Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: u/5nW7paMbv6vIB+TUwSDzrKbydv4RrgrUCKNZlL3II=
Subject key identifier: EA:BF:BA:02:0E:08:53:37:D7:E4:81:08:F3:83:1B:17:0D:96:A5:27
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 6901C8E982DA34BFB3938DEE89D7352D5D76A5AF
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 28270
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:01:c8:e9:82:da:34:bf:b3:93:8d:ee:89:d7:35:2d:5d:76:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=EABFBA020E085337D7E48108F3831B170D96A527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:e2:35:e9:97:aa:e5:cf:34:e5:2d:fe:b2:
dd:3d:34:9b:a7:98:80:45:b5:a0:3a:f8:a6:55:c7:
c0:ae:33:d6:fd:a1:d4:5f:45:24:b5:9c:ba:10:52:
61:32:f3:ea:66:6a:7d:d2:a6:83:29:f4:7d:d5:b8:
3b:99:bc:13:70:d4:9b:81:77:68:0d:fe:18:c3:be:
7c:f6:55:20:1e:a4:c2:16:38:da:47:58:e1:6f:60:
22:50:59:77:5a:9c:42:de:af:db:5a:cd:cd:7b:c9:
d3:00:2f:5b:20:0f:0e:26:97:c8:af:2b:96:db:db:
e0:27:cc:37:33:e2:92:e8:c1:84:69:87:bb:3b:f0:
10:73:d1:3b:ad:93:40:89:9a:03:39:95:05:52:17:
d2:73:82:9b:54:14:36:77:dd:d9:9c:a0:78:cd:a9:
b1:f5:aa:3e:45:bf:99:15:f1:f4:77:eb:03:4c:8b:
3d:78:15:82:f4:0e:2a:91:20:09:c4:f0:7b:96:2e:
9c:db:e3:92:67:8c:54:95:69:29:af:e0:04:0c:4a:
d5:24:c9:10:71:93:51:46:02:4b:8d:2e:24:7f:eb:
03:f0:b3:a2:9e:18:5f:c2:02:e4:9d:71:62:36:c2:
18:49:70:e3:69:54:67:4d:c1:14:19:a7:00:46:97:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BF:BA:02:0E:08:53:37:D7:E4:81:08:F3:83:1B:17:0D:96:A5:27
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:34:7e:1a:b2:54:e3:0d:dc:21:ec:f4:b0:4e:85:5e:5b:43:
7c:4c:2a:4a:da:0b:df:2d:02:94:37:96:1a:aa:0c:22:25:28:
8d:65:7b:bd:cb:10:25:b5:83:42:fb:c8:ff:87:ce:40:99:85:
1e:dc:63:8d:e8:ed:36:4d:fd:99:ca:d0:92:69:91:2c:14:25:
4e:1c:e5:c7:74:59:07:59:29:6d:1b:0e:1d:c0:8d:ac:3d:e0:
c2:c9:d7:00:9a:c8:a2:13:74:4a:4a:9a:a9:c8:af:ab:29:12:
a7:b3:fd:35:e7:29:7b:d3:3d:35:76:91:2d:77:c4:6e:c1:0e:
0a:2f:e3:fe:7c:78:6a:cc:8a:65:a6:a8:c6:92:31:af:df:30:
fb:92:33:32:e7:ec:f5:a4:9c:45:7a:68:7b:d6:50:ec:47:a3:
06:0b:d7:44:bc:9f:4a:05:d9:f4:f2:b2:ee:14:1f:97:6f:95:
a4:f4:5f:35:06:33:c4:fa:87:88:b8:29:e6:e4:db:05:7a:62:
48:10:2c:db:53:ad:49:37:37:82:04:2d:d0:87:ea:07:f6:fa:
28:54:54:83:5c:da:1b:8a:7e:6d:77:10:14:e2:d4:e6:75:c8:
66:8c:1d:e8:98:5b:97:6b:fd:fd:b7:0c:ac:5a:10:2d:19:b8:
d0:12:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:21:19 2025 by rpki-client