Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
File: 3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: 7BrpaKqubHetRcqeXDYIj4Zpwt+fjIaNsOMFiD81FD0=
Subject key identifier: 2B:18:0F:E8:BF:6E:6A:C4:89:D4:DB:E5:1D:D0:4B:13:23:AC:89:FF
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 3AF5E73DFB51C288DF74CA16082E20F47DBF0C41
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
Signing time: Thu 31 Oct 2024 17:07:09 +0000
ROA not before: Thu 31 Oct 2024 17:02:09 +0000
ROA not after: Thu 30 Oct 2025 17:07:09 +0000
asID: 264299
IP address blocks: 138.121.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f5:e7:3d:fb:51:c2:88:df:74:ca:16:08:2e:20:f4:7d:bf:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:02:09 2024 GMT
Not After : Oct 30 17:07:09 2025 GMT
Subject: CN=2B180FE8BF6E6AC489D4DBE51DD04B1323AC89FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:84:0f:96:57:8b:84:36:cb:71:3b:6c:73:
4a:8a:10:77:2c:1d:11:54:9c:38:37:7b:5b:61:54:
94:6b:7d:e4:9c:32:86:5d:06:e6:c2:47:bc:da:0e:
93:9a:e0:a3:4a:f3:bf:8f:ea:3b:0a:6e:15:77:ec:
79:28:e3:71:a4:96:19:3a:6a:bd:00:ba:16:be:04:
0f:c1:09:2c:e7:1a:5c:f5:21:4b:02:b1:cd:10:72:
94:d3:af:39:16:82:2b:ef:ea:b7:7a:f9:31:89:9e:
ac:8b:a4:a3:10:84:db:b2:02:1f:1a:a6:29:e5:d7:
be:8d:3a:ac:50:4d:14:4f:6d:8c:2d:fc:43:1c:31:
5f:74:6f:d3:b0:df:3a:21:1f:7f:7b:03:82:53:44:
b2:aa:37:cd:8e:ef:5c:82:da:78:f0:61:2d:8b:28:
57:78:d4:9f:61:4e:dd:98:d9:d0:7a:03:94:fb:3f:
a1:8c:d3:ee:7d:42:7f:61:89:ea:98:9b:29:56:80:
f6:a5:65:c2:2b:b6:ec:19:fd:c5:12:b3:5c:69:37:
11:8e:0f:5d:ea:17:95:47:78:09:0b:ed:51:1a:c7:
8d:07:b8:2d:29:11:8e:bc:df:c7:30:f6:8c:4d:05:
86:6c:71:9c:10:87:ad:53:ff:89:e6:c6:95:37:2d:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:0F:E8:BF:6E:6A:C4:89:D4:DB:E5:1D:D0:4B:13:23:AC:89:FF
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.152.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4a:53:7f:41:4e:d8:99:29:da:40:25:c9:58:04:34:61:31:
91:99:ae:49:68:01:b6:c2:4a:99:ee:bb:21:17:79:d0:d4:a4:
9c:82:29:c3:17:68:a2:16:af:2f:8f:0d:fd:28:40:74:cd:6c:
c6:6c:91:17:9f:59:0c:3a:14:21:db:f8:8c:69:2c:bb:5d:5b:
3f:62:8b:f6:de:16:96:72:d7:8e:f6:a3:12:c8:ea:50:98:a7:
0d:17:b8:6c:a1:48:f4:b1:c8:ea:55:e2:99:78:ca:bd:c9:76:
5a:ae:d6:84:5c:50:ad:61:d5:36:8c:fb:29:66:7f:59:07:cf:
50:32:b4:8d:a8:49:15:14:a2:2e:2b:20:19:1a:1c:f3:ac:00:
15:c3:42:2f:f8:0c:d8:cc:58:21:0e:39:a4:1f:46:de:bb:d1:
d3:0d:d1:87:6d:31:83:5c:01:c5:35:16:e9:7b:b8:87:65:b1:
92:af:d9:bd:db:7e:9b:fd:d2:d6:81:fe:f3:63:20:4c:45:f0:
00:66:49:e3:e1:0c:d4:27:53:9a:5b:f4:97:6f:e1:a9:d6:04:
bb:29:36:4d:57:5a:6e:c9:28:ee:46:20:a5:15:36:a5:55:5a:
a6:4d:5c:59:f0:54:24:3c:a4:6b:7e:89:74:88:9f:1e:b8:00:
24:be:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:36 2025 by rpki-client