Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/3133382e3230342e39362e302f32322d3234203d3e20323633383834.roa
File: 3133382e3230342e39362e302f32322d3234203d3e20323633383834.roa (raw, json)
Hash identifier: wIWB9b/eh5KERBr/fJcnc3Z5UMFdLT0cPIL9YdeJiaI=
Subject key identifier: 49:D5:02:AC:BD:D6:80:19:F9:11:11:DF:81:0C:F8:4F:C0:89:8A:5F
Certificate issuer: /CN=037FAB82E7054F360259EC96E1964A90506F6093
Certificate serial: 30A1E5CDB7DA4918FCCDFD6B361EF09A9258665A
Authority key identifier: 03:7F:AB:82:E7:05:4F:36:02:59:EC:96:E1:96:4A:90:50:6F:60:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/037FAB82E7054F360259EC96E1964A90506F6093.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/3133382e3230342e39362e302f32322d3234203d3e20323633383834.roa
Signing time: Fri 24 Jan 2025 19:44:18 +0000
ROA not before: Fri 24 Jan 2025 19:39:18 +0000
ROA not after: Fri 23 Jan 2026 19:44:18 +0000
asID: 263884
IP address blocks: 138.204.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a1:e5:cd:b7:da:49:18:fc:cd:fd:6b:36:1e:f0:9a:92:58:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037FAB82E7054F360259EC96E1964A90506F6093
Validity
Not Before: Jan 24 19:39:18 2025 GMT
Not After : Jan 23 19:44:18 2026 GMT
Subject: CN=49D502ACBDD68019F91111DF810CF84FC0898A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:ea:38:aa:33:5c:ce:c6:9c:e1:d8:0e:2e:
b6:ca:9c:5e:6b:73:76:f7:c7:47:86:70:d9:05:bc:
a6:92:0b:1d:df:62:bb:3d:99:53:99:39:b4:fc:88:
97:72:8d:90:a0:20:e9:f6:92:67:63:25:3b:9d:88:
39:4d:21:2f:5d:e9:94:bd:1b:f7:0a:a1:98:b8:5f:
41:9c:3f:a7:71:74:eb:7a:d4:27:d3:33:6a:48:ee:
2b:93:e0:9d:54:b4:8d:ac:7a:92:c8:8a:b7:2f:02:
73:88:c9:29:f7:bc:db:40:23:b8:8c:9c:42:74:d6:
32:f6:bb:75:4f:fe:75:7a:bd:b3:0f:c2:9c:8d:bb:
f3:74:46:9e:73:47:3a:d3:b6:17:4e:47:42:ac:d1:
30:7c:bd:73:e6:37:06:35:45:c5:8b:0b:2c:71:e1:
14:8f:35:49:8f:62:5e:a8:1d:e6:2b:c6:9a:d8:f0:
e0:1d:98:c2:28:72:ab:95:6f:59:0a:21:a5:e2:d2:
9a:93:bf:0d:86:b1:f3:82:20:3f:30:f9:76:02:ee:
bd:e3:7d:d3:29:52:b4:d2:95:4a:15:bd:34:f7:6e:
f0:b4:78:90:d5:4d:37:c4:a7:b7:ce:99:91:ff:3b:
03:f1:e4:73:b6:13:bd:8e:78:d3:bc:0e:db:24:ea:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:02:AC:BD:D6:80:19:F9:11:11:DF:81:0C:F8:4F:C0:89:8A:5F
X509v3 Authority Key Identifier:
keyid:03:7F:AB:82:E7:05:4F:36:02:59:EC:96:E1:96:4A:90:50:6F:60:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/037FAB82E7054F360259EC96E1964A90506F6093.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/037FAB82E7054F360259EC96E1964A90506F6093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/3133382e3230342e39362e302f32322d3234203d3e20323633383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.96.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c9:22:ec:41:90:11:2c:fa:95:f1:72:d5:77:c1:67:d2:06:
da:e3:5f:c9:99:31:ea:95:32:c9:82:65:00:df:03:54:34:e0:
73:83:af:b8:07:c9:c6:18:02:28:67:08:27:05:8a:c8:20:c3:
79:56:a2:a1:1b:c2:c5:92:e9:11:f5:aa:08:cc:24:c6:1d:26:
b1:48:b7:e9:19:4e:b4:d2:c2:ec:d8:43:a9:a1:d5:c4:dc:47:
91:49:d2:b1:c9:e7:9c:a3:29:64:7f:dc:1b:1b:38:8a:32:1a:
6a:cd:f2:cd:6e:0b:d8:6f:90:ac:2d:96:28:d2:bc:d6:1b:10:
a2:c2:b4:1d:73:e3:59:60:3d:0f:8e:b3:af:c4:92:06:73:44:
e9:8d:77:0d:f0:df:8b:32:e3:64:dc:9b:7c:7b:c2:e3:88:54:
c4:e8:95:cd:f9:ff:41:07:2d:50:e2:37:5c:8f:56:83:91:61:
7a:95:7c:66:79:4e:fc:67:fd:ae:c4:37:d3:4c:3c:dc:a1:08:
13:bf:7d:b5:7f:19:2c:e9:c6:93:9a:69:ea:ff:92:ae:1b:e7:
d7:a4:3b:7b:1e:d4:59:21:c5:f4:cc:9e:1e:7d:ca:fa:cc:6e:
72:b4:72:19:86:6f:28:50:66:eb:15:c4:ae:1e:9f:ff:4c:93:
ac:04:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:44 2025 by rpki-client