Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa
File: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (raw, json)
Hash identifier: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=
Subject key identifier: 9E:B0:F9:96:EA:96:F5:67:63:1C:92:B1:56:A9:CD:AD:03:E6:BE:30
Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial: 388FCB7D50D93E3946CB80360EC84F05B92D0431
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa
Signing time: Thu 06 Mar 2025 10:04:41 +0000
ROA not before: Thu 06 Mar 2025 09:59:41 +0000
ROA not after: Thu 05 Mar 2026 10:04:41 +0000
asID: 263877
IP address blocks: 138.186.172.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8f:cb:7d:50:d9:3e:39:46:cb:80:36:0e:c8:4f:05:b9:2d:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Validity
Not Before: Mar 6 09:59:41 2025 GMT
Not After : Mar 5 10:04:41 2026 GMT
Subject: CN=9EB0F996EA96F567631C92B156A9CDAD03E6BE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:c2:8d:1b:42:93:f8:05:b9:ce:26:2d:b2:
a8:33:80:df:d2:bd:12:71:3f:89:0c:6d:c9:54:b3:
9c:c2:a3:78:cb:a4:9b:44:e1:ec:a3:c8:ed:24:9e:
85:cb:64:69:2c:34:0d:6d:44:cb:2d:ce:2b:01:6e:
59:d8:64:f2:ff:97:b9:a6:b6:4a:37:00:b8:fd:49:
a4:72:8a:f1:dc:ae:16:44:59:74:5e:22:ea:c2:38:
a5:57:0b:4c:f3:7e:2e:33:e4:7a:7e:db:82:ed:84:
53:13:af:7c:e6:6d:da:d0:7a:72:09:49:e3:87:fd:
0d:89:6d:de:6d:a4:7d:5f:37:3c:99:8d:03:b4:98:
3a:fd:c0:a5:40:90:43:68:87:43:88:76:d6:51:58:
7d:68:ef:bb:55:e4:21:a6:1d:ef:a6:3f:a0:c6:e4:
c2:b5:63:73:b8:d7:71:9b:fa:a4:0e:e3:cd:6b:24:
64:23:e5:44:bb:61:af:b3:1e:57:46:d8:5f:2b:cf:
8d:b2:77:26:32:d9:51:3c:0d:97:f6:f3:f7:0f:c5:
74:e8:7c:69:45:ea:6f:68:e0:89:0f:22:50:2f:72:
e9:7e:c4:6e:65:5b:32:25:af:88:5d:44:28:8c:02:
7b:23:26:07:04:82:f6:01:c2:ac:2c:95:fd:15:6c:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:F9:96:EA:96:F5:67:63:1C:92:B1:56:A9:CD:AD:03:E6:BE:30
X509v3 Authority Key Identifier:
keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.172.0/22
Signature Algorithm: sha256WithRSAEncryption
49:00:d9:fb:9e:fc:b8:d1:64:fa:22:bd:fa:e2:9c:d5:42:3d:
e1:c4:94:61:97:86:4d:21:54:35:8a:c1:f0:c8:56:79:2a:26:
79:fe:31:b7:29:92:76:dd:47:b4:a8:df:e7:f6:5f:86:03:3a:
c0:4d:3b:08:8d:06:d4:bd:ed:65:1f:36:b4:86:2d:44:75:a7:
7f:c1:2d:38:85:6e:13:50:6d:18:61:e9:b3:ca:5d:10:ff:a6:
ae:90:04:1f:51:f8:c3:e7:48:69:fc:2c:5f:39:2b:cb:04:10:
83:a5:c4:d4:63:d7:ae:9f:f9:90:6d:1e:fc:0e:75:92:b1:75:
bf:85:50:bc:57:0f:0b:a2:57:2b:67:19:97:9a:4a:c7:ff:e1:
d8:16:19:80:16:af:ad:5e:21:d1:f2:55:de:77:0e:32:06:87:
4a:20:bb:e7:c4:30:25:5a:7f:04:95:c8:9c:17:19:f3:e6:0f:
83:be:09:47:d8:cb:eb:ab:80:4b:3b:f6:f0:83:22:c2:6c:f4:
9a:82:d3:55:8f:aa:84:e9:f8:00:a4:18:89:2d:d3:be:eb:55:
1e:48:10:f4:4c:26:59:3e:4c:d2:43:32:29:34:39:d8:b3:37:
0f:42:37:1d:ef:18:9c:38:88:9e:41:83:95:38:e4:e3:dc:2f:
2f:3a:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:24:14 2025 by rpki-client