Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa
File: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (raw, json)
Hash identifier: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=
Subject key identifier: 88:63:B4:69:16:5A:C2:2D:76:3A:8F:7B:7C:F8:62:71:11:D6:2D:60
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 401593CE4B4A625B44F30B14A54353F6D0D5C191
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:51 +0000
ROA not before: Thu 20 Feb 2025 11:38:51 +0000
ROA not after: Thu 19 Feb 2026 11:43:51 +0000
asID: 263891
IP address blocks: 138.204.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:15:93:ce:4b:4a:62:5b:44:f3:0b:14:a5:43:53:f6:d0:d5:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:51 2025 GMT
Not After : Feb 19 11:43:51 2026 GMT
Subject: CN=8863B469165AC22D763A8F7B7CF8627111D62D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:2b:31:65:60:2a:a8:64:7e:6d:e7:ea:24:
30:f5:a4:b9:f5:1c:b8:56:b1:6e:66:96:f0:65:a5:
df:fb:38:ae:38:5e:0f:30:8a:8d:c8:71:48:f3:cd:
cc:d6:82:02:b4:70:42:47:5a:93:de:5d:fd:bf:35:
43:5d:c2:ac:42:d1:d6:f5:0d:29:19:28:d2:5d:70:
37:38:56:c7:2a:4b:e7:78:8d:e5:c7:5f:10:f8:20:
9d:8c:89:ac:2d:a0:8b:5d:b4:0a:f4:79:3d:74:b3:
cd:ef:d9:e6:e5:c7:11:10:49:8d:bb:80:d5:7d:e7:
46:33:db:f9:63:70:4d:e1:f3:a6:3a:eb:35:73:84:
d6:d7:3f:dc:0b:10:03:be:de:30:7d:31:68:5c:33:
06:87:44:6d:fa:17:bc:e9:cc:01:8f:cc:32:e5:cc:
48:d1:a0:0e:97:d6:3b:61:90:70:b8:d0:a6:5f:0c:
b3:7b:68:b5:fb:40:c7:38:92:dc:fc:a2:11:9a:9f:
46:3a:f2:d8:f2:1b:8b:23:54:15:2c:2e:f3:f3:a1:
9f:a5:74:2a:86:fe:67:7b:63:fa:d2:35:4f:35:c1:
74:31:71:44:1d:d2:8a:07:3b:50:31:d9:d2:dc:6d:
22:58:a5:13:d8:cc:57:4c:1f:41:dd:f1:a5:ce:e5:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:B4:69:16:5A:C2:2D:76:3A:8F:7B:7C:F8:62:71:11:D6:2D:60
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9a:a5:84:19:c1:8e:16:0d:d7:71:fc:ae:08:68:13:95:d2:
71:ac:17:85:18:17:c2:86:d1:83:29:24:c7:e4:5d:27:1f:04:
c0:48:66:f4:61:bc:96:2f:1b:4d:8b:51:45:00:c4:fa:3b:9f:
c1:d9:c9:ae:ee:21:10:2f:9a:31:dc:39:99:aa:95:85:51:7a:
b4:76:fa:65:a6:81:5f:ef:97:a0:9e:a1:fe:67:81:1d:00:35:
72:0d:31:8b:ae:20:bf:30:5b:04:22:ae:ab:e3:54:e7:07:41:
28:9b:29:bf:d2:53:80:23:01:84:8e:5a:9a:0e:9d:a1:18:5f:
83:9d:b3:68:db:84:a6:e7:97:1b:ef:68:08:d7:45:d0:3f:fb:
ed:a4:05:d8:3a:79:0c:6a:09:7e:86:fb:c5:05:46:59:99:98:
f2:e8:e2:15:02:bd:ed:8c:f7:49:d7:e7:08:e5:d1:aa:eb:84:
1d:14:b5:be:b4:c4:62:7b:7b:be:71:a1:f3:02:8c:20:f8:91:
84:a1:f1:99:c7:cb:e6:04:a7:67:d7:24:3f:b8:3c:f9:cb:9b:
1a:48:f2:38:dc:2c:5f:d6:6b:c5:f6:18:f4:22:9c:f0:f1:73:
79:9a:d5:43:4c:2a:ea:07:b1:8c:01:ee:08:d8:37:ae:66:a0:
ef:e9:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:15:00 2025 by rpki-client