Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
File: 3133382e39372e35322e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier: 2lp/irvzFcujmjR37JcAz//LJSvTE39YB6ZQGughJnc=
Subject key identifier: 0A:FC:E0:91:3A:53:D3:EA:54:96:A6:75:25:E9:EE:5E:89:48:75:1D
Certificate issuer: /CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
Certificate serial: 715C6DA9A18D50A523F6805A2D04DEE353BE2F48
Authority key identifier: DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
Signing time: Mon 26 Feb 2024 13:03:03 +0000
ROA not before: Mon 26 Feb 2024 12:58:03 +0000
ROA not after: Mon 24 Feb 2025 13:03:03 +0000
asID: 264128
IP address blocks: 138.97.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5c:6d:a9:a1:8d:50:a5:23:f6:80:5a:2d:04:de:e3:53:be:2f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
Validity
Not Before: Feb 26 12:58:03 2024 GMT
Not After : Feb 24 13:03:03 2025 GMT
Subject: CN=0AFCE0913A53D3EA5496A67525E9EE5E8948751D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:5f:93:36:14:17:2d:83:17:d5:9a:75:4e:
d3:0f:33:66:5c:cc:12:59:c5:f6:58:84:b8:85:fa:
90:69:68:c3:8b:cc:5e:fe:2b:a8:2b:78:da:12:30:
e8:ae:11:0f:84:4c:c2:9a:9e:c6:6b:59:bb:10:05:
cd:d5:d1:30:21:1e:24:fb:95:15:2d:4c:9c:4e:11:
d0:bd:62:06:0f:e7:08:07:82:c4:1a:b5:67:d8:a5:
d7:32:07:73:ae:a1:cb:75:59:4a:af:2e:a5:b7:9e:
ce:e2:4e:13:52:fe:ed:07:f6:1c:03:9f:e6:bd:bc:
cd:c4:14:fd:d0:c5:0a:43:27:a2:d3:e7:3a:40:59:
ab:c2:28:1e:aa:fd:73:56:92:b4:25:fc:44:ed:75:
5a:97:b3:ed:48:9b:16:55:b2:4c:38:22:0d:81:ac:
0d:56:63:73:36:61:01:22:24:c5:17:67:5e:9d:03:
a2:61:ef:c7:97:10:76:d8:88:2c:7b:d4:d3:b9:ae:
16:bd:18:1b:a5:b2:79:78:06:d0:e0:90:6d:c3:93:
24:a1:d6:4a:59:1f:49:aa:e1:df:8a:a2:f2:98:c3:
90:7e:99:ee:dc:87:77:a6:68:4c:56:ff:71:4a:85:
d6:8f:2b:7d:2c:12:a2:68:fe:ac:35:1b:47:84:77:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FC:E0:91:3A:53:D3:EA:54:96:A6:75:25:E9:EE:5E:89:48:75:1D
X509v3 Authority Key Identifier:
keyid:DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:db:78:f3:67:bf:fe:85:37:6b:eb:fd:85:2c:8e:80:34:8c:
f6:2f:db:af:b7:fe:7d:b3:0a:02:25:37:b2:9d:df:e0:0b:0c:
f5:b1:5d:16:9e:bc:46:09:4c:b2:79:63:38:be:7d:f5:9b:89:
0b:c4:c6:da:6c:41:0f:42:8c:66:d1:ee:29:43:06:ad:95:d9:
50:34:ad:ef:e5:9c:8e:bc:2a:dd:02:7a:b5:7e:f6:b3:5b:31:
9a:48:33:72:5f:00:45:e8:fa:a9:57:ce:1f:9b:1d:e1:34:6e:
24:e1:fe:6b:5d:fa:34:b0:61:f7:f4:ee:c9:59:96:25:7a:f6:
27:8a:9b:69:a2:b0:65:09:b8:74:11:97:3d:20:a8:75:c2:4d:
22:59:b5:34:9a:e6:1b:a0:23:0f:a0:88:f2:b3:12:3e:e4:87:
48:c8:fe:32:29:59:f5:a3:a3:d9:d1:e5:29:db:5c:16:af:65:
51:22:39:35:81:80:23:be:71:36:48:df:b6:53:a3:62:4d:99:
b2:7c:15:de:02:de:d8:80:4a:2f:00:75:e4:e0:f9:23:17:68:
75:c9:da:c3:1b:a2:6c:3f:d8:5c:6d:88:25:12:e4:81:14:d0:
03:f3:bb:57:f4:ec:01:f2:69:b2:47:49:79:f3:e8:d5:bd:30:
19:6f:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org