Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32342d3234203d3e203532383037.roa
File: 3133382e33362e32382e302f32342d3234203d3e203532383037.roa (raw, json)
Hash identifier: BECCmwrqOGZxfxiC5NB4QQhUG456/5TRdWlUVCB/wWo=
Subject key identifier: 81:98:31:AB:C5:6D:46:CE:54:ED:9B:4E:47:EB:44:81:C9:37:14:31
Certificate issuer: /CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Certificate serial: 200AC6F07BE48A4347F6E90164EC77459771BFAD
Authority key identifier: 81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32342d3234203d3e203532383037.roa
Signing time: Wed 30 Oct 2024 14:47:53 +0000
ROA not before: Wed 30 Oct 2024 14:42:53 +0000
ROA not after: Wed 29 Oct 2025 14:47:53 +0000
asID: 52807
IP address blocks: 138.36.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0a:c6:f0:7b:e4:8a:43:47:f6:e9:01:64:ec:77:45:97:71:bf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Validity
Not Before: Oct 30 14:42:53 2024 GMT
Not After : Oct 29 14:47:53 2025 GMT
Subject: CN=819831ABC56D46CE54ED9B4E47EB4481C9371431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:8b:30:95:cd:d1:5e:a6:14:e4:9f:41:c4:
0d:c9:fa:5e:dd:00:cf:21:91:22:79:4e:2d:67:c4:
43:1b:53:52:35:03:70:30:b4:51:43:52:e0:32:35:
b3:ad:d7:2c:96:b1:a0:a2:ce:a5:d6:9e:0c:ec:0f:
19:8c:4b:2d:18:7e:e8:51:f7:f1:b5:6b:d5:82:47:
d0:65:02:c2:2b:fc:df:07:b2:f1:da:08:2d:7b:b3:
aa:45:56:b4:a1:5c:a0:d2:b5:c1:56:56:2a:bf:d3:
0d:2e:76:cc:23:a1:0f:1c:ca:c4:93:4b:2d:5e:63:
6b:a4:d3:ed:a2:7c:54:53:78:b7:2a:2a:84:dd:59:
fb:dc:ea:f1:b9:10:83:cf:83:40:b8:44:16:6f:3f:
66:81:8c:6b:fe:aa:03:29:c9:e8:0c:fd:89:4a:d7:
31:9d:93:b5:a8:94:bf:13:05:ae:ea:a4:b5:3c:fc:
46:b1:b1:81:15:e7:df:51:d3:74:cb:ad:30:ac:a1:
49:1d:24:af:1d:a9:81:c9:94:49:22:25:a6:05:6c:
5f:96:65:b1:52:48:53:97:cc:e6:7d:6f:cf:0a:aa:
87:b6:6b:57:44:42:5d:01:45:bd:c1:d1:e3:43:db:
80:df:91:6d:ce:9e:f4:4d:bd:ff:dc:6e:43:48:7b:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:31:AB:C5:6D:46:CE:54:ED:9B:4E:47:EB:44:81:C9:37:14:31
X509v3 Authority Key Identifier:
keyid:81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32342d3234203d3e203532383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.28.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e2:66:80:6d:2a:ba:91:2c:ad:63:f6:5c:9e:1e:8e:91:2b:
5f:87:fa:2e:70:fc:27:c4:3b:25:55:b0:17:6f:b2:d7:2f:86:
b9:61:d7:9d:3a:14:0a:ce:22:dc:89:90:fe:d1:ee:69:c2:1b:
a5:b1:eb:e0:fd:29:4a:0c:a3:5a:a3:02:50:5f:b6:62:6f:ca:
46:e0:42:e2:d2:b9:b4:a4:97:cf:33:ac:fe:c2:99:8c:8c:94:
b8:27:a2:8a:ee:f2:1f:2a:eb:51:0f:8c:b3:fb:8b:a2:8d:4c:
14:72:c8:a8:15:17:68:49:e9:75:50:bb:a0:b5:5b:0e:d5:3e:
a2:64:be:6b:6b:c2:4f:ee:4d:14:59:f4:ad:a5:fc:7b:ec:72:
dd:6a:ec:ba:61:6a:78:5b:d7:b4:46:25:d8:f2:b2:bf:a1:30:
a8:4d:60:e8:a0:d8:ef:cb:b3:4a:26:eb:c5:aa:2f:9e:fd:b3:
aa:8e:1f:3f:f9:37:6c:52:94:0b:50:5a:13:a9:6a:4e:f6:2f:
cc:6a:4b:c8:b2:e8:34:7a:87:77:3f:1c:e3:7e:15:df:5b:c6:
df:fa:f5:75:20:08:94:31:cc:88:44:f7:55:0d:13:ab:54:3c:
82:23:3b:35:90:fa:a1:e4:1f:c6:a1:3e:1e:0c:d6:ac:15:18:
40:6c:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:56:40 2025 by rpki-client