Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
File: 3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa (raw, json)
Hash identifier: haUu8GcntsDqKYotyIGtW5wRaFsq/LVxtKb1F2Nutv0=
Subject key identifier: C7:78:56:84:34:73:47:09:B5:D8:63:A5:78:E4:AB:38:44:2C:E9:1C
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 55C9B78728CEC8BA02315EF1C9F717A62313DDB4
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:59 +0000
ROA not before: Mon 20 Jan 2025 11:42:59 +0000
ROA not after: Mon 19 Jan 2026 11:47:59 +0000
asID: 263970
IP address blocks: 138.255.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c9:b7:87:28:ce:c8:ba:02:31:5e:f1:c9:f7:17:a6:23:13:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:59 2025 GMT
Not After : Jan 19 11:47:59 2026 GMT
Subject: CN=C778568434734709B5D863A578E4AB38442CE91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:68:1f:da:91:8c:7e:93:a9:8f:96:d5:1c:
06:ee:bf:01:3c:bb:59:b9:4f:57:9d:57:0a:b7:26:
fd:db:75:7c:c8:ae:96:b5:01:28:57:05:75:5a:2e:
bd:e6:68:20:af:09:1d:57:95:16:f3:03:19:8c:7d:
68:e0:9e:c7:03:87:78:42:90:40:82:53:8d:32:74:
0c:5f:ab:41:49:79:20:e3:b4:08:9d:fc:c1:ba:07:
13:fc:8e:d9:d4:ac:e6:72:5b:c4:bd:ba:0d:4f:b4:
b3:96:58:d5:73:68:0f:18:e3:b1:8b:8f:9c:bb:93:
5f:4c:65:2c:81:ce:f7:a1:de:3e:c2:84:32:cd:1b:
b4:fe:bd:a5:7a:49:d5:b8:8e:2d:07:da:90:e5:a8:
15:53:74:b4:b5:4c:d2:64:d7:86:05:06:bc:9e:b3:
61:17:37:aa:d8:11:04:96:bc:6c:0e:0d:d0:dc:f2:
ea:62:9e:14:44:7d:88:68:12:24:2d:13:3c:7c:a2:
48:aa:ed:90:5e:f0:01:1f:93:14:89:de:1f:9a:3a:
ef:c5:a5:1f:0d:82:fb:a0:ca:4a:20:8f:d4:c4:9f:
08:ad:f1:41:1f:68:a9:ec:36:73:84:f9:90:19:29:
72:3c:f9:83:e6:d4:e4:04:c7:e2:01:71:5c:4e:e7:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:56:84:34:73:47:09:B5:D8:63:A5:78:E4:AB:38:44:2C:E9:1C
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:10:2d:9d:a4:0e:d0:85:21:e1:76:4f:79:2b:2d:56:62:78:
d2:4c:85:2a:70:51:cf:94:82:a1:6f:c5:5f:d4:5c:eb:7f:44:
4f:92:8d:67:dd:51:dc:b9:2d:28:ff:b9:a2:88:df:ca:0d:35:
ef:f5:c4:6d:b0:ce:de:a4:b6:fd:b1:de:59:16:f3:b8:bb:c4:
e5:aa:04:df:75:14:c9:02:de:a1:1e:11:33:39:85:61:ab:9a:
65:97:27:0d:d6:06:08:00:59:68:5d:f6:28:eb:93:9d:3d:f8:
3c:67:f3:53:29:99:a9:69:f9:ff:7c:26:ab:fa:12:3a:db:f7:
08:f1:ff:df:f4:68:54:ed:7f:51:c8:a8:90:c5:f3:ac:1b:2d:
9d:bc:7f:0d:6c:99:ba:01:91:70:fa:6d:b1:13:86:2c:db:c6:
d9:b5:f7:cc:4b:8a:a4:c5:2a:59:5a:f2:d4:8d:0f:70:36:df:
e3:2f:0e:eb:16:a9:d6:af:33:38:61:a7:0b:a4:45:65:d2:70:
d8:0d:d3:ac:80:51:44:96:4c:59:8b:97:d0:0a:9c:1b:f3:76:
36:be:27:23:54:c8:d0:40:54:44:d9:11:f0:63:d4:ed:de:d9:
bd:c1:65:ba:a2:30:da:bf:49:7a:be:1b:c6:dc:1f:e2:ab:2b:
5d:14:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:58:03 2025 by rpki-client