Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
File: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier: 6llvcFd8UDXhp1Vz+2oZJORdL0mHjxK1JfP0E3GX7MY=
Subject key identifier: 35:33:67:F4:AC:DF:A6:7E:F1:0A:38:DA:D9:A1:9F:64:BD:8F:72:91
Certificate issuer: /CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
Certificate serial: 640A3D4DE49577EDE6EA0E66609FF51AA579B140
Authority key identifier: 32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
Signing time: Fri 23 Feb 2024 12:18:27 +0000
ROA not before: Fri 23 Feb 2024 12:13:27 +0000
ROA not after: Fri 21 Feb 2025 12:18:27 +0000
asID: 264120
IP address blocks: 138.97.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0a:3d:4d:e4:95:77:ed:e6:ea:0e:66:60:9f:f5:1a:a5:79:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
Validity
Not Before: Feb 23 12:13:27 2024 GMT
Not After : Feb 21 12:18:27 2025 GMT
Subject: CN=353367F4ACDFA67EF10A38DAD9A19F64BD8F7291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:1c:fa:40:02:ed:3f:9b:8f:2a:3d:c2:c3:
60:d4:27:3d:58:96:66:70:19:bf:d7:c5:36:6b:bd:
ae:99:f0:1f:23:e0:36:13:55:5f:8b:2d:1a:59:38:
c1:e2:cc:33:fe:8c:fe:fa:0b:04:1c:b0:9c:80:40:
29:01:19:08:d3:37:c1:c9:e1:e6:5b:79:35:7e:a5:
22:bb:3f:78:60:00:72:0e:c9:b0:27:6f:3b:9d:33:
80:8e:e6:82:0b:a0:73:54:a4:18:72:ea:c4:51:c3:
ec:d3:d6:d3:53:76:83:0a:f7:ad:ca:b8:7a:bd:3f:
02:06:ef:0e:e4:c9:e8:94:a1:2b:3d:03:39:88:01:
a5:02:99:62:9c:d1:47:1b:b4:6d:10:fc:c4:17:ef:
49:a9:c5:67:06:71:e3:a5:fc:4d:92:63:a6:de:09:
df:d1:21:a4:e4:8c:85:a9:09:ed:25:f1:e2:0a:c9:
6c:2d:a9:1e:99:85:6d:e3:3d:de:24:d5:ce:bc:6b:
44:d1:9d:90:76:79:9b:b8:d4:02:d8:e6:ea:d1:fe:
e8:6a:8b:d9:f0:2c:eb:17:18:aa:b9:9a:1f:fa:08:
13:8e:3d:4b:7b:9f:5f:5f:67:b2:2f:4d:2d:e8:4f:
90:a0:38:0c:eb:a7:82:00:9c:e3:2b:7d:bd:75:d6:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:67:F4:AC:DF:A6:7E:F1:0A:38:DA:D9:A1:9F:64:BD:8F:72:91
X509v3 Authority Key Identifier:
keyid:32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f2:69:31:21:c9:8f:ba:3b:a8:84:98:d8:75:3c:8e:fe:af:
22:ac:93:61:0c:4a:d1:3c:f2:89:51:05:56:3c:69:58:74:61:
e2:43:a4:b8:ae:62:df:99:5f:92:1b:36:b2:dd:46:db:f3:e9:
3e:92:69:9c:dd:03:62:aa:0f:dd:d4:02:0d:6f:31:ce:3f:6c:
8f:59:11:5b:04:c9:73:1a:ac:a8:32:74:9b:94:ae:eb:cd:5b:
81:c4:eb:96:e8:4d:3f:ee:1f:74:ff:c7:9c:d1:14:06:ca:f7:
cf:ed:0a:e7:c2:22:27:6e:8d:6b:31:4f:44:a0:8c:82:bd:21:
94:45:33:4b:73:91:13:84:a2:38:d2:3c:5e:92:43:4c:28:33:
5e:21:27:0e:52:9d:b9:e6:55:4d:42:26:85:e0:e2:e0:0e:c7:
3a:f5:63:5b:9c:43:30:b4:3c:90:ff:d4:84:06:29:0c:f2:fc:
80:6f:60:e9:79:27:f3:6e:fa:51:0a:d0:8d:52:37:2f:2d:77:
32:5f:32:6b:9e:83:82:05:9c:ae:79:2d:70:90:3b:80:a0:ab:
7e:24:04:83:de:dd:13:5d:d6:2d:e4:ac:28:70:00:1f:25:54:
4f:cc:93:7a:42:c2:ce:f3:03:76:ec:51:dc:64:f4:04:fa:6a:
07:86:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:48 2025 by rpki-client