Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e20323632393932.roa
File: 3133382e3132312e3232302e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier: mRJBXx7nDb1KPsjXymk/DGHDLgzwo6Jyn20UXR7lGg0=
Subject key identifier: D0:DB:7A:80:43:15:EB:81:07:B3:52:86:2C:D6:F4:F4:83:9B:B5:46
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 2D2E5EF32B121B8C0E0C5FC1558D23D3183ECC5F
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e20323632393932.roa
Signing time: Wed 31 Jan 2024 14:31:15 +0000
ROA not before: Wed 31 Jan 2024 14:26:15 +0000
ROA not after: Wed 29 Jan 2025 14:31:15 +0000
asID: 262992
IP address blocks: 138.121.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2e:5e:f3:2b:12:1b:8c:0e:0c:5f:c1:55:8d:23:d3:18:3e:cc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Jan 31 14:26:15 2024 GMT
Not After : Jan 29 14:31:15 2025 GMT
Subject: CN=D0DB7A804315EB8107B352862CD6F4F4839BB546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:8f:b0:79:7c:05:1a:65:ee:c7:f7:a0:af:
23:7f:45:46:76:1f:6a:ae:29:12:2b:b1:c5:69:16:
86:e3:10:b6:fa:f5:f8:9b:66:0e:b6:5e:b9:cc:b6:
fd:9e:ce:46:be:2c:6c:3b:34:52:46:bd:49:7d:bb:
5b:65:d3:4f:32:90:99:5d:a8:cb:f1:b6:4a:68:ce:
80:7a:f7:4f:fc:b0:0d:4b:e6:63:76:4f:c2:0e:0d:
82:cf:94:f4:36:5e:94:de:bf:58:9a:67:6a:92:7e:
3f:88:fc:f2:07:2c:34:0c:00:b4:e2:c6:28:37:9a:
53:d2:27:63:c3:99:6b:54:d1:46:58:8b:bd:ef:87:
09:13:9a:bc:f8:53:40:3e:04:fc:1f:1b:44:5d:37:
98:cd:87:61:c5:c0:fb:28:1a:05:4d:a0:9d:03:0e:
a9:05:6a:77:7e:c3:c2:05:25:81:e7:30:a1:9c:ee:
6f:1a:ad:a5:ce:7b:79:b9:fb:dd:e6:3a:f2:3a:20:
ed:3d:47:ec:dc:f9:20:8f:b1:54:8d:5b:15:01:39:
aa:a6:57:5a:7a:6c:ef:27:95:a3:51:ab:42:82:e1:
e1:30:96:e2:e4:26:c9:36:e0:68:73:79:24:74:b0:
af:3a:5d:73:49:0c:39:f2:c2:da:68:42:cf:c8:2f:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:7A:80:43:15:EB:81:07:B3:52:86:2C:D6:F4:F4:83:9B:B5:46
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
77:94:b3:ad:40:91:84:4f:4b:7c:ff:7c:dd:0e:49:61:36:d9:
cd:9e:06:e8:1c:77:54:a3:34:f2:a6:2a:db:4f:d8:69:fd:c0:
f0:a0:87:6c:08:8c:5e:21:fb:7c:66:b0:ec:f9:f6:9e:82:0f:
b7:0c:fd:6c:b4:2b:4a:fb:28:4c:c5:44:c2:e9:a4:37:0e:e3:
0b:42:ba:7e:ff:f2:17:c7:32:a2:c8:0e:66:93:bd:6c:f1:3b:
a7:a2:d8:22:cd:9b:cc:09:47:b4:5f:1a:ab:e4:5c:61:47:f3:
5f:2b:f7:bf:84:0a:f7:4c:38:42:6f:16:61:3f:30:12:36:0e:
9c:3b:93:11:7e:af:94:81:f8:89:0d:60:57:4c:dc:1d:de:22:
a5:fe:13:20:84:b8:d9:84:7e:5f:f3:c5:60:d3:a3:6d:34:b7:
c0:29:f1:24:ba:b2:a1:fa:88:14:93:db:68:28:92:03:5f:94:
14:1c:91:d3:95:6d:51:81:f2:49:3a:8e:33:53:87:1a:cc:0c:
3b:2a:8e:ef:1f:06:2b:25:5c:92:ef:12:bb:bd:a8:40:46:ed:
07:85:a8:4a:0c:2b:3e:e4:36:9e:6c:54:ab:e1:a5:0e:51:78:
c7:52:f1:de:ac:af:62:73:37:eb:17:a0:17:70:85:5e:e5:e9:
e9:44:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:24 2025 by rpki-client