Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
File: 3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa (raw, json)
Hash identifier: OAh2Zu9zeQQNLDK72rKRDpQatBvIhZDLSSOgYYoKdKI=
Subject key identifier: 33:FD:4D:69:39:48:0F:96:0F:AD:D2:33:4C:B1:7C:9A:84:53:14:E3
Certificate issuer: /CN=87BE9690671D22465C437B3BE3D6736CF0768A73
Certificate serial: 617ABFACAD8756414B492DDD5591E43A6A0EF63B
Authority key identifier: 87:BE:96:90:67:1D:22:46:5C:43:7B:3B:E3:D6:73:6C:F0:76:8A:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BE9690671D22465C437B3BE3D6736CF0768A73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
Signing time: Thu 13 Feb 2025 17:31:37 +0000
ROA not before: Thu 13 Feb 2025 17:26:37 +0000
ROA not after: Thu 12 Feb 2026 17:31:37 +0000
asID: 264591
IP address blocks: 138.36.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7a:bf:ac:ad:87:56:41:4b:49:2d:dd:55:91:e4:3a:6a:0e:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87BE9690671D22465C437B3BE3D6736CF0768A73
Validity
Not Before: Feb 13 17:26:37 2025 GMT
Not After : Feb 12 17:31:37 2026 GMT
Subject: CN=33FD4D6939480F960FADD2334CB17C9A845314E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:29:c4:3a:fe:de:e2:63:0b:75:4a:4f:da:20:
da:1b:bb:08:5c:93:4a:cc:ac:a6:74:bb:82:37:30:
30:c5:47:35:79:53:fc:73:a5:f7:ed:ba:3b:5b:13:
5f:2d:dc:12:15:29:9e:89:58:05:a3:d2:52:6e:75:
8a:a7:1f:00:68:c7:70:e8:7d:61:54:34:13:b6:f8:
c2:e4:2c:f2:c4:73:89:53:71:4f:f9:2d:25:d5:0a:
98:3b:95:07:e2:e0:e4:25:58:27:82:5a:54:65:3b:
50:ea:d9:f3:92:ae:96:5c:87:2e:a9:33:ee:89:11:
70:4a:8a:35:38:ce:da:c4:da:ac:55:2b:dd:61:35:
be:53:a5:5d:3a:92:c0:df:27:66:ca:44:a2:59:15:
b7:50:d1:37:dd:d9:90:5f:a7:64:ac:56:0b:ef:d3:
10:5f:06:d4:80:b8:9f:df:a9:e9:73:f8:af:71:b5:
31:6a:03:b1:bc:b4:1a:6c:f7:e9:40:c2:48:38:8a:
bf:c5:2d:0a:4c:7d:24:57:43:98:e7:33:1d:81:1d:
d9:b3:b9:cb:c5:33:6e:ef:a5:14:31:a5:c0:13:47:
a7:3e:2b:ff:78:3d:a7:be:22:24:26:d1:60:c7:05:
5e:ce:c8:f1:fa:d5:8a:29:27:32:1e:b2:65:81:50:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:4D:69:39:48:0F:96:0F:AD:D2:33:4C:B1:7C:9A:84:53:14:E3
X509v3 Authority Key Identifier:
keyid:87:BE:96:90:67:1D:22:46:5C:43:7B:3B:E3:D6:73:6C:F0:76:8A:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/87BE9690671D22465C437B3BE3D6736CF0768A73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BE9690671D22465C437B3BE3D6736CF0768A73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.200.0/22
Signature Algorithm: sha256WithRSAEncryption
76:d3:92:58:90:85:dd:7d:39:3d:ca:17:72:96:c0:82:07:f4:
8d:8c:9e:e1:3d:e0:05:4b:46:e6:4d:88:f5:8c:a0:ba:76:82:
96:70:e0:4b:9a:30:a6:41:c1:59:eb:6f:76:1a:07:34:e3:d3:
b8:5a:80:7c:3e:9b:12:b8:43:1b:e4:ca:3c:6e:8b:4a:6f:b6:
e9:5e:ba:6d:7b:f3:a4:d5:5b:67:ce:fc:d3:89:a9:46:31:17:
19:aa:8c:d7:a7:fb:a7:ea:c4:97:61:7d:89:95:d7:d7:d4:90:
e4:b2:e2:6b:c1:63:62:08:c0:3b:4c:3d:79:0a:d3:30:3f:cd:
b4:70:cf:4d:dc:37:29:64:b5:5f:a3:5a:9a:ee:b3:3c:28:3b:
48:60:4f:df:ec:72:b9:0c:88:80:87:0b:84:3c:b1:62:96:d3:
95:04:e3:fb:e6:bc:29:c1:7d:62:ad:28:62:6e:49:04:99:49:
7a:c6:6d:b8:22:81:52:d1:8c:6f:65:13:83:57:4d:75:26:cf:
fa:60:d3:38:4e:0b:d4:38:89:2a:76:0c:33:5b:70:f9:90:62:
18:cf:1a:90:09:e0:03:0b:b7:28:81:9c:43:c8:ea:ee:93:25:
64:4c:b4:16:de:c0:02:86:f1:af:a0:87:b8:d8:20:10:3e:1e:
c5:a7:d5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:43:29 2025 by rpki-client