Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa
File: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier: WCiiT1lhiaxrzOBC2c2piDJqkG+wgpOj5cOhDI/yP08=
Subject key identifier: C5:CC:A2:97:98:C7:E9:26:89:70:37:98:0A:93:5C:F9:EE:68:F0:F2
Certificate issuer: /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial: 03574FE43BB15292D0AB42C51040314F581B72A7
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa
Signing time: Thu 06 Mar 2025 09:10:22 +0000
ROA not before: Thu 06 Mar 2025 09:05:22 +0000
ROA not after: Thu 05 Mar 2026 09:10:22 +0000
asID: 262374
IP address blocks: 138.99.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:57:4f:e4:3b:b1:52:92:d0:ab:42:c5:10:40:31:4f:58:1b:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Validity
Not Before: Mar 6 09:05:22 2025 GMT
Not After : Mar 5 09:10:22 2026 GMT
Subject: CN=C5CCA29798C7E926897037980A935CF9EE68F0F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:eb:da:8d:02:9f:a3:e1:ed:8c:d9:e9:59:
ea:a6:ed:31:13:af:6c:ff:18:ea:7c:77:d0:8b:84:
65:95:09:a1:60:e7:75:03:32:4e:d0:20:7b:fe:09:
c5:a8:5f:7a:ac:10:f4:2f:10:bd:28:05:91:b2:9f:
9e:25:3f:8e:a3:3d:f6:16:33:b5:22:f3:8e:89:c6:
3b:1e:9e:e6:27:bd:84:58:5f:4f:38:f7:da:a6:e9:
31:d1:4b:5d:86:e5:a2:e2:17:62:21:4e:af:4d:5f:
eb:84:5e:fd:c3:6a:bf:77:c8:a7:33:08:36:7d:16:
34:8b:ec:ac:32:c4:19:56:37:f8:5c:39:1f:f9:94:
bc:f1:f7:9e:52:97:62:2b:3a:2a:c8:ab:dd:81:f8:
21:c2:77:0a:11:e1:75:f1:f7:e4:b5:da:3b:ef:fd:
82:b8:d7:3c:62:0e:ca:2a:60:dc:dc:68:e2:b3:83:
67:38:c6:1b:67:46:d5:87:e2:ff:7c:fe:ba:00:d4:
05:18:04:4e:ea:25:85:ae:66:8b:2d:c9:92:b1:63:
2b:36:34:0f:e1:af:29:47:73:c9:73:4b:9b:78:a9:
41:e2:27:54:87:21:19:60:aa:50:21:2d:c5:7b:be:
db:e9:9a:8f:e3:96:8a:54:6e:85:c4:e6:ab:c7:1a:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:A2:97:98:C7:E9:26:89:70:37:98:0A:93:5C:F9:EE:68:F0:F2
X509v3 Authority Key Identifier:
keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a7:1f:5d:fc:21:7d:bc:ff:02:22:21:16:08:21:d4:df:48:
bc:d9:e3:d8:65:df:ef:0d:aa:a3:f3:e2:cd:28:50:4a:a3:c6:
11:db:15:95:52:a8:d3:28:ea:2b:6b:12:08:9e:ea:8c:a8:9a:
0b:a5:b2:73:65:bc:ec:08:60:15:72:60:b2:4d:60:f4:f0:6b:
90:e5:3f:33:a1:d2:b5:6f:df:e1:5b:9d:9f:6b:e6:b2:f3:d9:
84:ad:93:ce:96:a5:01:70:4a:3b:a6:3b:d6:bf:1f:46:f4:e6:
1d:8a:68:de:71:61:16:08:14:47:f7:1b:b0:bd:14:41:b6:a1:
64:2b:b6:96:70:f4:12:3d:a4:43:e7:e5:57:89:0b:41:ee:4a:
5e:c5:42:f5:fc:91:1b:fe:30:3b:6a:fc:e6:56:b4:8b:80:3e:
ee:47:6c:1f:98:d4:61:ad:18:fe:98:21:38:76:68:c5:73:b1:
66:8e:8d:73:76:15:e0:5d:e3:9f:cf:31:36:d0:3b:ab:15:28:
0f:1d:83:89:8b:c3:cd:98:1a:34:d6:90:cd:43:09:f8:ce:e2:
6a:47:fc:56:a1:90:00:6c:08:ec:65:d4:01:f0:8d:12:79:f7:
d9:2e:17:63:74:bf:7f:32:54:60:a0:e2:9e:65:d0:03:f3:a3:
67:e8:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:39 2025 by rpki-client