Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
File: 3133382e39392e32342e302f32322d3234203d3e203631383639.roa (raw, json)
Hash identifier: M/89zIv2y6+zEQXQJN+PnQQWM/0e5Qba+GBXX//7t8Y=
Subject key identifier: 21:D4:CF:D5:4B:BC:2D:7B:71:17:97:DC:AE:65:E0:26:87:11:98:3B
Certificate issuer: /CN=5FE811DE36B4F9CC446D3A204D0F739A65A5EF36
Certificate serial: 21136D26F18B6635DA0C8503537C0EE5A4612894
Authority key identifier: 5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
Signing time: Tue 22 Aug 2023 15:25:35 +0000
ROA not before: Tue 22 Aug 2023 15:20:35 +0000
ROA not after: Tue 20 Aug 2024 15:25:35 +0000
asID: 61869
IP address blocks: 138.99.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:13:6d:26:f1:8b:66:35:da:0c:85:03:53:7c:0e:e5:a4:61:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FE811DE36B4F9CC446D3A204D0F739A65A5EF36
Validity
Not Before: Aug 22 15:20:35 2023 GMT
Not After : Aug 20 15:25:35 2024 GMT
Subject: CN=21D4CFD54BBC2D7B711797DCAE65E0268711983B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:c4:82:00:17:ff:cb:eb:25:b8:4b:3b:14:
e6:60:c9:10:4a:f0:5a:39:ba:3b:71:01:b0:ee:97:
7c:f3:30:c8:b5:17:65:b6:ee:a2:4a:6c:0c:ec:7a:
af:97:dd:7b:32:a0:a7:ef:68:4c:2f:e7:17:f8:01:
ec:e1:ef:cd:5e:49:67:a0:6e:0d:da:83:34:34:6b:
f6:82:57:13:6d:15:76:15:c3:81:7c:62:01:7e:3a:
1f:ae:14:07:1f:77:20:c6:45:28:d8:71:68:dc:05:
80:bc:fe:a4:f1:f4:15:16:d3:c3:79:a8:45:07:c6:
3e:9e:1f:75:7d:e9:ee:e2:3c:e9:c2:07:15:34:f8:
c4:2c:30:06:d5:5b:73:e9:9e:95:c0:5c:0c:c7:23:
a4:f2:ad:ad:20:a4:5a:a4:d0:2d:93:e6:1e:8c:a0:
40:2f:f7:5f:02:b7:c6:20:88:dc:6d:bf:76:76:d7:
0e:00:5c:ad:25:cb:e3:a5:e8:95:60:8b:0b:c2:8d:
8c:38:4c:d8:27:e5:46:64:1e:ae:d8:85:fa:fe:87:
3f:c7:47:0b:f4:ea:33:5d:b9:6c:48:66:31:6d:76:
19:b6:54:b3:74:b2:aa:11:53:6c:77:a1:3a:fe:fb:
4e:6b:b6:9d:f9:02:e2:81:79:11:26:ec:3c:9f:5d:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:CF:D5:4B:BC:2D:7B:71:17:97:DC:AE:65:E0:26:87:11:98:3B
X509v3 Authority Key Identifier:
keyid:5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
e6:ef:71:9e:e7:66:ea:12:12:1e:16:38:6b:ba:fe:85:55:b9:
6e:5b:f8:eb:3b:c3:b6:c6:30:7b:17:d8:c5:a8:8d:b1:a8:2e:
29:fe:01:10:53:08:98:e9:d9:65:30:7e:14:0f:1e:82:7d:1b:
cb:3e:23:ac:df:a9:ed:91:1c:a3:d7:27:41:fe:b6:ce:dd:4d:
7a:ca:d7:ed:93:75:97:2d:9f:e6:82:d7:33:19:51:bf:85:54:
7d:d5:00:12:e3:13:a0:50:d6:17:4f:91:0f:62:c7:dc:e9:99:
22:fd:fc:4c:fb:87:81:23:18:73:5b:25:1a:94:74:48:66:18:
a7:87:40:4b:d1:93:b9:28:05:e2:6e:dd:70:14:ac:38:a9:3e:
e1:98:29:e3:7c:78:10:a6:14:a7:61:4b:89:7a:f3:86:e1:99:
3a:4f:39:ca:32:e3:7a:12:ca:5c:c9:45:7b:4b:47:b9:12:76:
c6:f7:6d:60:ba:88:30:88:0f:49:18:7e:4d:3c:44:8a:8c:70:
d0:87:9b:fb:a0:f7:d8:6f:99:e4:f6:2a:2d:9b:c7:30:03:83:
22:5f:20:de:62:93:3d:3e:93:1b:91:a5:3b:4c:75:cc:49:69:
99:29:5a:b3:f9:63:a0:7b:84:ea:83:01:a6:47:0a:72:7e:c8:
57:d0:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:20 2025 by rpki-client