Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
File: 3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: UKqOfrWl7Aqw0+/hIr3pyl99Hf/nBMmOxmN90InkMDQ=
Subject key identifier: B8:42:12:E0:8A:DA:BE:6D:DB:F2:27:53:AB:91:98:5D:2A:DE:95:30
Certificate issuer: /CN=097A379238840A51C27C092F1F3A3CA34B8AD37B
Certificate serial: 728248031EF47B959058488C1F257639FF7255A1
Authority key identifier: 09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
Signing time: Fri 03 May 2024 20:02:26 +0000
ROA not before: Fri 03 May 2024 19:57:26 +0000
ROA not after: Fri 02 May 2025 20:02:26 +0000
asID: 264299
IP address blocks: 138.121.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:82:48:03:1e:f4:7b:95:90:58:48:8c:1f:25:76:39:ff:72:55:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097A379238840A51C27C092F1F3A3CA34B8AD37B
Validity
Not Before: May 3 19:57:26 2024 GMT
Not After : May 2 20:02:26 2025 GMT
Subject: CN=B84212E08ADABE6DDBF22753AB91985D2ADE9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:3d:4e:50:dd:97:db:59:f6:09:6b:48:23:
d2:c8:b4:bd:a4:a1:cc:56:f2:d8:42:3a:f3:1d:3e:
09:0b:f1:80:76:1c:65:76:8c:53:38:86:ef:f4:5a:
be:5c:51:33:91:17:b6:07:09:91:95:6a:13:27:09:
c8:21:f5:93:4e:f3:eb:5f:45:f3:fc:fb:e9:41:5f:
44:d1:3d:2b:70:91:96:21:5b:43:5c:f0:c4:83:68:
bb:4b:d5:d0:14:f2:dd:6a:81:7d:64:0d:62:3b:b1:
08:e8:02:c7:30:87:4f:dd:c8:4c:71:b9:40:e3:39:
9b:83:51:c1:47:38:bb:8b:48:49:7b:18:0e:e2:37:
6f:13:7a:ff:75:a0:28:f3:53:3a:a3:23:9b:3e:f1:
70:74:46:84:d9:e3:e3:87:be:c0:86:d5:5c:58:29:
62:9f:c3:eb:db:e4:39:13:c8:cd:ae:d0:06:aa:a0:
40:96:39:78:59:a9:0e:51:14:d9:31:70:91:b3:c9:
01:e9:38:5c:03:bf:10:19:fe:8a:dd:5f:4e:a8:38:
65:8d:55:12:ac:93:05:c5:9e:1f:3f:31:98:39:a0:
54:00:81:0e:15:88:1d:c4:11:f2:ec:d8:75:c4:3a:
7c:4a:de:a8:df:f6:6f:8f:6f:c7:6f:94:5d:c0:e4:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:12:E0:8A:DA:BE:6D:DB:F2:27:53:AB:91:98:5D:2A:DE:95:30
X509v3 Authority Key Identifier:
keyid:09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:85:49:07:db:da:7d:1f:e4:72:4d:35:a2:a0:e2:65:1a:04:
c2:cf:43:c7:90:b2:be:a4:dc:0b:c8:d3:92:b5:1d:d4:b3:18:
f2:20:b1:1d:45:7e:61:8d:2b:eb:25:00:44:fc:80:84:3e:6c:
b8:b9:fd:26:c0:ee:f2:cc:c2:5d:7d:2a:ec:ef:f6:67:70:93:
df:40:61:e7:6b:29:4c:97:6a:3c:33:11:ad:57:02:2b:3f:6d:
bf:de:95:55:88:de:b2:e3:07:16:01:89:e9:84:3e:b5:5d:0b:
38:86:dd:b5:4d:a6:1d:da:c7:b0:05:85:7e:48:0f:4a:e0:35:
6c:17:49:f0:6f:8d:fd:c0:d0:90:a7:62:7a:b1:28:c3:0a:94:
68:22:64:7c:27:5d:b2:0a:f9:87:96:7d:de:bb:2d:7d:ae:f4:
81:5e:74:e0:ec:6b:ca:2a:91:c9:f2:03:b7:d8:e5:ac:c4:8c:
ed:ea:ad:ec:a3:be:89:42:fe:58:db:d8:6d:78:a0:a9:4f:41:
59:2d:00:73:c3:1b:77:ba:64:b1:82:a9:d9:45:52:fb:86:85:
61:18:75:09:0a:be:3b:75:19:f3:6d:ea:21:5a:51:b3:30:d9:
ab:86:5d:ac:04:83:b5:53:8b:0b:86:1b:73:9e:5f:90:8f:a1:
5f:73:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:10 2025 by rpki-client