Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3234203d3e203532383538.roa
File: 3133382e35392e3234382e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier: 8DvV6Xwsda+sQKF37NqC5cFVNnPKGTTY7UskNv9f6yg=
Subject key identifier: 22:7E:C8:8D:CF:44:F0:EC:69:95:55:71:FB:2F:0E:F0:CA:4C:2E:7F
Certificate issuer: /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial: 4A4B11A310CB196C48FF9C42D3A17B25A518E6DA
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3234203d3e203532383538.roa
Signing time: Fri 08 Mar 2024 19:08:54 +0000
ROA not before: Fri 08 Mar 2024 19:03:54 +0000
ROA not after: Fri 07 Mar 2025 19:08:54 +0000
asID: 52858
IP address blocks: 138.59.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4b:11:a3:10:cb:19:6c:48:ff:9c:42:d3:a1:7b:25:a5:18:e6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Validity
Not Before: Mar 8 19:03:54 2024 GMT
Not After : Mar 7 19:08:54 2025 GMT
Subject: CN=227EC88DCF44F0EC69955571FB2F0EF0CA4C2E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:62:e8:3e:41:43:72:66:7e:4a:56:0b:74:
b6:b0:d1:23:f7:68:59:53:94:02:65:67:17:e0:df:
b5:fe:38:6b:3d:d6:a4:78:5d:37:79:92:85:c5:c8:
25:94:1e:58:b3:ae:10:45:9c:17:81:4a:ca:ae:e8:
46:6b:ac:ab:d7:2e:11:25:68:ce:e3:a8:ee:6c:dd:
f8:b5:6b:db:4d:f5:be:81:b1:c9:e9:0e:46:b6:de:
0b:4d:b5:28:dc:f1:99:df:ae:2b:31:43:45:df:49:
ad:33:a0:b7:f8:f7:52:94:61:04:c9:f9:2f:89:02:
cb:73:3f:d2:b0:19:a1:93:1f:32:06:aa:f2:24:b5:
39:e6:91:aa:11:52:7d:00:1c:ea:f3:9c:e7:94:d4:
42:1f:0e:e3:3f:98:85:d1:04:bf:ba:2c:d8:c0:c5:
84:8c:50:79:b4:c4:9e:24:a7:c2:7c:b9:c4:38:cd:
d9:a8:18:fa:79:c4:5d:bb:c8:bb:eb:fd:27:de:fa:
d1:7a:22:38:00:a1:0e:d5:c9:dc:60:e9:ea:e7:4d:
b8:a4:ec:54:8b:4d:97:16:bd:5c:43:68:12:2e:a6:
6e:ed:e5:b7:9a:84:42:c3:52:10:e0:1e:b4:35:c4:
61:74:6e:73:8b:ba:95:c8:e1:90:e6:a0:51:9e:59:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:C8:8D:CF:44:F0:EC:69:95:55:71:FB:2F:0E:F0:CA:4C:2E:7F
X509v3 Authority Key Identifier:
keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3133382e35392e3234382e302f32322d3234203d3e203532383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d1:ef:90:0c:5b:d3:12:ee:60:54:aa:aa:02:48:4f:9f:2f:
02:b7:7e:b0:4f:b7:c1:c0:79:7e:a4:a3:91:9b:4e:11:86:e5:
df:75:08:66:db:aa:a8:9b:4b:80:09:48:a0:93:9d:1f:fe:b0:
6d:5d:f2:8c:9c:56:c6:bc:26:13:89:a4:4b:f1:94:fc:00:b2:
85:45:dd:4b:a9:15:e6:f9:83:0f:a5:c7:49:0e:68:94:cc:d9:
78:99:38:00:c0:2a:26:fd:37:a0:8e:d7:91:5c:f4:aa:36:33:
2d:20:be:02:3b:05:01:da:a5:32:19:b4:f4:89:cb:a0:34:ed:
80:4c:e7:f0:7c:35:de:8c:8c:05:18:95:94:45:78:10:56:05:
59:27:26:2e:0e:31:0d:55:5b:29:8f:51:68:f4:c2:9d:19:68:
69:72:5d:74:37:e5:48:ac:aa:d4:bb:24:c5:dd:68:48:d9:52:
40:1b:e4:1f:a0:31:55:25:0a:11:c2:5a:2f:5c:4a:62:b0:e7:
e9:17:43:f4:61:d6:59:9d:4d:85:9b:0e:b2:90:f9:86:55:3e:
57:a0:5e:8f:31:45:e0:d8:9c:ee:54:61:a0:0d:69:03:9e:00:
10:c0:35:ab:24:7b:b2:b4:d4:51:6e:ae:09:0c:f7:e6:d9:dd:
a0:8f:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:48 2025 by rpki-client