Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File: 3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: ikW5Ttdnj6vTXpDnAEnT8BXRpYjAMXgbw1j8wQjHPWo=
Subject key identifier: 3D:B1:93:0B:87:65:25:44:FE:84:C5:CA:08:DD:51:4A:F4:E6:DA:F8
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 011B3578CE4263F1C3067DD053E8425A80712C9E
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time: Mon 25 Nov 2024 17:04:22 +0000
ROA not before: Mon 25 Nov 2024 16:59:22 +0000
ROA not after: Mon 24 Nov 2025 17:04:22 +0000
asID: 28287
IP address blocks: 138.118.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1b:35:78:ce:42:63:f1:c3:06:7d:d0:53:e8:42:5a:80:71:2c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:22 2024 GMT
Not After : Nov 24 17:04:22 2025 GMT
Subject: CN=3DB1930B87652544FE84C5CA08DD514AF4E6DAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:48:38:76:b5:36:64:33:00:9c:e8:13:39:
13:08:b6:92:c4:d3:af:e7:ed:3f:2b:8e:dd:6b:05:
1b:4b:55:f2:13:c6:47:79:63:45:1c:af:5b:e3:8f:
6c:d3:1e:4d:d4:41:db:b9:cf:78:ba:95:74:29:b6:
78:b0:17:cc:7d:62:3a:17:90:31:62:4a:bd:23:2a:
70:d7:ab:2f:53:85:53:db:93:d1:36:48:5e:83:56:
c5:f6:4b:5e:8e:70:ce:7a:30:b1:03:c7:e1:b0:4d:
83:5b:5e:85:bf:2c:ac:49:71:d8:7e:65:f9:33:93:
84:fc:1a:5c:0f:e6:0e:2c:01:ae:11:fc:09:4f:e7:
7c:ea:85:54:cd:35:a0:00:bb:0b:8a:9c:b8:cd:2a:
92:39:64:ee:cc:f8:79:a4:81:7b:83:dd:07:65:ed:
da:39:06:a5:1c:27:fe:f2:02:1e:0f:e3:99:a4:f0:
85:34:00:1f:65:ef:a8:4d:03:66:c9:09:09:77:89:
2a:88:c3:20:81:fd:d2:56:3a:af:48:2a:8a:8a:b7:
1d:0c:ef:66:2d:3f:1f:9a:25:87:b3:16:8f:3f:dc:
a6:f1:db:07:45:41:40:53:d7:ec:bf:29:e4:8b:81:
d8:55:e7:d6:8d:f9:5d:f3:a5:10:64:53:fc:11:ba:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:93:0B:87:65:25:44:FE:84:C5:CA:08:DD:51:4A:F4:E6:DA:F8
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:8a:9d:9a:98:ab:01:64:01:6e:9c:36:c7:31:de:e7:78:04:
16:8a:15:f9:50:91:4d:96:50:e0:ac:99:88:41:8c:ee:18:a8:
4c:33:87:db:5b:dc:3c:09:0c:40:86:3a:07:90:99:6b:bb:a2:
fd:44:0d:23:c8:9c:cb:a6:cd:9e:c2:f0:77:e3:3b:c5:a7:79:
81:65:a9:75:a7:e3:52:c9:ea:00:92:c0:59:95:44:8c:7b:49:
89:e4:1f:66:47:4e:03:3b:24:8a:05:de:b9:5b:04:6e:03:45:
31:8f:e9:7d:2b:be:f2:32:29:69:eb:3c:18:b2:60:ae:ad:1f:
8c:0e:e2:d5:b5:02:d0:3b:34:97:a0:25:7e:b7:84:4c:d2:e5:
ab:6c:b3:c6:32:da:48:0f:ad:bd:15:1f:b6:75:26:3e:1d:f6:
99:a3:57:b4:32:2b:a9:8e:ee:ca:68:68:c6:9e:7e:02:97:e0:
b4:c6:5d:33:6c:d6:d5:6f:70:a5:ce:9c:f5:e6:d0:e5:de:60:
e6:d4:e8:d7:50:1e:c7:b7:86:b6:c2:55:c0:aa:19:17:0b:36:
2c:f8:e2:06:db:d3:fa:22:03:85:5a:d9:56:ef:b5:3b:0b:02:
b5:a7:03:b7:4a:24:3e:4e:a3:c5:45:2a:64:fd:21:02:d1:32:
10:d4:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:14:09 2025 by rpki-client