Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa
File: 3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier: TyAo+zvMN960iqHQNkyo/Q9EZScApo7LPT/B3Y1KOvc=
Subject key identifier: BE:83:43:B3:EA:71:BA:71:4C:AF:85:25:CE:23:F2:9B:D7:68:14:B7
Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial: 7F62C0EFAB5F9351E9C493411B0BA6E98F3702D8
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa
Signing time: Mon 03 Feb 2025 20:58:37 +0000
ROA not before: Mon 03 Feb 2025 20:53:37 +0000
ROA not after: Mon 02 Feb 2026 20:58:37 +0000
asID: 263911
IP address blocks: 138.204.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:62:c0:ef:ab:5f:93:51:e9:c4:93:41:1b:0b:a6:e9:8f:37:02:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Validity
Not Before: Feb 3 20:53:37 2025 GMT
Not After : Feb 2 20:58:37 2026 GMT
Subject: CN=BE8343B3EA71BA714CAF8525CE23F29BD76814B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:d6:96:44:c7:3e:f7:81:91:97:37:55:66:
25:0d:df:2b:8d:83:8c:11:90:6f:2e:21:74:72:2e:
59:8e:36:14:b9:d5:c7:52:76:a9:e8:65:6b:e3:2d:
f6:17:f8:b2:8a:62:42:9c:54:12:12:7d:35:13:ce:
33:2a:2e:3e:32:d7:14:a0:f4:fb:bd:14:37:89:ce:
1d:51:1f:e9:a7:42:24:12:fc:b9:18:85:74:bf:c4:
ab:be:27:e3:5b:e1:6f:8c:79:7c:a2:8b:65:cc:80:
09:7b:c1:d9:4e:01:3f:7c:a2:31:14:12:a7:a4:49:
4f:28:d9:ce:68:97:30:df:a6:97:2c:31:ca:b0:98:
04:19:57:a5:74:13:55:d5:0b:79:d7:05:11:25:26:
c2:55:27:ba:33:5c:d5:ac:cf:0a:4c:77:3b:60:ce:
87:9b:e0:e2:fb:1d:63:15:e3:44:b6:82:12:2b:c4:
79:7c:2e:81:6a:eb:21:7f:75:36:7a:ea:a8:b9:0f:
e4:34:be:b9:0f:db:45:2b:f1:5d:e1:f6:ab:43:28:
35:41:9f:e2:12:27:d5:48:cf:3b:ae:6d:4d:f5:c8:
4e:a2:5d:15:9e:1a:8c:40:60:42:e3:e5:e5:63:49:
54:9e:5d:66:5c:2b:6f:90:3c:1a:e7:18:f5:78:75:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:43:B3:EA:71:BA:71:4C:AF:85:25:CE:23:F2:9B:D7:68:14:B7
X509v3 Authority Key Identifier:
keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f5:94:43:d5:84:af:b5:78:5b:ca:10:4d:8a:77:e7:0e:50:
e5:59:9f:76:aa:b9:93:70:b3:08:13:48:e3:e4:10:ee:31:58:
f0:94:d4:23:e1:4f:f4:97:1c:72:80:6a:9e:f3:60:85:3c:a8:
8f:b2:1c:63:a7:51:e3:07:04:17:8a:e8:9f:57:a2:41:f0:1e:
81:3e:34:af:7b:91:9d:75:0a:54:c0:26:2e:69:b5:c4:25:74:
44:21:43:aa:c4:38:70:6e:59:06:74:89:e4:0d:f6:54:06:cc:
f7:2a:ef:5f:e9:c4:23:a5:bc:65:68:50:f0:83:a5:4f:fc:67:
ef:b0:1b:fb:42:bc:b5:e6:51:49:82:ea:aa:18:d0:72:1b:79:
35:fe:0e:ca:b0:38:62:c5:ff:8f:66:2e:9d:13:94:ba:6b:34:
0e:54:2d:44:26:99:9f:fd:50:25:6e:ec:9e:cc:37:40:2b:ce:
54:50:90:a2:fb:13:82:4b:66:15:9f:06:1f:aa:b2:93:ef:b7:
f8:94:62:58:fa:68:f5:d9:8f:35:47:d2:e9:6c:c7:e3:92:bf:
d1:7e:16:82:bc:3d:80:eb:76:80:a0:76:c2:d9:8a:52:3b:6e:
47:4e:1a:a4:9a:0f:7e:eb:ef:22:6e:ac:3b:62:2a:48:e4:bd:
32:48:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:25:20 2025 by rpki-client