Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
File: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=
Subject key identifier: 4A:0B:55:DE:4B:6F:B4:BB:B3:5C:96:62:D0:76:18:95:91:2B:DD:C9
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 37A0B7AE23A25984CF7064BF3A1A26C198A7CD48
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
Signing time: Wed 26 Mar 2025 11:43:42 +0000
ROA not before: Wed 26 Mar 2025 11:38:42 +0000
ROA not after: Wed 25 Mar 2026 11:43:42 +0000
asID: 263424
IP address blocks: 138.121.216.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a0:b7:ae:23:a2:59:84:cf:70:64:bf:3a:1a:26:c1:98:a7:cd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Mar 26 11:38:42 2025 GMT
Not After : Mar 25 11:43:42 2026 GMT
Subject: CN=4A0B55DE4B6FB4BBB35C9662D0761895912BDDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:a8:81:c6:28:c7:b2:ee:34:aa:b1:b2:9b:
ab:c2:0e:3c:43:bd:18:38:19:e4:c6:3d:d8:61:45:
01:67:ed:f7:b6:74:e9:74:1d:06:49:34:ea:91:2e:
5b:c4:0c:5c:26:0e:b5:94:bd:00:56:70:61:59:7e:
b9:5a:53:28:41:7f:39:63:8f:7c:b8:86:af:d2:b4:
19:2e:6b:9d:6d:3c:21:e5:a5:51:d9:7a:27:36:da:
34:6b:15:86:74:c2:9a:61:2a:4a:09:8b:bd:5a:e7:
e4:19:95:f3:12:be:53:03:24:0e:c1:3e:e9:df:13:
71:33:93:7b:1a:30:67:41:35:20:34:83:05:1b:b2:
18:98:13:ab:15:5f:7b:b6:9d:72:83:a5:7f:23:46:
d5:c6:de:bf:68:b9:30:6c:1b:b9:30:84:5d:bd:05:
7f:13:81:46:44:57:f0:0c:7c:77:85:43:81:74:19:
2a:b2:50:7d:4a:c5:cb:ac:3a:9a:63:18:94:7d:56:
7b:13:e0:4e:40:cf:b2:fb:0a:5c:32:41:02:0f:3f:
c5:6f:bf:43:40:7f:a1:42:e4:15:63:3f:d8:40:3e:
d7:b2:65:be:86:6e:6d:ec:f6:bc:d0:1e:f6:e4:2d:
17:9c:5e:9f:96:5e:f4:7b:6f:d1:38:ee:3c:80:a9:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:55:DE:4B:6F:B4:BB:B3:5C:96:62:D0:76:18:95:91:2B:DD:C9
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.216.0/22
Signature Algorithm: sha256WithRSAEncryption
84:eb:d8:0f:ad:39:08:ce:ad:8e:9d:9f:7f:6a:c7:10:36:f5:
06:dd:f5:0f:d0:a9:23:8c:80:0f:ad:24:1e:ae:7b:6b:42:59:
0a:47:fc:fd:5b:56:b9:c2:94:95:43:2d:58:11:6f:19:54:37:
8d:6d:5b:f9:7f:ca:57:3b:5b:9c:2b:1e:25:ba:6c:39:70:e2:
b5:14:ac:4a:9d:ba:f3:37:ba:83:83:c7:a1:68:7e:19:c2:88:
d4:2b:35:4b:51:2a:27:20:d1:45:1f:e3:1f:67:83:b9:d0:1d:
f9:48:29:17:14:3b:ae:20:8d:9f:5a:4d:fa:b9:e5:d9:5d:02:
ed:74:fe:a4:ee:6c:94:cf:98:a1:eb:3b:fa:1e:c2:8b:cf:9d:
51:2b:78:82:03:68:8d:17:d1:e0:9a:b7:18:98:a1:c1:25:a9:
14:ec:f6:80:2c:f5:15:83:d9:f9:65:26:46:8f:de:e9:cd:df:
97:5d:4f:34:30:f3:04:36:fc:02:ed:43:6c:40:51:d8:05:69:
fc:82:3f:ae:d9:df:10:76:26:b3:33:16:f8:8e:af:7d:84:36:
ba:88:ca:f1:48:b6:5e:5c:ad:e1:1f:dc:b6:31:cc:28:66:10:
21:a5:04:c8:89:c0:20:b0:fc:b7:b2:55:7c:01:5a:ec:24:c9:
91:c2:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:57 2025 by rpki-client