Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa
File: 3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier: Ycf3RaCOXw+yHruJzUz4m4S4172u+KHp/QnWGYtOc4g=
Subject key identifier: 23:4C:9B:6B:EA:BE:46:EB:F3:2F:21:39:AC:ED:E0:E2:4E:DF:FD:F4
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 615908800F751306B02978C1CEAB31461764DF75
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:59 +0000
ROA not before: Mon 20 Jan 2025 11:42:59 +0000
ROA not after: Mon 19 Jan 2026 11:47:59 +0000
asID: 263970
IP address blocks: 138.255.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:59:08:80:0f:75:13:06:b0:29:78:c1:ce:ab:31:46:17:64:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:59 2025 GMT
Not After : Jan 19 11:47:59 2026 GMT
Subject: CN=234C9B6BEABE46EBF32F2139ACEDE0E24EDFFDF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:bb:70:3a:84:3a:86:2f:3d:ca:f2:f2:29:
b1:c4:24:34:bf:c5:c2:b4:4c:ef:af:77:e6:c9:4c:
c2:2d:31:6c:be:17:c3:f7:65:b0:97:bf:8f:94:e9:
d5:6c:c2:76:c7:f3:20:d9:72:14:6f:7c:13:96:c8:
ea:70:3b:6c:77:20:b2:3d:20:bc:b9:2e:f3:60:9c:
c2:51:2d:5c:62:e7:3d:80:f8:39:3e:b7:b1:a3:ba:
b0:bd:bf:b9:52:f7:fa:12:30:89:25:e3:79:c9:98:
6e:e1:cf:d3:08:1d:aa:78:92:8c:d3:8c:b4:8b:b9:
91:34:26:d4:f4:86:ac:3b:d1:9b:de:8e:11:85:78:
a7:e9:28:14:95:f5:09:93:92:10:f6:ba:c7:f8:2e:
26:e0:af:77:66:27:3b:b7:f3:4e:22:f9:df:4b:29:
b5:3a:72:78:e5:e0:64:82:90:24:77:d4:35:92:5a:
a8:48:0e:1b:5e:c2:4e:b4:ff:f5:a0:77:f8:5b:0e:
94:1d:2b:c9:3d:1d:f7:1d:57:46:d8:88:46:35:c2:
0a:49:87:59:74:8d:4e:b0:e7:d1:72:5a:a6:0e:c5:
49:5c:87:9f:69:e4:c8:b4:7b:18:49:5d:b8:bd:c8:
60:52:8e:16:4d:b1:14:55:9c:52:76:ee:4e:db:c9:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:9B:6B:EA:BE:46:EB:F3:2F:21:39:AC:ED:E0:E2:4E:DF:FD:F4
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:02:76:48:d3:49:45:e4:6c:78:b7:25:40:9e:1b:1d:39:16:
40:d6:1a:22:65:5b:57:aa:5f:3c:bf:e1:9d:73:fd:ed:8d:ca:
cb:33:0f:31:45:ca:0e:c7:79:09:a0:a1:6d:5d:f0:cb:b9:84:
26:11:77:4e:ee:bf:f6:0d:87:a8:10:da:93:fa:9d:a2:03:97:
82:43:bd:95:e0:50:39:ce:fe:e0:c9:a1:b6:ac:db:81:9b:12:
dd:a6:e5:fe:11:8b:76:d5:0a:8b:cd:50:2d:e6:83:25:8d:c7:
d8:d7:ad:5a:ec:12:ec:98:9e:79:82:86:d1:51:c2:8b:80:09:
9b:2f:20:9b:0b:16:db:3d:48:f7:ac:53:74:80:61:6e:18:11:
50:37:fb:76:1d:b4:a7:79:f1:ab:12:0b:4a:18:f6:bf:02:cf:
92:d9:c8:29:ca:3c:f8:62:c9:a3:f4:c0:01:07:e7:c8:aa:56:
ed:1d:c3:58:90:3a:6e:0d:23:9a:c1:c4:f1:32:fc:61:a9:8e:
30:1b:75:93:73:7c:91:25:57:3d:6c:68:7d:75:8a:b3:15:13:
05:d7:80:ed:eb:80:b8:d0:24:56:f3:3b:a9:06:e6:7d:7c:86:
c4:a4:cf:f6:93:be:6f:8e:fb:96:f0:33:d8:1d:eb:c1:61:3d:
72:37:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:25:30 2025 by rpki-client