Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa
File: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (raw, json)
Hash identifier: u8mFZpedjB2s6UvM73xXjHzoFGbLZOF1jm5AvhQpWI8=
Subject key identifier: 4E:93:74:34:F1:1B:7E:6D:C4:99:3A:AC:B0:AE:2A:FF:6D:0D:5D:0D
Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial: 59094789C990D28055098F4F5FD2BDEF2D997B0F
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa
Signing time: Mon 03 Feb 2025 20:58:38 +0000
ROA not before: Mon 03 Feb 2025 20:53:38 +0000
ROA not after: Mon 02 Feb 2026 20:58:38 +0000
asID: 263911
IP address blocks: 138.204.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:09:47:89:c9:90:d2:80:55:09:8f:4f:5f:d2:bd:ef:2d:99:7b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Validity
Not Before: Feb 3 20:53:38 2025 GMT
Not After : Feb 2 20:58:38 2026 GMT
Subject: CN=4E937434F11B7E6DC4993AACB0AE2AFF6D0D5D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:ee:76:03:8c:aa:d7:50:4e:fd:79:02:a7:
0b:98:c4:25:42:45:1a:30:72:eb:3c:33:0a:6c:05:
7d:71:a6:d1:06:e9:97:b5:d1:50:a4:61:2a:40:97:
6c:36:f7:59:4b:d7:12:05:2e:59:01:a9:b9:76:5a:
0d:62:92:b7:60:db:4b:50:7e:10:8f:e6:7b:26:6a:
ee:c6:7d:10:c3:a4:cd:5e:44:a9:68:59:08:3c:fd:
00:af:b9:39:10:af:76:33:d0:fb:28:bc:9f:4e:8a:
ad:61:ca:b2:d9:59:d9:1f:4b:e3:0b:e2:b0:f5:8e:
d1:30:ab:5a:e3:1e:d2:31:8c:dd:50:bc:01:72:d8:
2c:6f:a9:2f:f4:fc:d0:81:af:61:8b:28:a1:83:43:
6a:5d:ba:0b:26:c6:d7:f5:42:52:8b:40:6b:92:c7:
f1:21:e5:07:0a:95:bc:8c:4d:d5:8a:ce:e6:c5:76:
44:66:72:6c:5b:d2:58:c4:3f:2a:1b:15:a3:82:e4:
d7:34:fc:ef:7e:1c:30:8e:94:1a:aa:96:bb:49:d2:
cf:1c:7b:57:f8:0e:a9:42:d3:55:ae:3f:33:7d:c2:
67:ce:d7:cb:ee:56:b2:5c:c0:22:9f:72:35:f7:2a:
ef:0c:48:a0:d0:bd:c1:a9:3d:90:90:3f:d0:aa:01:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:74:34:F1:1B:7E:6D:C4:99:3A:AC:B0:AE:2A:FF:6D:0D:5D:0D
X509v3 Authority Key Identifier:
keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.172.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:d4:c0:e7:05:2d:fc:42:5a:e9:27:aa:57:1a:cc:9d:e7:09:
90:52:84:18:ee:71:08:9b:87:2b:a5:34:7c:1f:5c:68:98:17:
fe:c9:ba:18:09:eb:8b:7c:e8:b4:f5:83:31:3b:02:64:0c:0f:
ab:31:28:b6:06:2e:de:48:74:e9:19:69:08:ae:64:75:74:73:
56:bc:fd:48:3a:49:9b:4d:12:cf:01:27:f4:95:71:10:be:7e:
eb:3b:b4:b4:c3:5a:d9:e6:46:16:72:65:56:ab:72:c6:74:ab:
32:23:e6:e7:de:e4:6e:df:38:c5:83:16:34:9f:dd:55:58:a4:
f4:67:1e:f8:0c:79:67:8b:ac:05:2a:6b:00:2c:c7:fc:71:ae:
b2:ed:1f:73:e6:79:2b:48:50:95:2b:27:56:1a:4e:8a:89:c2:
6a:79:f1:ed:54:e0:fa:78:23:bf:2b:d5:cc:e2:4a:73:36:b1:
17:8e:e4:78:f0:05:32:ac:7c:54:ca:99:21:3d:12:88:49:c2:
22:c3:8a:fb:e4:b3:5b:fb:d0:83:ae:70:72:af:3d:5b:18:cf:
98:d0:bd:20:1c:a1:21:4e:68:2d:cb:53:9c:9e:43:f1:a4:c6:
b9:8c:7c:e1:2a:c6:9e:88:6c:76:d5:0d:5b:29:64:45:42:ae:
5f:9a:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:50:19 2025 by rpki-client