Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32332d3233203d3e20323634333030.roa
File: 3133382e3132312e3133342e302f32332d3233203d3e20323634333030.roa (raw, json)
Hash identifier: CcK9/Ik/J6XYmUr392ZKQiE80UFvsORMHIMQ+64Dxwg=
Subject key identifier: 00:8A:43:7C:37:6C:D1:9D:C4:69:6F:52:A7:02:88:AF:82:54:C2:C0
Certificate issuer: /CN=895610FCEC55587ED75C0DE6D234563F371B0004
Certificate serial: 086CC17FDFEB87C2EFD350725F4AC07471363924
Authority key identifier: 89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32332d3233203d3e20323634333030.roa
Signing time: Tue 17 Jan 2023 04:13:22 +0000
ROA not before: Tue 17 Jan 2023 04:08:22 +0000
ROA not after: Tue 16 Jan 2024 04:13:22 +0000
asID: 264300
IP address blocks: 138.121.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6c:c1:7f:df:eb:87:c2:ef:d3:50:72:5f:4a:c0:74:71:36:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895610FCEC55587ED75C0DE6D234563F371B0004
Validity
Not Before: Jan 17 04:08:22 2023 GMT
Not After : Jan 16 04:13:22 2024 GMT
Subject: CN=008A437C376CD19DC4696F52A70288AF8254C2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:a2:db:27:25:45:72:38:87:85:90:07:c4:
31:a3:3d:fb:a8:be:cc:02:1f:81:5f:b9:b2:4e:e3:
c0:bc:24:c3:f9:2c:84:e5:5b:ea:f8:de:fb:8f:78:
07:33:64:f6:be:7d:81:0c:6c:ae:35:a0:46:63:56:
52:d4:fa:07:df:14:5d:8c:65:c0:65:64:b8:05:de:
95:3b:23:b4:31:cb:e1:50:d5:85:41:df:a0:f3:50:
21:55:7b:6e:e7:3a:9a:e5:a6:e5:45:7b:21:e1:1c:
e3:27:c8:4c:17:c7:2d:da:43:95:6c:c2:f3:1c:85:
6f:0d:3a:38:4b:a1:ec:0a:3a:6d:b1:df:fa:67:8e:
d7:aa:84:38:7a:9c:e4:55:72:ff:30:af:73:31:35:
af:08:85:14:8e:9a:44:b6:07:ad:e8:ec:0e:16:0f:
4e:a9:a7:c0:6b:8e:a3:73:25:cb:3e:eb:0e:e0:19:
ed:c7:06:1c:e4:97:07:f5:db:b9:c9:2d:3f:c6:4a:
b8:2f:07:fb:bf:fe:15:44:61:79:ee:5f:ed:7b:1d:
e2:91:0b:61:e0:d9:5d:a7:7e:de:83:95:ef:4a:69:
7d:c2:3c:80:1d:b4:1d:ec:34:c5:ab:ee:31:41:d7:
81:17:12:a8:6c:12:92:b0:19:86:8b:42:b7:68:de:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:43:7C:37:6C:D1:9D:C4:69:6F:52:A7:02:88:AF:82:54:C2:C0
X509v3 Authority Key Identifier:
keyid:89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/895610FCEC55587ED75C0DE6D234563F371B0004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32332d3233203d3e20323634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.134.0/23
Signature Algorithm: sha256WithRSAEncryption
70:6d:ed:70:c9:87:45:79:bd:cb:1a:ea:cf:c6:26:96:ff:9b:
40:3f:a0:26:5e:72:35:84:35:45:3d:2e:e9:9d:8a:35:4c:f3:
0d:f9:52:b4:43:5f:3c:bb:04:03:b3:85:50:f3:07:3e:7c:3f:
b0:a5:cc:69:69:17:fd:e5:1c:a2:bb:40:c0:7a:c2:f6:f0:2d:
8a:82:4c:70:e8:2d:1d:46:6d:eb:c5:f4:4d:ad:29:2f:84:57:
be:c3:c3:5f:06:84:1d:b8:24:43:f7:1e:c8:02:93:f6:d7:82:
1e:31:71:1e:4b:4e:8f:38:6f:18:56:0e:3f:2c:81:02:50:c2:
58:d3:f3:65:d2:bf:34:03:ec:34:95:8c:89:6a:71:e8:14:32:
77:d1:f9:50:a7:07:38:e2:2f:11:8b:17:60:e9:2b:a5:16:4f:
46:a6:0c:11:f3:0d:ce:b9:fa:72:fb:d7:ff:fd:ae:ec:f6:11:
d3:91:00:9f:71:53:97:77:36:d0:55:b0:d8:c0:6f:5f:bb:da:
cc:c9:d5:d2:5f:78:70:f1:69:7a:b7:06:11:0c:8e:23:83:5d:
ed:2e:35:2e:66:cc:be:0d:a6:89:6c:ba:4f:ee:b2:75:9f:c8:
fe:f3:24:7b:1c:0b:71:41:cc:8b:01:4c:f0:48:c6:02:8a:1e:
5a:e9:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client