Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa
File: 3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa (raw, json)
Hash identifier: nxlP8mM8UbiZ4mTtBM/8KvED9togBq9PDKzZ6ApBGGg=
Subject key identifier: B4:0D:FA:E4:F2:19:46:A3:AA:F3:70:FF:77:DD:16:09:2A:18:D8:C0
Certificate issuer: /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial: 076F705F01570739E1D731D1510207E9023521CE
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa
Signing time: Sat 30 Mar 2024 00:41:05 +0000
ROA not before: Sat 30 Mar 2024 00:36:05 +0000
ROA not after: Sat 29 Mar 2025 00:41:05 +0000
asID: 264208
IP address blocks: 138.97.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6f:70:5f:01:57:07:39:e1:d7:31:d1:51:02:07:e9:02:35:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Validity
Not Before: Mar 30 00:36:05 2024 GMT
Not After : Mar 29 00:41:05 2025 GMT
Subject: CN=B40DFAE4F21946A3AAF370FF77DD16092A18D8C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:25:91:28:f2:80:0d:c3:99:99:86:d0:40:
10:5b:aa:11:a0:1c:20:5c:21:04:5f:21:f6:a6:42:
38:ac:56:3e:7f:fe:8e:79:f1:cb:5c:a4:26:eb:00:
ba:f9:e3:69:c5:6a:cc:85:1d:d2:88:e8:07:cf:40:
4a:f0:d4:d3:d4:f3:76:2f:ab:df:db:d5:9b:3f:20:
b5:aa:bf:ff:f6:29:f1:78:ea:f7:e3:09:f2:9b:73:
9e:44:b0:fe:2e:9e:bf:da:8c:9b:7f:e4:0e:ac:67:
28:e5:d1:78:dd:f7:da:8d:48:b5:f5:24:c6:05:08:
de:05:3b:f0:ac:4e:ef:86:81:2b:87:dc:db:80:ed:
7c:df:73:41:ae:a0:10:ed:67:57:b0:0a:6c:40:92:
10:64:41:6f:22:95:6d:ad:bc:17:dd:7c:67:2e:0e:
e4:31:47:b0:eb:27:2b:01:68:5b:63:3d:0e:6c:4c:
3c:1c:66:27:e3:5a:cb:2a:8d:c1:01:94:0e:8d:1b:
37:bb:49:ac:6d:43:8d:52:7b:63:59:ec:70:7a:5c:
f4:68:16:de:4c:d7:7b:b3:ad:6f:1c:5e:dc:09:9d:
b2:13:a3:84:0d:8f:2c:00:1d:c5:3f:58:e3:98:eb:
84:34:eb:6b:2c:7a:67:6e:44:89:00:6d:51:26:75:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:FA:E4:F2:19:46:A3:AA:F3:70:FF:77:DD:16:09:2A:18:D8:C0
X509v3 Authority Key Identifier:
keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:9b:b0:46:e2:59:ac:4e:1c:ec:b7:ed:25:ed:04:a7:ce:4d:
b3:a5:a9:22:3a:ae:a9:f8:b4:22:fb:af:57:30:90:06:59:86:
36:e9:a4:aa:59:73:20:7c:a3:7c:e5:3a:c3:98:65:d8:28:58:
55:b7:f3:74:7c:74:30:f8:ca:31:98:b2:62:db:6c:95:11:d3:
56:73:34:44:73:c7:4d:32:d9:1f:b2:e1:06:53:35:58:9e:e9:
6e:6c:46:3c:f6:8e:46:dc:9a:1d:04:2c:35:4d:ac:86:b1:a9:
25:5c:bd:82:b6:ab:43:d2:36:b8:e2:75:03:a4:c3:50:5f:de:
34:19:dc:0a:e7:e6:15:90:47:f6:60:71:46:99:b8:f2:75:5c:
97:cb:c5:0c:fd:2f:3a:51:54:37:31:d5:d4:a9:5f:1b:ec:a7:
86:8f:a9:eb:67:e6:e1:a3:10:ba:1d:77:1c:16:7b:c6:1e:82:
6c:d0:e6:83:86:c0:c8:f0:3c:6c:bb:06:86:ef:d0:74:3e:bb:
85:70:e4:c1:77:59:39:c6:95:dc:1b:ee:ce:d1:16:57:2d:f0:
47:7a:ba:6d:51:8c:e3:df:75:f7:c8:1c:18:aa:bc:c2:69:1d:
52:80:35:e0:9b:0b:54:ac:ed:4f:35:8d:41:e4:2b:ac:fa:35:
11:57:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:30:44 2025 by rpki-client