Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35392e302f32342d3234203d3e20323634323436.roa
File: 3133382e3131382e35392e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier: zEV1TxQct6YAZr+QLXR76XNF67IZwXiQk1OnQl9rHs4=
Subject key identifier: 18:48:BA:50:2F:E7:58:1A:1B:C5:D1:A6:81:E9:FF:EE:D9:F3:44:C9
Certificate issuer: /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial: 2DA2695CABF91DE6E4D0957F953E0AD23D1F3F11
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35392e302f32342d3234203d3e20323634323436.roa
Signing time: Fri 06 Dec 2024 19:06:07 +0000
ROA not before: Fri 06 Dec 2024 19:01:07 +0000
ROA not after: Fri 05 Dec 2025 19:06:07 +0000
asID: 264246
IP address blocks: 138.118.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a2:69:5c:ab:f9:1d:e6:e4:d0:95:7f:95:3e:0a:d2:3d:1f:3f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Validity
Not Before: Dec 6 19:01:07 2024 GMT
Not After : Dec 5 19:06:07 2025 GMT
Subject: CN=1848BA502FE7581A1BC5D1A681E9FFEED9F344C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:05:85:14:cf:b1:76:a0:97:6d:b6:1a:77:
96:71:7e:c0:f1:3a:ae:9d:0f:ad:45:e8:29:a9:d9:
3e:dd:c7:29:b6:a0:e4:f4:78:79:94:69:6b:8a:fa:
44:53:cb:99:37:de:69:5d:16:81:ff:85:f5:b1:0b:
14:5c:68:3b:d4:5d:42:a3:52:f6:38:32:6b:ba:bc:
7e:28:92:b8:3d:48:85:6c:9e:22:8f:77:82:1a:fa:
d1:27:6a:97:7d:7f:b5:39:a2:d9:9f:04:61:80:f8:
0c:20:0c:a0:57:7c:32:c9:d6:15:4d:68:45:d0:44:
0c:42:5a:1f:4b:12:35:0f:5a:38:db:0d:ed:fc:f7:
88:87:f4:d7:e2:71:94:c4:70:54:83:1c:4e:97:48:
98:4e:97:22:28:61:43:1d:fe:b2:96:ba:d2:1a:a9:
18:76:45:47:dc:d7:3c:46:9e:9e:e0:6b:4c:ca:b3:
55:0b:55:79:16:64:7d:54:03:0b:f1:d5:5c:fb:2a:
50:31:3b:d3:64:5a:2c:21:5a:56:34:3e:15:c1:5d:
bf:bb:df:f8:5c:64:e0:ab:f0:ab:a2:0d:bd:66:75:
e2:96:08:20:91:11:c7:d6:57:34:76:95:4c:1a:3f:
b4:3f:de:38:3e:f1:fa:4f:96:bc:dd:3e:b1:e1:60:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:BA:50:2F:E7:58:1A:1B:C5:D1:A6:81:E9:FF:EE:D9:F3:44:C9
X509v3 Authority Key Identifier:
keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35392e302f32342d3234203d3e20323634323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.59.0/24
Signature Algorithm: sha256WithRSAEncryption
76:69:3f:64:00:82:80:db:53:79:e9:db:ad:f9:29:d2:d5:44:
12:c2:a7:19:9b:fb:24:bf:88:88:9b:59:d5:8d:33:74:d8:df:
1c:93:6f:ca:4c:4f:be:e6:dd:de:9d:e9:45:a5:95:7e:10:62:
f6:7e:14:ee:aa:55:71:74:b6:e4:58:f8:2a:87:c6:c1:7f:46:
85:b0:6a:03:ca:2c:6d:8d:d3:b0:88:81:52:2e:0d:c3:58:18:
4d:94:16:b3:c3:34:25:e7:d6:d0:2f:23:85:61:2a:90:da:fd:
c3:63:96:b4:48:3e:ea:26:32:18:73:6a:e9:07:14:b0:b5:ec:
1c:a7:ad:10:c1:2b:84:1c:fb:27:9a:19:8a:70:96:15:4e:d5:
ed:e6:94:ec:ad:55:5d:46:5b:4f:f7:37:74:6c:d6:b9:18:2a:
58:79:9f:f2:46:7d:c6:94:4d:22:d0:94:25:12:58:90:f7:87:
02:dc:f6:5f:96:75:21:59:d2:bc:21:6c:a2:94:ed:10:d1:90:
8a:47:79:42:73:e9:72:20:e7:60:a7:83:61:f8:a2:40:d8:27:
9c:32:cd:86:4a:87:6d:71:41:b0:f0:56:8c:4f:46:f9:ba:53:
04:d1:a8:c5:e1:2b:c4:9f:e6:27:65:3a:aa:ff:e3:aa:82:81:
43:c7:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:56:10 2025 by rpki-client