Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa
File: 3133382e35392e3132342e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier: iOFZMTaI+4aXgo/rAv42tQvfhydIxPZyuE2YvJRyPck=
Subject key identifier: 34:B5:D3:92:2C:20:36:35:76:A9:EA:E8:32:40:40:E1:91:7E:F1:6C
Certificate issuer: /CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Certificate serial: 18B0AE2BA8E473DC555AC0FB6085E9A76FBE1288
Authority key identifier: 3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa
Signing time: Tue 13 Sep 2022 20:14:35 +0000
ROA not before: Tue 13 Sep 2022 20:09:35 +0000
ROA not after: Tue 12 Sep 2023 20:14:35 +0000
asID: 61588
IP address blocks: 138.59.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b0:ae:2b:a8:e4:73:dc:55:5a:c0:fb:60:85:e9:a7:6f:be:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Validity
Not Before: Sep 13 20:09:35 2022 GMT
Not After : Sep 12 20:14:35 2023 GMT
Subject: CN=34B5D3922C20363576A9EAE8324040E1917EF16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:45:dd:fb:e4:a5:2f:a5:01:68:19:3d:fb:
8a:a2:62:95:ed:81:8d:db:dc:0a:77:e0:aa:67:40:
55:e2:fb:5f:88:c6:a9:5b:7c:6b:21:44:46:c0:93:
45:6c:00:68:e5:7c:5f:4c:fb:74:f0:cc:36:e6:7e:
e0:35:b0:fb:60:4e:2f:04:90:4a:9e:13:c4:3d:3a:
c8:83:18:41:75:d4:df:f4:51:e6:ae:a9:c6:54:b9:
b8:49:3b:ce:b2:7e:dd:dd:2e:9f:47:23:d7:95:e9:
ac:95:b6:a0:6d:44:7a:57:22:31:8a:b8:87:39:26:
37:21:ed:a5:e6:05:c6:78:87:64:22:00:6d:72:20:
78:86:5a:2e:66:1d:d7:85:98:b6:43:aa:c8:fa:41:
12:51:55:a3:47:b3:f3:c0:af:ce:37:59:16:55:6b:
1c:b8:f7:1b:d1:66:23:65:65:d5:ed:91:c8:29:d4:
01:3a:82:c6:7d:ba:34:77:a3:8e:cd:6d:57:17:e3:
cf:8e:97:ea:ef:3c:0e:1a:8c:5f:3f:14:9e:0d:fa:
c6:cb:45:47:0a:61:0a:eb:bd:8a:e5:84:2f:0f:69:
06:92:1c:b4:51:29:84:ba:7f:d7:17:5e:8d:33:93:
68:3a:6e:b0:74:07:3f:97:75:b1:ae:b2:6b:9e:aa:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:D3:92:2C:20:36:35:76:A9:EA:E8:32:40:40:E1:91:7E:F1:6C
X509v3 Authority Key Identifier:
keyid:3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:73:51:90:b2:3a:c7:30:3a:be:55:50:28:e5:f2:29:b6:34:
c1:8e:49:2d:a4:06:92:07:c1:6b:a1:47:a6:75:da:c5:8c:6b:
ac:80:ca:6d:d9:82:5e:97:17:ea:fa:11:84:1b:37:ca:55:1a:
d6:20:69:b8:d4:f5:06:19:88:de:9e:19:9f:3c:25:43:09:48:
72:c4:7c:be:8b:ac:b9:16:43:0c:19:48:f9:c5:7d:e5:b5:6a:
cb:eb:ed:04:76:e3:c6:60:86:9e:15:2d:97:c0:d9:41:a9:50:
13:bb:76:b2:bb:d5:a0:ba:26:2a:66:65:95:af:20:34:67:7c:
c7:2f:04:d0:f0:ac:25:c7:3d:db:2f:af:16:f1:b1:62:29:21:
f2:98:6a:31:3e:7d:32:a3:e6:ac:5f:df:42:69:f7:c0:61:8f:
df:04:41:38:7b:68:fb:49:79:3e:1c:d3:bd:48:58:51:51:2e:
11:a4:45:11:34:0a:69:c1:48:fe:fc:d3:80:c9:51:d1:d8:f0:
f5:49:da:4e:85:fa:f1:2d:72:38:16:b8:3b:35:e3:f4:23:5c:
8c:e4:ac:c7:95:b8:5d:e2:1b:af:1a:90:a4:cf:61:84:6b:97:
32:2a:4c:12:86:16:f1:6d:92:af:9c:d6:ae:12:ca:44:95:83:
22:04:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:32 2025 by rpki-client