Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa
File: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (raw, json)
Hash identifier: WCaZcjrnKocLt6j31MgkjeiXOEWEJ3zUU0iemvoeAv0=
Subject key identifier: C2:24:C8:8A:6B:29:DE:D6:2C:5E:27:84:4B:C0:2D:66:2A:3B:D3:51
Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial: 59EBF05B32D60D5AA1B23898DD1B0E180364DE58
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa
Signing time: Mon 03 Feb 2025 20:58:38 +0000
ROA not before: Mon 03 Feb 2025 20:53:38 +0000
ROA not after: Mon 02 Feb 2026 20:58:38 +0000
asID: 263911
IP address blocks: 138.204.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:eb:f0:5b:32:d6:0d:5a:a1:b2:38:98:dd:1b:0e:18:03:64:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Validity
Not Before: Feb 3 20:53:38 2025 GMT
Not After : Feb 2 20:58:38 2026 GMT
Subject: CN=C224C88A6B29DED62C5E27844BC02D662A3BD351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:ed:b1:79:6f:6d:75:8a:f7:04:a8:e6:2d:
0f:54:c8:df:7a:8f:16:8d:c6:f1:b4:b9:7a:04:c3:
cc:25:84:bd:db:97:7b:fd:1f:3e:2c:e2:59:ed:ae:
a0:f4:4a:fe:39:8a:ea:9e:a9:4c:07:19:70:49:59:
56:7f:fe:b7:3a:64:82:d8:8b:1c:ac:37:bc:54:d2:
54:2c:36:42:df:af:2a:58:ee:85:fa:05:18:bb:3a:
4a:06:45:62:45:bf:eb:32:e4:40:4e:e8:d9:8c:3b:
50:9d:5b:ae:4d:6e:a6:6c:81:57:e1:90:53:aa:5b:
9c:2e:fc:2b:39:1f:51:79:f9:01:8b:f4:d0:4d:f6:
8d:8e:e0:f1:64:97:4f:fe:52:d2:1c:05:97:b0:20:
01:ee:3d:4c:88:b1:a3:d5:63:ae:59:69:c1:f2:45:
d6:3a:6d:45:f6:ca:15:87:22:8e:f3:b7:5b:4c:2d:
8c:41:21:d0:f7:62:49:a9:83:d1:2c:29:73:88:03:
a5:5b:9d:31:ef:58:cb:8b:ce:50:0e:02:8c:42:bd:
a0:9e:c5:40:ee:98:d3:34:e2:c0:bd:ec:6d:dd:90:
4c:45:35:b6:c3:d0:46:e1:26:0b:86:e0:17:47:2a:
9d:60:af:c7:d6:a0:79:e3:d0:c5:8c:82:97:f4:49:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:C8:8A:6B:29:DE:D6:2C:5E:27:84:4B:C0:2D:66:2A:3B:D3:51
X509v3 Authority Key Identifier:
keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.172.0/22
Signature Algorithm: sha256WithRSAEncryption
44:87:13:7f:94:91:20:34:91:aa:9d:b1:23:f0:0d:86:ce:73:
45:13:27:b0:96:9d:70:ba:ab:ea:17:b5:aa:3b:f6:57:ed:bc:
b7:1c:3e:bb:a3:2e:c3:5c:5c:0c:51:13:f6:f0:b5:fb:cc:d1:
46:91:a2:68:ef:2f:fc:02:39:65:87:cb:e3:fd:9c:75:76:29:
3b:8a:b6:ba:b0:5a:a8:80:e7:e6:91:52:43:da:f7:82:01:e0:
25:fb:c8:a4:d6:39:a8:ed:6c:a3:b0:6e:fb:3f:55:f3:c9:b5:
e3:90:0b:1d:2e:46:76:10:90:33:c6:3f:13:a4:f1:e7:74:af:
3b:ad:42:f8:e3:d0:84:90:2e:da:ed:ef:bd:31:0e:3e:63:f5:
07:57:ca:5f:ea:c5:d5:5b:e7:ae:e8:20:f2:28:6e:66:6b:aa:
94:63:8c:c1:90:4e:0f:fc:37:00:ab:a7:5f:3b:f2:9a:93:17:
5c:04:ab:97:65:ae:f3:5a:8f:43:b1:f1:e0:6c:8b:78:c7:c8:
c8:ee:5f:79:ed:fe:9f:71:f1:d6:83:11:1d:19:c7:4b:af:5e:
a0:30:e5:35:54:87:bd:b5:40:5a:2b:7e:fb:e6:50:34:f5:63:
ec:71:77:a8:07:f1:19:33:d8:b2:96:b3:44:4a:d8:08:2e:75:
e8:3a:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:56 2025 by rpki-client