Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa
File: 3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa (raw, json)
Hash identifier: vRdqvBcS6wzh70AdJdMwnYK375rJzMv53zpaj+dAMCQ=
Subject key identifier: B0:81:E7:31:E6:46:9A:78:E9:24:E3:58:C8:FE:BE:0B:95:E7:A8:F8
Certificate issuer: /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial: 2E26D5928A0920DD9719C0D64C6AD028AFE35D51
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa
Signing time: Sat 30 Mar 2024 00:34:14 +0000
ROA not before: Sat 30 Mar 2024 00:29:14 +0000
ROA not after: Sat 29 Mar 2025 00:34:14 +0000
asID: 264208
IP address blocks: 138.97.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:26:d5:92:8a:09:20:dd:97:19:c0:d6:4c:6a:d0:28:af:e3:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Validity
Not Before: Mar 30 00:29:14 2024 GMT
Not After : Mar 29 00:34:14 2025 GMT
Subject: CN=B081E731E6469A78E924E358C8FEBE0B95E7A8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:a4:9f:d5:3c:2f:e5:51:6c:3e:e3:6f:fa:
f9:ed:c7:c5:26:6c:33:36:cf:16:ab:20:65:b3:bb:
e4:c2:fb:53:f0:05:de:99:0f:1c:dd:f2:92:97:ad:
1b:e1:39:af:10:ab:f3:d9:8d:28:0c:55:95:52:dc:
17:9b:15:33:e3:d8:03:97:99:07:53:8c:86:83:f6:
79:fe:85:c0:78:4f:42:c9:8c:04:af:58:d7:9d:6f:
ac:4a:8b:c8:46:94:92:7b:02:4b:90:61:4a:f3:77:
3d:f3:97:a1:c7:95:c5:24:11:cd:00:6a:30:e9:cb:
1c:a5:0e:a7:51:ab:2e:10:cf:e3:37:d7:b8:bb:3a:
d3:3f:03:59:b9:7f:5f:4f:cc:a6:8d:4f:14:43:bf:
c2:be:ac:93:07:56:ea:c3:46:15:2e:89:96:73:27:
87:9a:0f:97:d6:be:e1:3b:f8:65:50:90:5c:3e:2f:
6a:20:17:25:dd:9d:ab:ba:da:8a:07:02:fd:79:89:
ff:c7:46:6e:2a:cb:9d:6c:f4:87:10:b7:81:78:b5:
98:8d:c1:50:92:fe:8f:81:bc:8f:a3:e2:c9:a0:e6:
80:cd:15:4f:20:06:75:bf:4b:ec:55:d2:8e:7f:bb:
80:e2:34:ea:12:a6:83:50:79:fc:f7:90:31:3d:e2:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:E7:31:E6:46:9A:78:E9:24:E3:58:C8:FE:BE:0B:95:E7:A8:F8
X509v3 Authority Key Identifier:
keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.224.0/22
Signature Algorithm: sha256WithRSAEncryption
91:28:98:34:d3:27:d0:23:f7:8c:0c:f7:f7:44:91:b9:3a:b9:
19:fd:52:42:f4:4a:cb:43:7a:bf:b7:4f:8d:f7:4a:e2:45:73:
97:f7:8c:28:99:f4:63:92:e9:10:d6:29:9c:83:5a:06:04:31:
bb:66:ef:5f:bc:bb:36:25:d7:f3:d4:2e:89:8c:a6:4b:a4:20:
49:ee:9c:30:06:53:60:2b:82:66:8e:e4:03:00:9f:25:5e:05:
42:03:6e:a5:5d:23:a7:cb:b1:95:de:4f:3a:7e:58:ab:41:7d:
7c:0b:9e:ca:ea:0e:7d:8d:49:9e:ec:37:4e:9c:75:d9:df:61:
b3:3a:16:8b:88:08:35:95:58:d6:af:41:f8:99:5e:93:78:f5:
8b:6a:22:b6:e3:d7:ce:ac:4c:6a:38:e1:93:90:ab:68:ca:2e:
ad:17:a9:28:6f:70:8f:7d:16:9a:1b:5f:a4:84:52:12:21:4f:
5d:8c:af:17:50:19:07:5e:74:e3:e0:19:a8:e7:40:6a:46:71:
eb:13:8d:da:45:1f:29:c7:ac:46:fb:fd:63:68:ad:f8:c2:e1:
72:8d:07:fe:4b:4b:cb:b9:31:49:05:e2:ea:85:4d:72:66:a0:
17:40:f4:f0:36:10:fa:0a:ac:ae:20:24:21:80:d8:76:5f:99:
52:7c:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:37 2025 by rpki-client