Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130362e302f32342d3234203d3e20323633393631.roa
File: 3133382e3235352e3130362e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier: IC3cbSgX/bwP4Q25PQfCDa92GyE1t0KmgpFGIfshTFI=
Subject key identifier: D4:EF:01:F8:51:B9:14:5E:90:6A:02:FD:9B:09:A4:B6:4B:34:11:CF
Certificate issuer: /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial: 2C35ED0011D7E98D216BEBEBC2B4FB366DC73178
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130362e302f32342d3234203d3e20323633393631.roa
Signing time: Mon 12 Jun 2023 20:53:37 +0000
ROA not before: Mon 12 Jun 2023 20:48:37 +0000
ROA not after: Mon 10 Jun 2024 20:53:37 +0000
asID: 263961
IP address blocks: 138.255.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:35:ed:00:11:d7:e9:8d:21:6b:eb:eb:c2:b4:fb:36:6d:c7:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
Validity
Not Before: Jun 12 20:48:37 2023 GMT
Not After : Jun 10 20:53:37 2024 GMT
Subject: CN=D4EF01F851B9145E906A02FD9B09A4B64B3411CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:e0:f7:b0:df:70:ab:5b:33:ab:fb:1f:72:
eb:23:84:f5:a1:8b:f6:12:05:e6:26:8c:38:f9:20:
c8:1d:1e:90:30:e0:ad:ac:e9:2d:0d:66:ea:19:c9:
63:ac:46:f0:f3:36:f4:53:32:5d:d7:3f:64:f4:9a:
12:f0:10:1f:51:23:2a:b0:8f:58:5e:ea:d2:aa:0e:
62:e4:c9:4b:f3:c3:0d:27:4c:17:0c:3d:be:29:29:
80:fc:0a:9d:28:e4:0d:c4:de:fa:1d:1d:1d:15:e2:
d2:33:1a:eb:9d:69:50:22:80:1d:2d:ba:b2:ac:b5:
77:c1:f7:12:03:5b:d0:33:40:aa:3a:df:3b:e5:28:
ac:0f:ad:27:0a:ed:c7:27:8b:83:a5:da:f3:73:67:
14:41:da:e2:9a:b7:1c:3e:f9:27:d7:6d:cd:80:94:
25:3f:94:19:33:40:cd:d1:df:9a:a1:a2:bb:67:c9:
7e:f3:6a:e5:cd:d8:90:35:bf:87:86:30:43:1e:66:
34:1b:4c:40:b0:3a:db:5c:22:3c:fa:cd:56:82:25:
44:6b:d6:db:d2:67:96:4b:1d:b0:0c:ce:11:2d:67:
0c:b2:cd:c7:14:4a:6f:c1:b9:0b:6a:4a:0e:87:ed:
3b:2c:7f:5a:79:00:92:25:30:f1:a9:c6:52:2e:db:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:01:F8:51:B9:14:5E:90:6A:02:FD:9B:09:A4:B6:4B:34:11:CF
X509v3 Authority Key Identifier:
keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130362e302f32342d3234203d3e20323633393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.106.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2a:e6:a8:0c:f1:b9:ef:65:2c:90:87:65:1a:78:1a:4e:b9:
27:82:f4:f5:9a:31:aa:74:51:6c:72:bd:e3:17:8d:88:f6:12:
dc:ba:9d:cd:78:6b:1e:06:b5:6c:dd:11:e0:e8:61:df:47:a9:
24:16:79:9e:90:ac:57:cd:8f:ee:4a:b5:4e:98:9c:f7:ad:3d:
c4:b2:a8:70:53:64:a7:f4:c8:0d:b8:57:79:db:6d:4e:54:25:
c0:b5:6e:3f:da:a3:bb:be:97:1a:71:6a:70:0d:26:ba:f6:37:
fa:cb:2b:0c:79:cb:be:47:e6:4d:19:4d:1a:b0:5b:a3:38:fc:
22:97:ee:9d:83:57:2c:7f:2d:cb:87:6b:54:38:94:7d:cf:13:
8a:b0:b2:18:c3:6c:76:a6:ac:fd:4a:f5:02:09:4c:07:42:64:
9d:b2:0f:95:96:f3:49:fa:3a:75:3f:c8:25:85:ba:3a:7d:99:
f7:cd:3c:e7:81:79:25:d7:21:0d:a5:ba:59:1b:d9:c9:cd:83:
87:15:e4:90:bf:35:1f:a4:0e:36:97:91:3d:a6:c6:2a:c8:c7:
57:1f:c0:47:65:11:21:9c:d3:b8:72:39:6c:4b:a1:03:c5:86:
b7:b9:d5:fa:67:00:03:f4:d9:94:19:ba:9b:94:a7:ba:b9:4a:
80:3f:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:54 2025 by rpki-client