:f5:96:ea:fc:26:af:49:1c:83:19:77:
fd:d4:f2:df:5c:7d:01:1d:40:5d:50:78:4c:0b:4b:
df:fe:d3:83:db:b1:92:41:f0:ae:81:e4:25:fb:91:
a0:fd:7c:a6:fc:c2:ad:9e:05:07:1f:f8:7e:df:3c:
58:42:c4:c9:7e:aa:9f:6f:a8:c3:bc:a0:b5:cf:d7:
3e:c9:95:19:d9:11:01:38:3a:6f:29:b1:7a:a4:c1:
9f:4f:0f:68:a6:d0:05:bf:92:dd:b5:4f:66:d1:51:
34:23:f7:7a:4d:90:59:da:61:f1:b5:95:2c:4f:6e:
b5:75:7a:6a:08:6f:9b:63:2a:55:63:65:eb:8d:12:
2f:f0:de:f4:13:30:de:fc:97:56:6d:54:b9:48:76:
d4:ba:0c:eb:9c:cb:fe:14:66:13:86:dd:6e:c3:eb:
34:5a:1f:8f:09:f6:29:9d:33:f2:9b:c2:5e:e0:5e:
dd:eb:52:63:37:79:ff:09:b1:b5:f4:8a:31:cf:f6:
cd:d4:62:9c:69:da:27:9e:e4:50:ab:bd:b2:e1:95:
be:ee:7e:28:61:8b:df:86:45:1e:43:68:42:c8:2b:
93:56:fb:43:2e:98:88:0e:8b:22:0b:0f:02:06:18:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:DC:09:49:3C:52:82:EE:B6:7E:82:33:DA:88:79:29:FF:61:BC
X509v3 Authority Key Identifier:
keyid:CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.249.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a5:16:82:19:45:2b:d2:13:ef:0a:67:3e:55:d7:10:4f:95:
d8:aa:4b:54:c7:0f:b4:6a:4d:90:c3:07:bc:b2:e2:eb:24:93:
02:41:3b:e1:33:4a:a0:4a:15:dc:b0:23:17:90:01:b3:92:6e:
a0:43:47:2e:3d:d7:fc:93:e9:ee:18:32:da:56:71:e0:a6:8c:
7b:2f:a9:15:c5:1f:02:b1:df:9c:71:9d:d6:e3:59:50:01:1d:
cf:9a:35:f2:33:9d:b5:0b:dc:b5:cc:de:3e:41:4b:1d:15:aa:
68:47:d0:a3:e2:a6:a0:49:2f:bb:56:cb:e6:12:6d:ea:f1:4d:
f4:13:b3:c9:32:5a:b4:72:f8:ee:ff:2d:49:37:22:e0:d6:8a:
2a:a5:b7:50:61:a3:ce:fb:a0:c2:56:e8:3a:52:23:44:d3:de:
dd:ee:56:f5:67:af:05:6a:88:9c:c3:fd:49:be:6f:8d:5c:d1:
43:2a:ae:18:e4:63:fb:46:b5:f1:8f:c1:47:95:5f:16:e6:3b:
f2:cf:64:6a:8c:7e:bf:42:05:2b:34:53:1a:64:7b:98:25:29:
d0:13:c1:7f:14:dc:b7:59:3f:ef:39:25:f2:4c:5d:f9:49:1a:
a7:02:c8:32:a9:4d:9e:af:2e:9f:a0:27:f5:56:f8:90:1e:5c:
af:22:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org