Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
File: 3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: xWvVAA51sBaSyE1nNKBpxouak5CM9JNdZlMtNzuvsPc=
Subject key identifier: 7F:8C:71:0D:3D:12:A5:28:5D:A8:18:24:DF:3A:47:5E:FD:FA:FE:98
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 55CAEE666478BEBE66F3C33DF9C5DF535ABD81FC
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 138.122.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ca:ee:66:64:78:be:be:66:f3:c3:3d:f9:c5:df:53:5a:bd:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=7F8C710D3D12A5285DA81824DF3A475EFDFAFE98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:b5:8a:91:05:be:7d:6e:96:5f:30:39:4b:
ca:b5:fb:ad:af:84:55:de:43:47:28:d5:78:e5:63:
bc:7c:57:5f:e5:19:c2:96:6b:86:96:84:fa:31:1c:
d4:a4:e1:01:d1:53:6b:3d:98:38:83:1e:be:06:e2:
eb:c6:76:1b:cc:f2:28:79:6b:6d:cd:44:ae:ec:cc:
a6:5f:b1:62:89:be:88:7c:ef:fc:fe:5f:04:62:5d:
f9:5e:ce:30:73:9b:6e:fb:0d:3c:07:62:1f:07:fe:
d4:90:44:9c:79:41:d7:f0:42:df:2c:b0:f3:0a:41:
4f:03:7f:e2:f1:77:b9:31:37:83:7f:9a:98:08:f9:
60:da:c5:a4:a1:ba:7f:24:b8:6f:bb:e3:9b:e4:03:
4c:d3:43:88:0b:d2:2c:53:94:cb:f5:65:42:ac:67:
ea:b3:a8:b1:11:cc:8a:86:e6:ba:3e:0e:a7:16:50:
81:d2:c9:c5:5e:32:05:c3:8d:07:97:dc:92:3d:83:
03:70:c4:04:43:cc:ce:22:4d:72:f3:d3:fb:8e:93:
88:a3:76:43:48:c4:bf:0d:6d:e0:22:c3:47:5e:80:
6c:0b:cb:55:dc:f1:9a:05:19:11:14:8d:13:7b:a3:
b0:03:77:fd:cd:05:d7:fa:6a:27:4a:64:a2:27:06:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:71:0D:3D:12:A5:28:5D:A8:18:24:DF:3A:47:5E:FD:FA:FE:98
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a1:02:45:15:87:4e:a3:2b:ab:65:25:6a:11:b1:1d:c5:09:
41:e7:21:64:bb:53:ab:9e:5c:32:a5:32:9f:1b:6e:ec:4f:73:
9d:ff:43:1d:ae:07:d0:4d:cb:6f:d9:e0:2b:5f:3e:a3:34:1d:
c0:c9:19:a5:1e:75:dc:d1:67:2a:68:9c:ab:bf:0e:38:33:e8:
3a:c0:14:71:cd:d4:f7:d6:4f:a0:e0:fa:0e:c7:2b:f8:74:e8:
6c:ca:df:67:65:1d:f6:b7:9e:d9:55:a9:e8:76:46:97:d6:35:
1b:83:32:e4:74:19:03:d9:3b:a0:ab:e3:29:53:64:5b:a5:64:
8e:f1:0c:88:51:18:d6:b3:77:46:47:14:c6:18:9c:80:7b:d0:
d6:b6:fe:97:d6:82:d7:95:c8:6a:d9:aa:3a:17:5b:b0:ac:ab:
c9:51:d3:ce:2d:2f:06:a0:b2:1e:0e:72:36:58:c3:66:0c:e7:
5f:51:3b:3b:6d:05:a6:93:cf:28:bd:ca:13:13:df:22:a5:77:
b5:99:38:06:9f:8d:ac:38:3f:3a:e9:4c:82:c6:3e:a2:48:4e:
07:4d:30:0d:77:a9:72:54:cb:eb:84:ab:63:5d:0b:25:71:78:
4a:60:69:b0:1a:2d:db:72:ac:79:08:7d:cd:be:cc:05:9b:d6:
2a:10:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org