Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
File: 3133382e3230342e37322e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier: doYFUdrgTDRK7SDpGA4we3Za1Mwifjt7v26TVrgvtPE=
Subject key identifier: 27:D7:0F:F6:23:AC:6E:C2:0E:71:94:0F:FF:07:93:99:EC:10:EC:2E
Certificate issuer: /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial: 68689EA36A78D0C7424DE4269A0C5093A44011F0
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
Signing time: Fri 08 Nov 2024 18:27:34 +0000
ROA not before: Fri 08 Nov 2024 18:22:34 +0000
ROA not after: Fri 07 Nov 2025 18:27:34 +0000
asID: 28146
IP address blocks: 138.204.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:68:9e:a3:6a:78:d0:c7:42:4d:e4:26:9a:0c:50:93:a4:40:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Validity
Not Before: Nov 8 18:22:34 2024 GMT
Not After : Nov 7 18:27:34 2025 GMT
Subject: CN=27D70FF623AC6EC20E71940FFF079399EC10EC2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:96:5a:c8:8c:13:b6:7a:1c:b6:06:44:ae:
89:c0:bd:3e:6c:f1:ae:2b:b5:03:e3:72:97:75:60:
2f:35:f3:3e:5a:9c:f8:4f:3a:f6:4d:b9:f6:e5:6c:
a2:2a:86:5e:be:48:4b:4b:1f:a1:e4:5b:dc:39:c6:
89:46:93:70:d5:23:ed:40:b4:31:ca:b1:9b:16:18:
fa:81:5a:d0:d9:e3:46:b0:f4:1f:75:7b:a6:5e:36:
4b:94:dd:34:49:27:fc:42:a0:83:19:ea:47:1b:b3:
07:23:3e:93:c6:55:88:e9:81:72:1c:41:47:21:d1:
cc:dc:7d:89:13:03:0d:f3:c3:53:3e:ed:5d:8e:46:
9f:f6:cc:54:aa:c4:b4:27:18:1c:b3:09:9a:d9:d3:
d4:e9:1e:3d:13:19:93:f0:81:7e:0f:85:35:f9:88:
4b:2c:55:85:bc:2b:93:55:28:0d:7c:7b:93:28:8f:
a3:0b:8a:d8:4c:54:23:ef:55:9d:4c:48:bf:89:53:
82:3c:b8:a8:01:37:4a:27:86:fa:83:0c:f0:04:1f:
4e:6f:7e:1a:b9:5d:c7:44:ea:52:02:d5:a9:b7:e5:
75:2c:dd:47:5d:ce:9b:b9:7c:18:e8:8f:b2:73:97:
a8:54:d5:f5:fe:12:6e:1f:c0:31:c5:2f:7e:51:2b:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:0F:F6:23:AC:6E:C2:0E:71:94:0F:FF:07:93:99:EC:10:EC:2E
X509v3 Authority Key Identifier:
keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c4:2a:a2:89:03:aa:28:94:33:18:ef:e0:57:42:5e:f7:fb:
3d:1d:b2:b3:41:9f:1d:60:32:96:e3:9e:02:32:ef:7a:66:b4:
c5:d2:4d:74:ba:cf:29:a7:82:b6:7d:13:b7:b4:e8:65:c1:e8:
56:a7:cd:df:27:02:cb:bd:d2:ed:5a:c6:22:9b:17:97:70:80:
d0:77:17:a8:9a:a0:94:e9:70:20:c6:4d:65:22:91:1a:35:72:
76:e3:9a:c5:dc:fe:3f:08:86:ad:41:f3:41:1e:94:56:7b:30:
94:25:7c:62:31:5a:8d:94:a8:a8:15:e8:b7:1a:29:26:84:ac:
85:38:e5:b3:7b:d0:92:6a:30:b8:e9:a3:52:7e:c1:90:9b:86:
44:99:74:b7:79:54:85:eb:c4:b7:e4:a8:33:f9:cf:07:40:eb:
cb:95:51:4c:53:10:10:02:89:b1:4d:1e:bc:e6:12:75:93:02:
e8:2d:32:07:f8:27:f5:96:d1:9b:e8:8d:8b:02:83:3d:31:4d:
7e:97:6f:02:57:a3:8d:95:2e:46:f6:e4:13:f9:d9:a9:f5:5f:
61:d8:ab:cf:59:7a:95:13:74:bf:40:fd:93:1b:7b:94:44:62:
44:8c:0d:db:a4:1a:f9:5b:11:7f:57:da:c7:21:08:05:52:40:
96:28:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:07:58 2025 by rpki-client