Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa
File: 3133382e39372e38382e302f32332d3234203d3e20323634313436.roa (raw, json)
Hash identifier: vX8UDMPs6MLD4JkWNFemvMggZu9+MQantXzVK8OsgB4=
Subject key identifier: 8C:D7:A1:08:9D:5D:6C:9B:25:8B:D8:1B:67:96:CB:78:A4:F9:EF:64
Certificate issuer: /CN=03CB08C60808A4C85337447A986A83078CD3CC42
Certificate serial: 035ECAFFB0F7DD53712FC3998F48443EA25E376A
Authority key identifier: 03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa
Signing time: Thu 22 Feb 2024 17:49:04 +0000
ROA not before: Thu 22 Feb 2024 17:44:04 +0000
ROA not after: Thu 20 Feb 2025 17:49:04 +0000
asID: 264146
IP address blocks: 138.97.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5e:ca:ff:b0:f7:dd:53:71:2f:c3:99:8f:48:44:3e:a2:5e:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CB08C60808A4C85337447A986A83078CD3CC42
Validity
Not Before: Feb 22 17:44:04 2024 GMT
Not After : Feb 20 17:49:04 2025 GMT
Subject: CN=8CD7A1089D5D6C9B258BD81B6796CB78A4F9EF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:d5:c8:9a:a2:34:e6:f8:11:e6:f8:3c:c9:
ad:a7:84:3f:3f:f8:dd:ec:f2:f8:9c:8b:11:48:4f:
c8:31:72:30:64:4b:b3:14:8b:25:8b:26:fb:b7:0a:
84:25:89:a0:c8:32:c2:bb:d9:92:90:63:a9:1a:53:
1b:b2:d8:fa:04:6c:de:e8:36:d3:5d:d6:c6:97:69:
fc:a9:ac:4f:03:52:8e:7e:3f:a0:d3:9f:15:69:f9:
8d:7f:a4:2c:f4:16:1c:2d:8c:3c:48:f2:f2:8c:66:
20:67:80:20:eb:96:1b:c9:db:91:58:be:c8:0f:d4:
75:a2:1f:79:a1:a6:76:eb:31:59:db:58:bf:90:21:
61:e0:7c:86:2c:b0:97:a1:d9:fd:7c:4c:77:b4:a7:
27:22:15:67:6c:15:7e:83:80:7c:6e:b5:cd:10:49:
86:08:bb:f0:e6:4b:95:37:60:37:e0:d3:4a:37:87:
29:88:28:3f:e9:df:f0:14:ef:3e:f2:e7:d8:ff:56:
dd:46:eb:bb:bf:9d:37:e5:23:a3:25:4f:f5:b9:07:
02:44:70:46:83:95:0a:d0:9f:b9:b1:2d:aa:eb:08:
69:25:48:03:ec:90:f2:26:ad:8a:8e:9c:5a:73:b0:
4c:e7:8d:7a:8e:7b:a2:8c:6e:f4:1c:6e:46:f0:02:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:A1:08:9D:5D:6C:9B:25:8B:D8:1B:67:96:CB:78:A4:F9:EF:64
X509v3 Authority Key Identifier:
keyid:03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:8d:5e:1f:fc:76:27:48:5c:f4:e8:69:30:ed:24:f8:5d:d6:
e5:ac:97:55:26:46:ea:8b:75:e4:78:42:74:7f:d2:ce:ee:41:
1c:ae:ca:6a:e0:52:f4:bc:62:28:f1:ae:c1:ce:28:06:53:d4:
fd:1c:29:26:25:af:4b:6d:e3:e0:22:63:cd:f9:79:fe:bc:5c:
a3:13:e5:68:a6:42:93:25:69:ef:fa:5a:92:11:bb:39:7b:f6:
53:59:3c:ae:33:1d:4c:6b:6e:58:b7:f0:2d:66:e8:d7:a8:51:
70:5d:a5:3f:7a:79:61:3b:17:62:81:ea:f7:79:35:eb:9e:c8:
66:70:f7:36:fe:b0:c9:c6:89:32:86:1e:4b:ed:d1:c9:07:03:
07:0c:3b:a2:78:42:27:7b:95:b8:43:e0:5f:a3:22:61:ef:3c:
77:6c:a6:bb:19:af:0b:84:dc:95:5d:9b:1c:52:fd:71:97:65:
51:90:b6:a6:36:62:85:bf:66:29:3b:19:fd:4b:49:8f:4a:9c:
6a:2d:3f:49:49:d1:9b:22:3f:07:79:98:ec:4e:50:7a:e6:ac:
3c:7d:0f:53:9f:ca:92:ad:03:96:75:d2:7e:d3:2e:c5:f1:60:
25:f5:b0:66:69:36:2a:36:76:e1:4a:d8:21:fa:73:10:9f:b2:
79:c9:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:32 2025 by rpki-client