Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa
File: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=
Subject key identifier: CF:F1:C2:6F:24:F9:C3:5D:13:AA:7C:D1:D9:47:58:21:FB:02:FC:72
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 2DE4FD1F878C2BB330793A58B509ADE1F526AB7B
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:52 +0000
ROA not before: Thu 20 Feb 2025 11:38:52 +0000
ROA not after: Thu 19 Feb 2026 11:43:52 +0000
asID: 263891
IP address blocks: 138.204.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e4:fd:1f:87:8c:2b:b3:30:79:3a:58:b5:09:ad:e1:f5:26:ab:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:52 2025 GMT
Not After : Feb 19 11:43:52 2026 GMT
Subject: CN=CFF1C26F24F9C35D13AA7CD1D9475821FB02FC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:0d:6c:7a:8e:7d:4e:1c:46:dd:b2:dd:82:
fa:e3:c3:8c:8c:c6:1d:e9:58:3a:5c:43:a6:c9:16:
ad:9b:38:97:a1:6c:ce:0f:82:eb:e6:8c:6b:2c:c8:
17:9e:b5:31:8f:81:11:d4:c7:15:c4:5c:4f:e1:61:
7b:8b:22:0e:a3:4c:1e:4b:f2:9f:b9:08:67:1b:1e:
b4:ce:10:a5:1d:ef:80:9e:f9:27:17:52:6b:93:f0:
d1:21:19:b2:6a:d5:d2:97:bf:2a:bf:de:98:b7:a1:
0e:c0:47:e8:ea:80:c7:4e:a5:81:c1:8d:1c:b7:32:
d1:ad:ed:ba:a9:5f:88:53:1f:b5:fa:e2:3f:b8:a1:
7e:f0:48:8a:88:b7:27:62:7b:7b:b0:a3:34:2f:42:
d7:91:6c:8a:28:fc:28:27:2f:fa:c9:fb:05:89:52:
ee:5d:34:c0:cf:e9:f0:49:b5:aa:6a:e1:0b:dc:23:
4d:6b:33:18:9e:ac:7c:d0:a0:92:ef:fe:ef:f9:a8:
49:6d:cb:e1:84:d1:ac:21:3c:36:45:a8:3c:50:e4:
dd:e7:59:93:e0:34:2e:2e:ef:be:c0:9a:65:9c:65:
8b:a3:46:48:2b:34:d0:92:09:0c:5b:27:46:69:06:
ba:00:d5:48:32:8e:c3:a5:37:43:db:c9:b9:78:30:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:C2:6F:24:F9:C3:5D:13:AA:7C:D1:D9:47:58:21:FB:02:FC:72
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.48.0/23
Signature Algorithm: sha256WithRSAEncryption
40:7c:73:2a:a6:67:2f:d2:cf:dd:90:e9:d1:d9:10:fb:5b:d5:
d5:1a:1e:01:9a:02:1b:4a:c5:3f:36:ef:99:18:04:58:e6:d5:
49:fe:16:84:fa:a1:2d:d5:95:ad:57:25:9c:63:4b:df:53:b9:
2a:d7:a9:f8:bd:37:f4:be:11:40:8e:96:a0:5e:61:0d:b3:81:
61:14:53:76:bd:d9:b2:0e:0a:cb:c5:0c:d1:ee:21:eb:8b:1a:
51:e2:94:b3:e9:73:29:62:04:d6:4e:aa:02:2c:3b:c1:eb:52:
40:c6:93:a7:14:09:02:0f:ca:47:4f:28:65:83:1c:84:72:f5:
5a:d9:f0:b1:b1:4a:28:58:9a:f0:a6:a7:bb:7e:8f:46:c1:31:
92:bd:89:f8:2c:a9:c2:12:ab:93:b6:58:e5:6c:f2:41:ac:30:
b0:af:67:84:24:a0:fc:9d:a4:f0:53:32:99:e3:bc:87:dc:07:
ef:e7:4c:73:78:9e:ec:82:27:da:9c:1f:38:95:ee:97:70:4d:
1e:62:a5:99:81:00:df:59:07:5e:36:52:5c:d6:a1:94:a0:38:
dc:25:43:b7:7c:a6:89:b6:00:18:48:ca:22:f5:c1:e6:8b:ba:
f9:f7:e5:61:49:47:df:c8:2a:33:f9:af:ee:70:d5:d4:2d:3c:
62:f6:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:52 2025 by rpki-client