Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa
File: 3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier: vw82e6GeMXu32o6p+dg5RCcAsWft8wmTxctHqNEkxHA=
Subject key identifier: CA:8B:E6:67:59:36:3E:7B:46:58:26:C8:C2:CD:A8:D6:77:80:9D:26
Certificate issuer: /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial: 44AA0C57E1231169DBF600A9570422AED429D150
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa
Signing time: Sat 30 Mar 2024 00:41:05 +0000
ROA not before: Sat 30 Mar 2024 00:36:05 +0000
ROA not after: Sat 29 Mar 2025 00:41:05 +0000
asID: 264208
IP address blocks: 138.97.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:aa:0c:57:e1:23:11:69:db:f6:00:a9:57:04:22:ae:d4:29:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Validity
Not Before: Mar 30 00:36:05 2024 GMT
Not After : Mar 29 00:41:05 2025 GMT
Subject: CN=CA8BE66759363E7B465826C8C2CDA8D677809D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:29:70:9f:30:41:e1:02:80:b3:67:73:01:
49:b0:34:85:43:4d:cc:d8:f0:c1:f9:d1:33:13:72:
9e:66:45:d9:2b:fd:2e:68:56:6c:90:28:dd:b4:1a:
96:fa:16:e4:30:ca:d0:34:54:ee:f6:47:af:df:24:
ea:53:fd:e1:0c:98:fb:28:ad:e1:68:19:aa:e2:ca:
4b:18:2f:7a:eb:4a:a8:11:53:06:6a:0b:9a:28:70:
a8:2e:26:28:c8:94:38:c6:43:60:26:e2:72:06:28:
e6:a1:c6:42:45:d7:bc:6a:5a:a8:44:c5:6f:3d:4b:
4d:d8:bc:98:fc:4b:54:77:2e:07:6c:c6:d4:4f:41:
b3:85:96:24:4a:31:b0:6a:11:76:af:2f:a4:b9:bf:
5b:ef:ac:4a:0c:ba:be:cd:d7:e6:f1:04:3f:d7:76:
8d:be:79:3f:e0:e2:5f:67:ba:b3:56:6a:31:01:9f:
eb:ee:a3:ae:43:40:bb:9b:d4:64:b4:3f:cc:12:61:
78:2f:d7:f9:bf:0e:f6:4d:27:25:76:c6:a0:f9:0a:
ed:e7:3c:f4:70:a8:30:cc:7d:b3:d8:75:21:64:66:
a5:d9:8d:ca:96:ba:9d:ca:04:46:a6:c5:6d:5f:90:
ce:87:47:4c:01:6d:eb:30:c4:e0:b6:55:89:f6:44:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:E6:67:59:36:3E:7B:46:58:26:C8:C2:CD:A8:D6:77:80:9D:26
X509v3 Authority Key Identifier:
keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:73:45:0f:4b:e3:46:6c:dc:94:2a:29:a2:d6:ff:7f:b0:5d:
ca:89:9e:f1:3c:ee:a1:d4:62:5f:6c:4e:e6:0f:8f:78:5c:63:
9e:72:ec:9f:0d:51:c3:6e:7b:87:24:3c:da:c2:3d:b4:78:c4:
ab:0d:4e:ca:ad:e2:e6:23:8b:99:b5:5b:96:53:c5:98:87:57:
e0:6f:64:b3:4a:4b:e0:73:36:34:4e:42:3a:a9:61:8a:7b:72:
26:a2:8f:52:b5:6d:cb:0e:c6:01:a4:0c:df:2b:c8:73:14:65:
c7:68:7e:43:4d:89:0c:e8:44:10:30:05:e3:11:68:18:02:4b:
bb:20:80:e7:8c:57:b8:17:0a:c6:4b:ec:20:27:5c:3f:75:51:
86:0b:69:88:16:ff:ba:74:99:5b:fa:09:13:57:ab:d2:18:dd:
df:7e:5c:f8:7f:12:7b:c7:0a:78:0b:c5:3e:69:04:da:22:2e:
63:be:f7:ed:a3:3a:5f:7b:c3:48:68:ec:fd:b7:4e:e8:8f:39:
d8:23:af:b8:f2:03:77:23:57:80:93:11:58:d9:36:6c:6b:9b:
46:21:80:2e:d3:a0:fd:08:e9:53:6b:93:d5:fc:8a:3c:80:b1:
ca:9d:7a:c4:6e:14:06:0e:e8:5b:99:37:3e:40:b7:fc:97:fc:
40:31:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:13 2025 by rpki-client