Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
File: 3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: s0PTr/tQqzw5ERWW4ZbP+LWHRpvwq7NFFHIXN9aka1c=
Subject key identifier: 1B:B1:E0:6B:33:E9:E8:71:38:0B:4C:FD:BC:CF:19:26:77:AA:A6:62
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 5B1728BBDDBBE36108AEA94E1A5A5F442CA0286A
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:41:41 +0000
ROA not before: Wed 10 Apr 2024 12:36:41 +0000
ROA not after: Wed 09 Apr 2025 12:41:41 +0000
asID: 28201
IP address blocks: 138.117.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:17:28:bb:dd:bb:e3:61:08:ae:a9:4e:1a:5a:5f:44:2c:a0:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:36:41 2024 GMT
Not After : Apr 9 12:41:41 2025 GMT
Subject: CN=1BB1E06B33E9E871380B4CFDBCCF192677AAA662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:98:a7:10:33:44:c8:d2:05:9e:68:91:b4:
e1:39:65:a9:f0:12:4a:64:d2:3c:a1:24:72:a7:39:
aa:99:14:ed:57:b3:81:d8:d3:d5:20:8c:a2:42:4a:
48:4e:3e:f3:42:43:09:99:1e:15:60:de:2c:f1:2f:
47:45:36:71:c8:b0:76:59:e2:6b:d9:37:93:2d:2c:
b1:92:b8:70:a9:14:f0:99:4c:f2:9c:fa:0e:3a:90:
03:c3:dd:91:cb:56:4c:2f:9e:3e:02:65:eb:83:98:
44:46:7a:f8:a8:4e:d7:29:86:cc:79:8c:64:78:41:
db:a7:ae:98:04:62:94:f6:46:d4:ca:1f:28:40:3b:
ff:94:10:35:33:ba:26:c1:1c:b1:cb:da:bf:a9:f0:
6a:8d:b8:a9:07:50:79:bd:ca:2d:21:40:57:8b:d5:
4a:2a:1f:67:ef:e9:1e:6a:1d:79:c3:20:03:90:42:
2b:bb:0c:fe:b2:fd:49:12:fa:9d:af:28:ed:de:62:
40:42:54:6f:0e:29:a0:89:57:8e:0a:eb:d3:e2:3c:
c9:f8:56:0b:26:d0:88:24:a2:ab:e6:ee:5c:1a:4f:
de:d1:e8:3c:b1:ec:6e:53:5a:7d:9b:f4:21:74:a2:
5c:c7:25:60:8e:51:b2:ed:4e:eb:14:31:b3:64:16:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:E0:6B:33:E9:E8:71:38:0B:4C:FD:BC:CF:19:26:77:AA:A6:62
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:eb:7c:d5:e0:6d:e1:95:20:f3:ca:70:87:68:c1:5d:bf:a3:
1f:63:82:b8:57:4b:6f:85:4c:59:c5:35:8e:4f:4d:0f:9e:bb:
71:74:c4:98:2d:f8:a0:f2:9c:4c:26:df:cc:07:c7:64:ac:06:
f4:00:6c:8b:10:b7:a5:bf:7d:3a:ae:27:49:67:f8:dd:59:36:
b2:90:b2:3f:99:58:4f:84:e0:25:98:5f:61:d3:3d:a6:aa:6a:
21:e8:54:b3:5f:f9:51:c4:ee:69:a3:18:85:95:c1:db:db:aa:
7f:c1:28:5c:9b:70:6d:89:72:54:04:5e:32:62:02:7b:b8:2d:
d5:a1:6e:da:be:d3:86:7f:48:9c:48:ae:d0:e1:7a:3d:f8:40:
d3:9f:e8:c9:04:b3:76:ae:e1:c6:85:4c:d5:d3:5d:73:b1:75:
61:1d:58:20:60:ab:b0:70:21:c0:97:71:87:63:72:e1:8a:0c:
6a:a9:c1:b6:99:59:ba:8a:9f:a5:48:53:d3:4a:c1:ac:67:5e:
f3:3c:1c:5e:d0:65:2b:37:51:11:68:19:56:54:2f:82:ec:aa:
65:bc:d6:66:f6:80:15:5e:88:e6:55:ea:22:cb:75:b1:7e:03:
44:ab:a2:4a:e8:c4:8f:80:82:ba:d6:2f:d4:c8:66:cd:9a:52:
12:52:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:20 2025 by rpki-client