Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
File: 3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: yr1QPm3LRY1qDL1PQkDRp22cANBRqmeBENFlhGxZxEY=
Subject key identifier: 28:50:53:15:47:63:0F:50:21:44:EB:F5:83:6F:0D:2F:9D:08:F5:52
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 37AC90A46895D82542DD0FB7EC62F734377E2550
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 138.122.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ac:90:a4:68:95:d8:25:42:dd:0f:b7:ec:62:f7:34:37:7e:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=2850531547630F502144EBF5836F0D2F9D08F552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:32:b7:87:a3:ad:27:14:77:c2:42:7e:3b:
99:94:b3:a1:12:8f:35:8d:f8:89:b7:56:bb:be:7f:
88:3e:f8:10:11:d7:0c:ab:5d:c7:32:d7:52:52:30:
76:2c:89:59:12:62:c4:39:c6:c8:05:85:5e:90:9f:
e5:6b:93:a2:58:c9:dd:85:42:8b:fe:eb:41:83:59:
0b:a9:62:13:34:13:f8:35:86:26:2b:b0:d8:cf:3c:
3c:9b:55:4c:16:59:ac:1b:ff:c3:16:d4:1c:8b:3d:
c2:5d:0e:e0:42:8b:b3:14:54:4e:07:f6:4a:e7:fc:
3c:b0:a6:c7:64:5b:a8:d5:6f:fb:67:61:70:42:d9:
62:6e:db:3d:e3:a2:19:24:63:df:8d:92:2c:00:dd:
61:f2:d6:67:8c:0b:93:d5:05:0e:6a:ca:1e:42:f0:
6c:fc:a5:fd:4a:78:4f:cc:04:99:23:2f:86:59:44:
0c:57:5f:3c:df:ef:35:d1:2c:f5:e5:3c:2a:0b:68:
8b:52:84:4f:d1:cd:8e:72:a0:cb:ad:2c:9a:d4:43:
28:c6:b1:73:84:17:51:8e:07:ef:bb:21:2d:14:67:
fd:8d:03:72:ac:d8:a4:3d:46:b2:42:72:9a:03:b6:
9f:0d:4a:f5:3b:01:05:06:dc:a4:33:9e:36:3b:13:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:53:15:47:63:0F:50:21:44:EB:F5:83:6F:0D:2F:9D:08:F5:52
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cc:9a:8f:00:ce:a5:17:9d:3d:69:78:e9:38:0c:ab:14:6b:
52:ca:b7:7a:82:6e:ba:7f:b0:61:77:5a:a4:17:7c:40:27:c7:
4c:2d:b0:f4:f3:e5:e5:1a:21:c5:db:57:a8:7b:58:1f:31:84:
b0:5e:e7:6b:39:d0:8d:ec:67:0b:70:58:43:04:c2:9a:22:f5:
b1:72:86:38:b7:40:aa:3f:bd:e5:68:a1:d6:f4:8c:6c:d3:13:
f7:9c:88:95:9f:1c:d3:10:a7:a4:2b:0e:c2:10:19:e2:a1:48:
77:d6:2d:8d:78:44:78:b7:90:da:65:94:84:9e:7e:5d:94:a3:
b2:9b:b9:61:65:4d:75:c6:42:83:20:ff:b7:f6:93:3a:41:18:
40:8e:cf:6b:eb:04:77:7b:4f:b9:a7:c6:bb:48:8f:e0:52:01:
dc:6b:ff:ad:73:8c:60:7d:34:9b:02:d7:f2:aa:92:7f:f8:57:
eb:1e:03:89:9a:fc:89:45:99:c7:1e:a4:5a:f3:5c:fe:5c:14:
91:91:b9:71:35:a7:e9:06:de:2f:f1:da:16:ef:21:1e:fa:85:
6b:3e:a1:5d:b1:90:0c:a8:fb:db:0d:bf:00:6a:6c:39:7c:10:
52:0c:7d:16:2b:f4:88:0e:ea:70:5a:1e:4d:3d:c3:6f:42:ec:
88:20:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org