Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
File: 3133382e35392e32302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: JiHQclm/n9WlH0b970EnEDV6IJFQjALh7O++Sac28aA=
Subject key identifier: 0E:7D:25:59:07:09:6D:D7:9E:4A:F4:C8:B8:E9:52:E6:9E:5B:E6:0A
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 3FE13A106F6F9FD22D11FFA27BEC26923306CFA3
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:33:52 +0000
ROA not before: Wed 10 Apr 2024 12:28:52 +0000
ROA not after: Wed 09 Apr 2025 12:33:52 +0000
asID: 28201
IP address blocks: 138.59.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e1:3a:10:6f:6f:9f:d2:2d:11:ff:a2:7b:ec:26:92:33:06:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:28:52 2024 GMT
Not After : Apr 9 12:33:52 2025 GMT
Subject: CN=0E7D255907096DD79E4AF4C8B8E952E69E5BE60A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:b8:94:08:8f:9d:d9:4b:5c:d0:ba:f2:c1:
5f:27:ba:ce:5b:ee:1a:14:91:68:d2:f1:dc:85:ca:
5d:9f:72:38:35:0b:e1:51:59:69:d6:9b:4d:09:03:
c9:95:67:71:bc:a7:80:f5:1d:28:09:2d:49:cc:33:
fb:ae:58:af:6e:82:33:0f:57:2a:8e:67:73:14:99:
fd:68:27:ca:f2:08:32:77:68:7e:b6:e0:6f:c4:cb:
f4:01:23:a2:1a:62:64:ed:24:48:6e:7a:2c:38:b9:
5a:52:8e:38:68:05:29:f0:93:c5:3f:61:c7:e6:f1:
84:26:6d:dd:b5:5e:ea:86:23:3c:2b:51:b9:78:27:
6e:1f:ef:40:5e:32:cf:82:7e:53:7f:86:7d:6f:e5:
35:99:52:4b:c6:77:64:e3:85:86:db:3c:ba:3a:45:
75:57:9a:4f:36:ed:8e:03:6a:a2:95:b4:85:23:c4:
cc:e9:72:23:20:d8:c9:88:64:19:30:78:eb:f7:c3:
3a:cf:3b:95:9c:53:4a:e7:8e:4e:d4:6c:c0:49:3d:
75:8c:45:1d:2c:1b:fb:ea:98:48:06:a5:ff:39:3c:
e3:5c:24:c8:be:41:b3:6c:af:bc:95:84:6a:6e:15:
28:39:18:e3:86:26:04:25:be:50:64:cf:52:8c:db:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:25:59:07:09:6D:D7:9E:4A:F4:C8:B8:E9:52:E6:9E:5B:E6:0A
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ef:c8:f3:b9:0b:d6:75:c8:9b:cb:90:13:e3:f7:40:e4:3b:
f6:6c:b7:54:88:95:6c:1e:5b:3d:1a:fc:2f:a9:dd:09:d6:39:
2d:f0:87:7c:1a:55:7d:26:7f:89:48:60:62:68:44:45:bf:c7:
b9:6d:c6:ee:04:54:c7:56:87:d9:04:9c:19:55:f0:09:f2:98:
de:b2:e7:f5:06:34:6e:de:71:5d:2b:11:e4:2f:56:33:64:c8:
cf:d5:91:eb:41:da:d2:24:23:99:e5:3c:2d:2d:77:05:49:60:
96:1d:9b:64:c2:0d:60:da:7c:97:d2:47:13:e0:b9:86:2a:f6:
f7:da:93:26:34:84:74:67:17:ab:e5:02:21:f8:91:b3:5b:5d:
74:27:2b:2f:44:05:d0:96:25:4e:db:17:4e:ae:65:a6:5c:ca:
bf:64:a6:85:01:46:35:7c:f8:37:3a:66:61:8f:4c:71:da:97:
f3:74:0c:1b:61:6a:90:57:a0:6a:85:34:88:8d:58:e8:45:54:
7b:6a:c3:8b:68:3d:b9:c9:b1:fd:a0:85:92:5c:01:7b:d4:5a:
83:42:05:8d:c4:3a:2d:36:ec:f5:f8:c7:f3:73:cd:89:6c:1d:
b1:0a:76:6f:05:ed:00:e1:ab:0d:c7:ea:75:8f:48:7a:bc:39:
d2:88:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org