Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3133382e3132312e31362e302f32322d3234203d3e20323634323930.roa
File: 3133382e3132312e31362e302f32322d3234203d3e20323634323930.roa (raw, json)
Hash identifier: oDnABYPF4B4gKIQvdrg/rsFxP9Ez78x4Oc0L78kJUYM=
Subject key identifier: 54:4E:6B:1B:32:D1:E1:31:74:30:C8:92:BF:D8:B3:79:29:E3:D5:F3
Certificate issuer: /CN=40810794BC870729306E5291F7A80E4B1F810D7F
Certificate serial: 6D1E8B8C5E351EEB9E95D0ECE6CA26FCD2F04FF3
Authority key identifier: 40:81:07:94:BC:87:07:29:30:6E:52:91:F7:A8:0E:4B:1F:81:0D:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40810794BC870729306E5291F7A80E4B1F810D7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3133382e3132312e31362e302f32322d3234203d3e20323634323930.roa
Signing time: Wed 31 Jan 2024 20:05:19 +0000
ROA not before: Wed 31 Jan 2024 20:00:19 +0000
ROA not after: Wed 29 Jan 2025 20:05:19 +0000
asID: 264290
IP address blocks: 138.121.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1e:8b:8c:5e:35:1e:eb:9e:95:d0:ec:e6:ca:26:fc:d2:f0:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40810794BC870729306E5291F7A80E4B1F810D7F
Validity
Not Before: Jan 31 20:00:19 2024 GMT
Not After : Jan 29 20:05:19 2025 GMT
Subject: CN=544E6B1B32D1E1317430C892BFD8B37929E3D5F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:81:6f:22:3d:7b:5b:16:72:95:a8:7f:53:
ac:88:cc:4d:88:29:e3:66:56:34:4b:11:09:ac:4e:
ab:d0:31:46:79:0b:18:9d:99:3e:0f:34:8b:5a:e1:
44:b1:75:5f:d1:1c:e4:13:a2:40:c6:22:95:0a:9d:
b3:c6:7d:5d:b3:a8:dc:c5:40:78:b4:53:17:50:c5:
f8:e8:9e:28:ee:9d:82:ba:a4:12:70:69:e3:34:d2:
cc:de:20:6f:f9:d5:b8:8d:86:be:4b:64:94:11:87:
1f:ef:12:b2:9c:67:c0:0b:60:b2:44:43:f9:98:4e:
82:7f:12:15:a5:30:de:f6:86:07:70:0f:bf:94:2a:
2c:66:ea:1d:40:95:6a:2f:6d:10:fa:64:6f:5c:71:
a0:c2:7e:bd:87:24:ad:af:91:5f:78:1b:21:59:1e:
25:d1:46:b0:4d:5e:60:8b:3d:98:ac:e7:20:64:9e:
8b:8a:f3:4f:f6:70:c8:ec:40:4b:88:00:0f:c5:b5:
e6:57:bf:41:b6:9d:ca:91:ae:0f:26:90:89:e0:16:
0d:dd:fa:e9:11:58:d6:ad:dd:47:8c:d9:08:2d:db:
1a:ac:f4:89:1d:98:b6:dd:51:2e:55:bd:ba:a3:d7:
b2:50:6b:1f:a9:df:6a:29:e3:00:eb:4d:df:62:64:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:6B:1B:32:D1:E1:31:74:30:C8:92:BF:D8:B3:79:29:E3:D5:F3
X509v3 Authority Key Identifier:
keyid:40:81:07:94:BC:87:07:29:30:6E:52:91:F7:A8:0E:4B:1F:81:0D:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/40810794BC870729306E5291F7A80E4B1F810D7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40810794BC870729306E5291F7A80E4B1F810D7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3133382e3132312e31362e302f32322d3234203d3e20323634323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
72:2a:b5:35:bf:ed:12:e4:63:9d:0f:66:70:3c:93:51:b6:d3:
45:f5:66:2b:b4:17:a9:ea:ac:58:8e:9e:79:5d:c1:66:71:24:
e7:4e:58:89:3c:13:f4:76:1d:b1:2f:01:a8:b6:2b:31:b0:ef:
bc:89:bb:2a:3a:d8:d9:0f:82:07:29:89:6a:32:7f:c8:b7:af:
60:8d:8f:36:62:db:ac:a0:e6:26:9d:f1:3c:68:81:bc:58:1f:
e6:8a:07:d8:c8:35:98:2d:0b:f1:f2:75:a2:cd:38:df:f6:85:
8a:f9:0d:67:d5:d0:06:64:15:b1:e5:8a:b1:03:90:ef:6c:c6:
48:16:16:79:c5:7d:3e:85:be:67:ba:25:d3:41:5d:56:9d:b4:
25:57:e2:0f:ba:9c:0c:02:72:fc:66:65:1c:54:4f:f0:3c:0c:
c0:75:04:7f:b9:1a:94:5a:70:20:74:88:a1:9e:dd:5a:ba:b4:
6b:01:15:51:51:77:e9:c0:c7:2c:d9:b7:78:37:ec:36:9a:a1:
3e:33:a5:27:ba:34:2a:a0:06:7c:1c:96:b0:f5:fb:f6:2d:ad:
f5:d6:e0:3d:16:0c:e2:3e:a2:02:0d:3a:73:f1:69:49:4a:06:
bc:24:12:58:89:af:ac:dc:be:6c:c7:7f:21:d3:71:37:3c:a1:
c7:d2:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:52 2025 by rpki-client