Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
File: 3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa (raw, json)
Hash identifier: St9xLoJO7yprz2zWLEPOxauFd+QcS8I366/H4EFrTno=
Subject key identifier: 46:EF:E7:0E:8C:FD:3D:B4:8F:86:90:DB:27:66:63:08:8A:57:C9:ED
Certificate issuer: /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial: 29A0BB5BDA15E6C0AE4755EF3DFC364907232B81
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
Signing time: Tue 05 Dec 2023 23:00:00 +0000
ROA not before: Tue 05 Dec 2023 22:55:00 +0000
ROA not after: Tue 03 Dec 2024 23:00:00 +0000
asID: 263994
IP address blocks: 138.255.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a0:bb:5b:da:15:e6:c0:ae:47:55:ef:3d:fc:36:49:07:23:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Validity
Not Before: Dec 5 22:55:00 2023 GMT
Not After : Dec 3 23:00:00 2024 GMT
Subject: CN=46EFE70E8CFD3DB48F8690DB276663088A57C9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:ff:41:50:66:6e:36:37:96:d9:71:4c:84:
2a:1c:b5:ed:a8:b4:b5:0e:b0:a7:0b:d2:f6:27:bc:
4c:3d:fa:15:3e:f0:e4:5a:e4:7f:04:a3:25:cd:17:
03:46:d9:cf:ad:66:7a:24:ce:68:bc:31:78:36:fe:
cc:63:5b:b6:5a:d8:c5:e4:01:ba:2d:df:05:c4:8d:
0b:27:b5:4f:ef:f0:15:13:fb:da:ac:23:4f:8c:8a:
04:1e:66:66:6d:7a:5d:75:e7:73:1e:f7:e0:21:bf:
75:69:23:ee:19:35:6b:2b:6a:b0:51:9a:82:29:b0:
fa:50:38:61:87:3c:d7:79:44:da:6b:1a:4a:d4:0a:
f4:80:78:b0:fd:3d:d1:8a:5d:f7:5f:e8:53:f8:84:
d0:dd:da:3f:e6:36:53:18:69:f1:82:23:b4:86:82:
1f:0d:04:52:82:2c:c8:4e:cc:6a:76:c4:2a:25:eb:
9b:33:2d:47:56:9d:a3:5b:3b:05:72:e4:7e:61:ac:
a4:d6:29:5d:06:63:4e:dc:9d:83:80:f8:19:d8:c2:
d6:5a:47:80:3c:16:7f:f7:82:42:00:ee:c9:68:82:
3d:16:ad:ab:5a:55:79:8a:e6:e9:23:23:f6:71:b5:
77:5a:47:11:6e:6c:ba:c8:35:b8:5a:1e:8f:51:54:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:E7:0E:8C:FD:3D:B4:8F:86:90:DB:27:66:63:08:8A:57:C9:ED
X509v3 Authority Key Identifier:
keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
27:72:b1:d7:d0:4d:a9:bb:96:66:1d:80:0e:42:56:f2:f4:85:
85:3b:36:0c:15:11:21:dc:6e:d9:c8:ce:be:f3:fe:a4:bb:e2:
96:d2:36:72:c5:fd:00:31:3b:10:38:b4:62:51:f9:e0:ac:8d:
f1:9a:cc:63:76:b6:81:46:6a:81:3b:5b:95:18:19:8c:0e:47:
d8:c6:10:82:7e:10:2f:80:a5:e8:4b:0e:09:e7:53:08:91:df:
0b:00:ad:d7:8e:28:ed:d9:7b:05:e0:77:18:b8:c8:98:12:b6:
40:6f:b7:1f:65:42:76:f2:00:a2:9b:0e:5c:f9:20:f9:40:e5:
a0:1c:e1:3d:b9:3b:e4:4f:4a:69:69:c9:f7:24:d7:57:3d:01:
8d:c4:6a:63:5a:a6:6b:e3:29:03:e2:f3:c6:2f:26:33:a6:10:
c2:d7:ca:07:6a:30:e5:e1:bf:ab:c1:64:43:fa:97:e9:13:78:
49:68:89:51:1c:bc:a7:8d:80:62:b9:fd:5a:2e:31:e4:27:92:
37:01:a5:c9:87:d3:54:d1:f0:af:7f:dd:1d:41:35:cc:58:e1:
66:3b:37:7f:27:59:fc:55:28:7d:fb:5d:a3:ad:49:bd:cc:43:
73:5e:b8:92:a7:dc:e4:93:c9:b3:64:5a:3c:30:9b:e0:64:8a:
8b:f2:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:32 2025 by rpki-client