Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
File: 3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier: dl3SKCRA1k7SvnHvHJWciuVQVKPIlyaa9UxTjNmIcZU=
Subject key identifier: 79:93:06:3E:B9:ED:14:83:17:78:68:73:3E:9F:EC:0E:1E:5A:A3:6F
Certificate issuer: /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial: 70E7C0ECDD9963C1C5AE1D41CB09708C0AA200D2
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
Signing time: Mon 08 Apr 2024 20:11:32 +0000
ROA not before: Mon 08 Apr 2024 20:06:32 +0000
ROA not after: Mon 07 Apr 2025 20:11:32 +0000
asID: 263665
IP address blocks: 138.255.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e7:c0:ec:dd:99:63:c1:c5:ae:1d:41:cb:09:70:8c:0a:a2:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Validity
Not Before: Apr 8 20:06:32 2024 GMT
Not After : Apr 7 20:11:32 2025 GMT
Subject: CN=7993063EB9ED1483177868733E9FEC0E1E5AA36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:ef:b1:b0:de:0d:b1:91:cd:58:91:43:4c:
3e:a5:5d:4b:6a:fe:a7:b7:8c:6d:51:12:05:1c:1d:
e7:98:e6:ea:e0:ac:ea:65:2a:0e:87:bf:90:33:0d:
72:ae:6d:c6:86:68:d6:75:33:8e:39:1e:07:94:21:
c0:8a:23:ee:50:39:9c:91:cd:72:88:33:e0:5d:3c:
0a:e4:7e:24:bf:e8:bd:bb:27:50:c9:72:dd:5c:be:
cf:83:d3:c5:a8:76:18:64:87:9c:22:fd:cc:cc:de:
94:54:68:26:d3:94:6b:c3:c4:54:ba:d0:0e:9d:dd:
4c:96:7c:ec:3d:02:9b:ee:83:a2:a1:0f:0d:65:62:
a3:2f:e1:a8:38:80:3a:7c:a2:89:19:32:7e:9c:cb:
3d:4f:3f:a7:2d:a5:fa:3a:c6:11:bd:d3:49:bf:b7:
53:64:7b:be:51:df:9b:60:35:2c:ce:3d:71:7f:d3:
42:c2:2c:85:08:dd:a6:5a:a8:50:43:e0:9f:36:b3:
fe:e9:eb:5c:9a:1a:b4:fb:a9:01:a5:37:2f:96:83:
5b:1d:6e:94:49:ba:af:7f:f2:fa:55:0d:ad:b5:47:
1d:32:b4:9e:23:79:3e:ba:be:9a:c5:f6:92:40:e1:
f4:a2:7d:0b:3b:b7:88:f6:2f:a5:b0:0b:31:80:d8:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:06:3E:B9:ED:14:83:17:78:68:73:3E:9F:EC:0E:1E:5A:A3:6F
X509v3 Authority Key Identifier:
keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.172.0/22
Signature Algorithm: sha256WithRSAEncryption
18:42:0e:2c:a6:c2:62:74:4c:7c:5c:2d:1a:41:c9:a3:47:7c:
bf:fc:0c:39:e0:13:03:04:ad:bd:03:ea:b3:82:cd:a5:a7:bd:
b1:18:49:21:af:ca:b1:56:0c:ee:e5:f4:e9:d5:b9:6d:7e:a5:
3d:4e:80:72:0c:ca:cb:b8:b7:0c:cc:e9:bc:cb:3d:70:6a:75:
31:b8:01:3b:6a:fb:ed:f0:13:0a:fe:36:d9:79:b2:ec:c3:0a:
a8:73:41:ca:ba:7f:cb:36:ba:f4:74:e6:1f:f9:0b:a4:c3:b5:
fa:9e:7d:6e:e1:34:ac:70:83:18:b6:11:e6:bd:39:90:d9:01:
af:c7:35:dd:93:99:66:5e:e4:83:53:26:7f:42:3f:18:59:fd:
83:71:a3:f7:19:9d:c3:4f:a0:1d:c1:8d:2b:24:2a:0f:ff:4d:
6b:89:4c:30:1f:35:63:e3:05:d6:eb:5c:5c:6a:b3:ac:24:2c:
ca:d8:57:95:82:65:b8:22:3f:de:86:7b:1f:2a:37:f3:eb:f4:
d4:7d:80:02:a0:26:ad:fe:14:4b:31:36:14:fc:d5:25:58:c9:
f1:e9:10:03:64:a3:9b:20:ae:4f:7c:5b:9f:7e:ee:e9:06:29:
a9:b2:98:29:65:b0:81:fa:4f:40:33:11:4f:86:76:94:52:db:
71:50:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:32 2025 by rpki-client