Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
File: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier: sUu/YLPLaMu0Olqsngx/9uH8qml8jsoB7mpsGIvMI3k=
Subject key identifier: 58:C3:0F:18:FE:8C:ED:A1:C2:D1:EA:B9:A8:0B:C7:65:FB:CB:45:38
Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial: 75E5E968C2CB907A56814BB13609A615D1DFC044
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
Signing time: Thu 06 Mar 2025 11:36:29 +0000
ROA not before: Thu 06 Mar 2025 11:31:29 +0000
ROA not after: Thu 05 Mar 2026 11:36:29 +0000
asID: 264120
IP address blocks: 138.97.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e5:e9:68:c2:cb:90:7a:56:81:4b:b1:36:09:a6:15:d1:df:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Validity
Not Before: Mar 6 11:31:29 2025 GMT
Not After : Mar 5 11:36:29 2026 GMT
Subject: CN=58C30F18FE8CEDA1C2D1EAB9A80BC765FBCB4538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:f4:8c:d2:07:8a:6b:4f:e9:e0:fa:7d:04:
33:38:49:19:ec:c8:b1:c4:a9:fe:5e:c8:e2:7e:aa:
64:78:ff:65:86:40:24:46:86:cf:02:90:1d:6f:6c:
02:ec:40:92:34:e1:db:61:ee:31:d2:ee:33:70:55:
83:d6:6a:7e:11:fe:a8:1d:ac:46:6c:11:48:8b:69:
a7:e3:1d:73:20:47:19:78:00:fc:0c:a3:1e:10:c3:
28:92:fe:89:58:23:b2:83:b2:25:8f:57:0f:bb:80:
10:ec:6f:8f:9b:92:99:3c:ea:ae:3c:e1:16:76:4e:
b2:3a:3b:45:61:be:31:37:d3:58:c8:b3:bd:0a:f0:
e8:87:e0:20:56:83:ba:24:e0:42:df:19:b9:53:7c:
a3:b6:e0:4d:f5:b4:2b:65:bc:e6:93:b9:69:ed:ed:
b8:2f:d4:e5:f6:87:03:6d:2f:ef:48:18:c9:d3:a0:
5d:f4:df:22:e6:0f:4b:1a:82:1c:2a:b0:bd:01:90:
d2:4b:1a:94:6c:7a:6c:e7:16:8e:23:0f:19:32:39:
1b:22:ab:4a:e7:7f:71:40:aa:bd:6a:35:a1:f1:36:
dc:8e:ba:ac:34:f6:5a:1b:3e:dc:67:a9:3b:4a:bc:
60:5f:b8:c2:56:d2:75:44:03:fa:82:e1:85:2a:55:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:0F:18:FE:8C:ED:A1:C2:D1:EA:B9:A8:0B:C7:65:FB:CB:45:38
X509v3 Authority Key Identifier:
keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.40.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:7a:a1:d8:26:04:88:54:4c:ec:a7:e1:34:6d:d1:da:f1:05:
f4:7d:4c:2a:e4:56:17:a3:01:08:bc:69:35:4f:8d:80:81:c9:
16:5c:5f:82:07:86:77:d4:00:19:a2:38:b3:d0:d1:3b:97:5c:
20:99:da:8c:b8:69:de:a2:4b:1f:67:51:3a:dc:25:2c:64:df:
c4:28:6b:5d:07:c8:91:a7:a4:7a:0c:9b:f8:04:6a:76:11:1e:
cb:8d:11:be:15:39:41:3a:a0:68:95:4d:9e:6a:2d:65:cf:9f:
71:68:ef:88:fc:54:6a:08:65:dd:c4:a6:e6:ed:49:e6:5a:50:
c1:c9:7a:db:75:28:6a:cb:a3:0a:09:2f:8e:3f:34:f9:b1:00:
aa:26:4d:f2:40:72:63:db:15:12:41:a7:31:0b:d9:a6:40:c9:
97:b0:d8:af:0f:82:ba:a3:0d:3e:f8:25:58:27:32:dc:6a:06:
e3:2f:53:1d:f8:42:d7:dd:0e:d9:a1:e1:6b:00:c8:6d:a5:e4:
a9:62:66:a4:61:32:83:40:fc:95:3d:7b:9b:8b:03:f5:b6:44:
4c:1f:8e:b5:5e:1b:ff:6d:ed:90:57:cd:d4:75:44:8b:51:8d:
19:cc:20:30:f0:ed:bc:a1:c4:2e:e4:33:02:8d:b9:ba:84:22:
65:1a:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:41 2025 by rpki-client