Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa
File: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier: VJikl/3nm/8I6Y6J82gL5vQrKAHsyoQCf/eCIkwxPJ0=
Subject key identifier: 70:E3:76:73:C8:B2:B4:9A:E5:8D:35:91:D0:69:F6:A4:83:0D:9A:EE
Certificate issuer: /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial: 7A82BAEAFC4345D6C6971D0EC4591CAC1F2ED164
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa
Signing time: Wed 05 Mar 2025 19:00:28 +0000
ROA not before: Wed 05 Mar 2025 18:55:28 +0000
ROA not after: Wed 04 Mar 2026 19:00:28 +0000
asID: 52708
IP address blocks: 138.118.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:82:ba:ea:fc:43:45:d6:c6:97:1d:0e:c4:59:1c:ac:1f:2e:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Validity
Not Before: Mar 5 18:55:28 2025 GMT
Not After : Mar 4 19:00:28 2026 GMT
Subject: CN=70E37673C8B2B49AE58D3591D069F6A4830D9AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:60:15:6c:15:89:d3:1b:c3:4a:97:f3:45:
3e:16:02:2c:ff:48:1e:2b:a3:2d:26:b7:b6:73:f4:
9b:19:4e:e7:ad:e3:ff:f7:c5:cb:65:b8:7f:a5:63:
10:39:d3:6a:3f:fc:30:a0:56:c3:2c:76:45:87:6f:
bc:74:d8:58:51:69:47:af:32:f1:29:4c:3b:41:48:
73:06:fb:41:bd:3f:25:aa:1b:e2:8b:e4:b0:0e:b9:
95:d9:0d:c6:a4:83:95:9d:27:34:b1:2b:25:69:05:
0e:17:82:a3:2d:72:56:39:17:89:02:1c:51:f8:59:
2a:69:d6:6d:f9:d8:93:e3:a1:d6:b2:b7:0c:4d:f8:
40:e4:26:5b:df:f1:dc:27:dd:c5:fa:33:db:04:52:
e9:c3:bb:34:f8:d9:5a:fa:ae:a0:d5:b7:57:4f:02:
98:71:31:18:01:ec:83:33:df:58:d1:22:fd:2f:a7:
ea:89:8f:0f:89:7a:76:04:5b:1e:37:c9:5e:f4:a0:
40:a5:89:d9:08:f8:8b:91:b0:66:72:25:85:43:57:
9a:b0:fa:af:8a:6a:37:ab:55:8e:3b:81:2b:59:03:
d0:df:bd:65:da:42:17:dd:e2:81:1f:03:67:7e:85:
83:71:b8:d1:34:c2:18:9b:01:0d:e5:15:ac:06:8a:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:76:73:C8:B2:B4:9A:E5:8D:35:91:D0:69:F6:A4:83:0D:9A:EE
X509v3 Authority Key Identifier:
keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:3e:4a:84:25:cc:1f:b2:6a:6e:c9:75:bc:84:fc:3a:5d:f3:
19:23:88:b8:1d:27:1d:5c:d6:0f:66:22:64:52:b1:1b:6a:43:
6b:0c:7e:0f:2b:c8:d0:55:1f:99:e1:7d:90:c9:e0:be:a2:d7:
63:86:78:a4:75:5c:93:2d:da:0c:1f:ac:36:5a:ad:d7:a3:50:
d4:8f:35:aa:cb:00:9c:86:8e:81:f6:7c:0c:d6:d4:b4:a5:4b:
58:a6:b4:83:f6:2f:2b:6a:81:e4:34:9f:c1:69:9c:47:cd:8e:
41:83:5d:8b:70:01:49:46:80:f8:92:a4:d1:a5:89:0b:d5:8a:
01:fc:ee:3c:5d:df:55:66:07:ed:17:21:87:77:a9:98:37:3a:
57:b6:fb:d0:49:da:eb:c5:28:11:20:01:ec:f3:c2:50:b2:18:
bc:c4:02:a9:92:9d:77:80:aa:2b:b5:87:d4:90:59:c2:bf:45:
cb:1f:7e:9d:f4:8f:ab:bd:14:e0:7f:4d:57:0a:de:ee:d1:bc:
e9:47:06:59:8f:a5:f7:c5:e4:5a:f0:25:0f:29:da:62:b2:ce:
63:68:12:b1:6e:99:61:20:44:bf:52:6c:bd:94:54:25:81:48:
98:99:53:79:4b:3d:f0:2a:5d:3d:d3:1d:f9:b4:ff:40:1c:11:
67:5e:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:02:57 2025 by rpki-client