Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: KSjVpo9YE8PjAK3ZkdpEbO/wDMecDta2NEccXCXnR5Y=
Subject key identifier: 82:E1:F7:EF:FC:8B:CF:56:C2:A5:89:E8:FE:77:A0:25:58:21:C3:17
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 2FB0D2068DB2C27BF27FFF62F911CA44084F36E1
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b0:d2:06:8d:b2:c2:7b:f2:7f:ff:62:f9:11:ca:44:08:4f:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=82E1F7EFFC8BCF56C2A589E8FE77A0255821C317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:fb:1d:f6:83:5a:3f:f2:be:93:05:40:04:
fd:88:f3:b0:ba:e1:0e:06:de:bf:e6:58:99:d7:45:
0d:8e:fd:f1:87:f8:16:1e:5f:53:a3:c5:e3:df:28:
ea:5f:a6:e9:ec:24:d0:22:47:68:b1:25:17:0d:4f:
0f:1a:8f:dd:fc:8a:bd:c0:32:3c:3b:f9:a2:22:79:
e1:78:06:93:89:d8:73:32:53:a8:85:3a:57:2c:cb:
34:2e:d6:5c:cc:40:62:0d:b5:87:b6:af:54:b0:27:
3c:5d:85:b9:6e:cc:e2:1a:70:9f:54:07:60:4c:08:
02:87:6b:40:e1:4a:43:cf:40:9c:14:05:e1:91:04:
95:ce:49:01:81:83:49:63:44:3c:3c:16:40:54:77:
6d:d4:f2:c2:d1:02:bb:50:aa:cf:6f:45:4d:58:45:
84:e3:5b:44:1a:99:18:8b:c7:d2:5c:d8:ae:38:ae:
6f:05:f8:21:b8:27:ca:5e:c7:cb:16:a9:62:ff:54:
50:78:bb:a2:8a:4e:3c:49:7b:a0:7e:a3:8f:b2:0e:
d2:18:aa:20:b7:c8:a7:89:93:89:17:d2:ba:1c:7b:
5b:62:0e:28:52:9b:73:44:24:95:ed:3e:4d:f9:a3:
ca:84:d7:f1:60:e2:bd:db:b6:5d:82:2d:5b:4b:ec:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:F7:EF:FC:8B:CF:56:C2:A5:89:E8:FE:77:A0:25:58:21:C3:17
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:6e:59:c2:55:29:5f:21:52:23:33:77:56:69:30:f0:f4:c3:
15:62:ba:0c:e2:8a:1b:5e:4a:5e:69:4e:ba:d5:22:cf:20:30:
00:9b:06:f8:6c:b1:0d:2f:32:53:c8:6e:84:0a:de:0b:1b:9a:
72:d6:29:aa:af:75:f7:76:0d:b9:d1:6d:e4:ac:d6:93:d5:bb:
10:2d:77:4e:ca:54:ca:a6:4c:61:f2:d1:44:06:64:1c:04:5d:
50:97:ee:e8:c2:ec:69:36:f6:6f:90:ec:7e:72:48:ae:e5:c4:
27:77:54:3e:1e:77:dd:eb:e8:d6:65:3f:90:91:1d:f5:c7:77:
c4:74:27:7b:1a:e0:b7:79:0e:69:8b:17:48:19:7f:fd:ae:35:
1d:2f:28:f7:e5:95:30:cc:27:66:11:03:e3:af:92:b0:0e:ea:
3c:c2:e3:ca:a6:96:6d:c3:c5:14:98:a0:7c:18:e2:4b:66:b3:
cd:40:92:98:39:12:4e:2e:05:2d:d2:59:fb:46:15:30:b5:45:
2f:89:cf:ec:b8:fe:3e:df:61:16:d2:b2:e8:b6:4f:b5:76:70:
29:9b:7d:74:b9:f5:bb:70:8e:0d:44:55:5e:e7:c9:72:61:c4:
d0:54:ad:df:37:51:44:13:8a:b1:9a:9c:6e:9a:d7:bc:c8:ee:
58:ca:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org