Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
File: 3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier: 20dwzPPjMjx9Mbo7oPAUY+cdyQG+4qtD9qB68v5ZbZ4=
Subject key identifier: 0F:F9:CC:93:0A:C7:28:C7:EA:50:2F:73:91:D1:12:6D:12:52:D9:F3
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 58CE45FF9429B57CD0DB7BA98779EF1DB41742F9
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:02 +0000
ROA not before: Mon 20 Jan 2025 11:43:02 +0000
ROA not after: Mon 19 Jan 2026 11:48:02 +0000
asID: 263970
IP address blocks: 138.255.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ce:45:ff:94:29:b5:7c:d0:db:7b:a9:87:79:ef:1d:b4:17:42:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:02 2025 GMT
Not After : Jan 19 11:48:02 2026 GMT
Subject: CN=0FF9CC930AC728C7EA502F7391D1126D1252D9F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:62:81:62:20:a5:ea:ae:c0:56:7d:e3:8c:
15:7f:e8:e1:5d:32:35:68:cb:8d:ad:f7:55:81:ed:
66:54:42:6a:fd:8a:51:dd:eb:ca:41:f7:9b:1e:4b:
08:fd:6e:8d:cd:38:7d:8b:e6:c6:cc:9b:b5:de:c3:
d5:80:3a:85:4d:53:c9:48:95:a8:2f:75:f7:dc:f1:
d9:b5:b2:a7:0e:34:19:16:cf:0b:29:38:b8:ad:e6:
c0:7d:48:34:88:d4:27:30:b6:32:a4:1a:97:5e:17:
ca:19:e2:49:8b:4a:e8:16:f8:f9:cf:33:57:8b:02:
89:be:92:74:81:d4:bb:2f:51:87:be:99:ce:9b:ed:
27:72:09:19:1e:0a:af:82:09:66:c8:4e:4e:fd:31:
80:5c:a7:4e:b3:f7:6c:ae:e9:97:69:3b:7e:aa:c5:
9b:71:8e:b9:47:be:e4:e0:b4:05:58:eb:39:fb:3a:
07:45:eb:54:c4:3d:65:96:42:d3:b7:ae:9e:f3:65:
a5:5b:00:5c:7a:3b:e6:09:ba:03:15:1d:ff:f4:7b:
13:56:24:73:67:b4:bc:a0:e8:49:f1:7f:1c:ba:42:
aa:d4:fd:65:13:ff:fb:76:3d:23:c1:61:50:9f:a6:
e7:67:64:62:b9:54:a0:5b:dd:89:b8:26:79:cf:1d:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:CC:93:0A:C7:28:C7:EA:50:2F:73:91:D1:12:6D:12:52:D9:F3
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2b:6d:72:58:8e:76:a8:a2:e8:f1:9b:89:15:e7:5d:5c:66:
b7:3d:fe:68:bd:a1:e1:63:c9:8e:5a:f0:27:b7:63:88:a6:da:
ef:0f:49:d2:16:a7:f9:29:01:55:cf:30:80:45:89:63:1c:90:
98:97:ed:87:2b:dd:5e:ae:03:cc:f7:75:b6:d5:8a:0b:da:97:
cf:97:84:60:2a:1f:c4:c7:f9:70:49:23:98:bb:c5:29:7a:74:
dc:ec:50:23:96:31:9a:2e:e0:75:ad:1e:01:e7:9e:dc:15:9b:
1e:1d:0c:71:1d:1f:88:10:00:69:d2:6a:5b:40:f9:f2:24:a6:
9a:02:36:fa:34:7f:ce:1c:15:20:7f:e6:fb:1e:9e:e2:b7:61:
cc:d1:ca:d4:d2:ca:88:ce:43:37:ff:66:89:f2:a2:3b:b2:09:
5e:99:83:57:c5:8e:d9:66:94:dc:43:5a:58:2f:cf:63:77:04:
c4:58:c7:db:89:94:5f:6e:6f:ff:a6:0a:d2:d2:ea:3a:11:e8:
f1:f3:54:da:29:a2:fd:da:23:1f:6c:d8:66:90:ce:1c:8e:69:
d8:05:b5:f0:02:92:19:3b:fb:7c:7b:11:f3:04:8e:00:61:da:
44:34:68:ab:b0:17:53:ce:c8:5f:28:9c:8c:13:91:e7:9f:f1:
b3:11:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:58:29 2025 by rpki-client