Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa
File: 3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa (raw, json)
Hash identifier: 9bbsShAbBBLRgW3KxLje2bWWBVn2yeiAakGhcGqec2Y=
Subject key identifier: 6D:18:59:BD:AC:6B:1A:6C:04:C7:7B:6C:43:85:2A:65:F4:12:98:39
Certificate issuer: /CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
Certificate serial: 4C510AE8227B74B406DB9816042B4727B3CB2070
Authority key identifier: 47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa
Signing time: Tue 09 Jan 2024 14:40:25 +0000
ROA not before: Tue 09 Jan 2024 14:35:25 +0000
ROA not after: Tue 07 Jan 2025 14:40:25 +0000
asID: 52821
IP address blocks: 138.121.144.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:0a:e8:22:7b:74:b4:06:db:98:16:04:2b:47:27:b3:cb:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
Validity
Not Before: Jan 9 14:35:25 2024 GMT
Not After : Jan 7 14:40:25 2025 GMT
Subject: CN=6D1859BDAC6B1A6C04C77B6C43852A65F4129839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:76:e2:82:83:dc:4c:47:12:f7:c1:55:d0:
e9:4f:14:7f:fe:c0:75:5b:ea:80:e1:28:f1:02:e7:
b1:7b:8c:2e:a1:6f:04:28:79:d8:a8:f3:1a:1d:36:
53:98:17:32:8d:6c:73:9f:68:37:57:40:67:ca:8d:
80:ac:c3:96:cf:ec:4e:3c:f4:ce:a8:4f:7c:49:5b:
83:65:67:fd:6d:df:f5:d7:c4:f8:ff:a7:2c:0a:39:
fd:85:0e:08:7c:ef:8f:77:0b:c3:ee:2e:b4:4b:44:
c9:2b:2b:73:b5:af:55:cb:00:b2:2e:54:29:14:02:
49:f0:c3:b3:ba:76:d6:b2:b1:d6:c6:33:d3:dc:c7:
ab:01:50:2c:27:de:3e:d5:2a:67:28:94:b9:15:4e:
7a:b3:4b:4e:af:68:3f:74:fb:56:b9:c5:5b:3b:33:
b9:1d:fb:10:55:ad:ff:45:73:40:be:af:5c:0b:1f:
83:2e:38:d0:15:96:3b:0a:95:c9:93:57:a2:87:f7:
e1:09:0f:fe:65:98:27:e8:3c:a0:6c:b8:db:76:51:
f7:72:70:92:1f:dc:08:67:63:da:cf:72:55:6a:51:
f0:a4:89:20:b4:83:9a:50:cd:49:12:c1:e3:de:45:
4a:23:71:3c:69:93:ea:b4:de:a7:09:bc:e8:59:c0:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:59:BD:AC:6B:1A:6C:04:C7:7B:6C:43:85:2A:65:F4:12:98:39
X509v3 Authority Key Identifier:
keyid:47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:8d:f0:92:df:7b:bd:07:7f:d6:81:8c:3e:c3:2b:2e:4c:7e:
1d:5a:1e:71:8f:0b:8f:88:a8:4d:d4:8e:b0:e1:59:d6:c4:10:
79:b0:85:ae:f8:f2:02:fb:7f:85:39:a8:7c:64:2b:07:66:9c:
98:47:96:7f:cf:79:4b:17:da:a8:e6:15:db:c2:d6:cd:67:10:
75:f8:69:67:0a:d6:bd:12:58:d1:09:0f:f5:07:f2:49:e2:96:
fc:e0:bd:69:8b:2a:d1:1b:08:66:c2:2f:c3:47:52:14:13:23:
26:54:b2:57:8e:95:bf:27:99:30:93:61:fc:42:14:d5:15:bb:
ce:98:6a:ed:53:18:ce:a0:b9:f1:51:db:ec:17:c1:61:2b:d2:
3a:62:73:9d:1d:77:c0:a5:1c:cc:da:b9:ff:f4:fa:ae:02:d2:
4a:d1:4f:a1:de:d3:10:35:43:69:d3:99:a3:cd:35:74:79:4a:
e7:ed:07:e2:1b:e1:15:7d:4e:d8:56:f9:20:07:3c:88:80:50:
af:a1:1b:d6:e1:b3:c0:81:83:27:9c:f9:ed:74:9c:51:d8:80:
15:bc:86:ee:88:85:a2:1a:01:87:db:1e:a9:b6:a3:3e:73:74:
8d:89:65:50:1a:c5:d1:1b:1f:89:a1:f1:79:72:0b:85:74:e6:
94:53:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:19 2025 by rpki-client