Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
File: 3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier: d9Km20xYvgBiyymVn077apj/hVLHQ/D/P3BGrKk+WYo=
Subject key identifier: 10:E4:63:93:28:04:F5:22:D9:5F:88:5D:4E:CA:6B:82:41:E8:C8:4A
Certificate issuer: /CN=4C5E4BEB7398912F161523952333D01C9BF59452
Certificate serial: 5AAC8CF6EB08ADA5F750187FB6AEFF614D8D82A0
Authority key identifier: 4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
Signing time: Thu 23 Nov 2023 23:25:28 +0000
ROA not before: Thu 23 Nov 2023 23:20:28 +0000
ROA not after: Thu 21 Nov 2024 23:25:28 +0000
asID: 262645
IP address blocks: 138.97.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ac:8c:f6:eb:08:ad:a5:f7:50:18:7f:b6:ae:ff:61:4d:8d:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5E4BEB7398912F161523952333D01C9BF59452
Validity
Not Before: Nov 23 23:20:28 2023 GMT
Not After : Nov 21 23:25:28 2024 GMT
Subject: CN=10E463932804F522D95F885D4ECA6B8241E8C84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:14:51:64:6a:15:ed:50:38:89:54:7d:0b:
2a:8e:36:b4:21:7d:6b:16:00:dd:c7:a6:03:f4:d5:
7c:fb:26:27:6e:33:e1:dc:3f:9c:6e:b5:ef:71:11:
42:75:f9:3b:0f:69:0e:ee:97:b7:1d:b8:c5:6e:6c:
93:85:9f:e4:db:01:af:1f:16:f9:be:b4:30:50:fa:
4b:69:a6:20:45:6b:48:2f:30:5f:bd:d9:b9:1d:ea:
17:41:ec:d7:cc:0f:34:a9:ea:73:51:ca:43:d8:f1:
c8:f7:30:7d:85:e3:fc:73:c5:82:84:68:38:f5:cf:
8f:a1:6c:c9:6c:b2:d7:6a:4e:46:3c:c7:04:fd:82:
44:62:5c:14:9c:d8:e6:fe:ae:80:13:7e:06:67:39:
70:08:01:24:04:6c:96:47:06:65:ac:c7:0c:85:aa:
e8:5e:c0:1f:27:aa:7c:b9:e7:91:dd:ec:de:96:cc:
18:45:ec:ea:50:46:20:de:e2:77:46:91:80:b5:b1:
02:d9:e7:3f:52:fb:97:7b:53:04:8a:f6:53:2f:ad:
39:3b:89:1d:d6:19:90:89:a3:87:4c:e1:74:4c:d8:
bb:c6:04:b9:ce:d0:64:03:d8:d7:eb:1f:e8:59:89:
c7:3f:39:9e:2e:5c:f4:d8:2f:ee:3f:93:57:50:7f:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:63:93:28:04:F5:22:D9:5F:88:5D:4E:CA:6B:82:41:E8:C8:4A
X509v3 Authority Key Identifier:
keyid:4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:e2:cb:89:34:c9:c3:ca:c3:86:6e:84:e5:5d:ce:f6:32:ad:
06:5e:7c:e3:0a:30:87:df:04:f8:6a:49:ca:65:2f:f7:dc:45:
8f:5b:32:b1:ea:e9:87:69:85:75:b5:19:03:84:d8:e4:2a:c9:
d9:70:5e:b7:09:df:1e:59:0d:5d:ac:d9:a9:c3:8f:f4:f7:43:
2f:e0:5a:ec:69:24:14:69:b3:1a:5b:8e:48:bf:8a:a4:ee:0f:
53:fe:55:74:72:d2:15:84:dd:03:b1:e3:3e:9c:e8:f6:9e:9c:
ba:1d:50:63:bf:81:09:93:29:0d:8e:44:b7:9a:51:eb:04:1a:
30:e1:ee:05:e6:c0:9a:35:b4:6f:be:11:38:37:3a:2a:fe:99:
26:be:84:35:b7:83:a6:24:1b:72:ed:0c:84:82:82:a2:4d:66:
f1:d0:8f:c0:04:84:fd:98:e0:fc:d2:d8:4c:24:aa:3a:9e:b9:
45:bf:68:99:9d:fe:82:cb:0c:09:3f:cc:e7:99:fc:25:47:e6:
5c:bc:13:31:70:a6:af:25:ca:d8:c4:4f:66:cf:9a:ce:13:50:
d6:57:28:97:a5:65:95:eb:ff:f8:94:44:08:34:ae:25:9d:60:
c5:ec:62:e8:17:90:c7:65:d8:36:94:0b:81:b3:fb:89:51:5c:
10:c7:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:47 2025 by rpki-client