Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3232203d3e203238323130.roa
File: 3133382e3230342e3133362e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: 2fZN+9+zgYO5CrWsCTuLpCMzxTeHAP1ag7vUn8VwgDo=
Subject key identifier: 0B:DB:32:87:85:70:78:FE:0F:05:F7:55:F7:E3:94:AC:06:5F:D0:B8
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 1534269DE7BF844B3ED8018ADDC36994EBDF1A7A
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3232203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:23 +0000
ROA not before: Wed 28 Feb 2024 13:58:23 +0000
ROA not after: Wed 26 Feb 2025 14:03:23 +0000
asID: 28210
IP address blocks: 138.204.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:34:26:9d:e7:bf:84:4b:3e:d8:01:8a:dd:c3:69:94:eb:df:1a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:23 2024 GMT
Not After : Feb 26 14:03:23 2025 GMT
Subject: CN=0BDB3287857078FE0F05F755F7E394AC065FD0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:15:dd:44:09:51:55:b8:6e:fd:3f:78:f3:
34:7c:1f:55:a5:ca:5d:3b:f6:df:91:36:e1:75:2f:
88:28:54:c3:da:4e:36:c0:44:17:bb:4c:63:1f:40:
72:43:e3:d6:e5:24:56:f2:bc:55:ae:f2:2c:03:10:
e4:c0:95:68:e5:1d:af:82:a2:41:e9:4f:36:ee:2e:
bf:e9:ba:e8:b7:46:ac:b9:48:6a:74:0b:69:ce:a7:
6e:4f:b1:2c:be:81:3c:18:ee:d1:ee:a1:06:c2:e3:
46:37:a7:b3:39:df:3e:41:a9:a0:75:fa:10:17:e1:
03:75:c3:43:05:bc:44:67:89:01:91:77:0e:ac:c1:
98:6f:89:69:28:54:78:e6:82:03:bc:6f:f5:22:7f:
3c:dd:8a:1c:42:28:17:e9:58:4f:38:e8:b4:f6:f6:
58:18:70:50:8d:0e:74:d6:e7:5d:46:6d:10:bf:fa:
6b:0c:a7:a1:18:4c:91:6d:13:20:ac:e4:5e:9a:bd:
77:be:3c:4a:90:ae:14:8f:d9:12:ab:9d:74:92:92:
9f:64:64:87:ec:d4:56:7f:d0:93:f5:ac:ba:ce:bf:
cb:81:5b:dc:34:92:56:93:ac:da:2e:e6:dc:13:2f:
41:9b:e5:d3:02:45:09:73:9a:2f:c9:d4:31:a5:84:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:32:87:85:70:78:FE:0F:05:F7:55:F7:E3:94:AC:06:5F:D0:B8
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.136.0/22
Signature Algorithm: sha256WithRSAEncryption
74:25:80:14:fa:e5:7a:7e:2b:b5:07:ea:a7:03:89:d4:60:f7:
16:0a:07:bf:b5:7b:a1:e3:fd:d3:47:35:70:7c:4c:66:52:07:
c3:4b:00:ce:61:9c:5c:54:11:a1:5a:c1:45:84:84:9f:71:46:
b8:1d:92:54:a2:f4:34:11:c6:a3:bc:c3:18:c1:16:b9:90:41:
d6:10:c7:76:10:0b:3f:f7:11:09:54:74:1c:0e:0c:3a:3f:4a:
87:b8:4a:5e:f8:32:9c:1c:0b:50:60:8c:8b:7a:19:70:22:27:
ef:a7:b8:9e:a4:1f:1e:ec:3f:ea:46:7f:e3:85:ad:23:38:14:
18:8d:01:9d:c4:f5:88:3e:29:5b:64:b6:ec:fc:fb:5c:b8:94:
c3:61:64:58:e8:11:1e:87:68:72:8e:9e:b1:5e:97:7f:55:f4:
47:9f:2a:66:5f:fd:99:4f:25:71:f7:99:07:d0:e6:aa:15:9b:
18:0a:03:7d:ec:54:dd:09:92:48:e0:3f:27:24:04:8b:81:0b:
c0:19:f3:4d:10:dd:b6:bd:01:51:99:d1:ab:0b:b7:1d:89:73:
82:a2:6d:87:37:72:77:09:a8:05:d3:b0:cd:ee:b2:bb:4e:f0:
e2:85:c9:3e:0d:82:b5:a4:f0:a1:59:c8:02:fe:2d:ff:ed:55:
72:83:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org