Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa
File: 3133382e35392e3131322e302f32332d3233203d3e203238363036.roa (raw, json)
Hash identifier: 4azcvF/FDryzyC3jEsQNwSsBLE5KPmzTRuhX4B/00NE=
Subject key identifier: 29:B6:22:BA:63:BD:14:09:87:2A:38:1A:20:89:44:8A:68:76:F1:74
Certificate issuer: /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial: 67D6E75BE5A334018B6855DD4AEEF54D35799109
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa
Signing time: Wed 06 Mar 2024 21:12:35 +0000
ROA not before: Wed 06 Mar 2024 21:07:35 +0000
ROA not after: Wed 05 Mar 2025 21:12:35 +0000
asID: 28606
IP address blocks: 138.59.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d6:e7:5b:e5:a3:34:01:8b:68:55:dd:4a:ee:f5:4d:35:79:91:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Validity
Not Before: Mar 6 21:07:35 2024 GMT
Not After : Mar 5 21:12:35 2025 GMT
Subject: CN=29B622BA63BD1409872A381A2089448A6876F174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:21:81:d0:a7:41:4f:ff:46:10:52:1c:91:
b8:53:95:0d:25:94:c3:6c:3c:29:e4:22:a0:01:2d:
9e:54:15:70:dd:5a:cc:01:99:ad:54:55:d7:df:ad:
dd:c5:d4:19:b3:d6:52:7c:91:61:ee:c7:99:7a:d0:
e1:f7:64:ae:70:7e:26:12:44:bb:6f:8f:87:73:28:
50:50:45:bd:7c:8b:ee:c2:10:93:2b:21:02:ca:3e:
0a:0f:ce:1a:e4:1d:09:45:47:d2:5f:6f:9a:96:48:
45:e9:db:22:ae:0b:9b:14:d2:b2:02:fa:bf:84:de:
dc:ce:ec:ab:cd:bc:ac:34:10:69:50:d2:a7:7a:b0:
e0:1c:7a:09:bc:a4:21:df:00:fb:5c:98:df:52:76:
e3:87:7f:4d:90:6e:1c:e3:df:e9:e5:f3:d9:e1:28:
42:52:11:0b:3c:21:31:47:7a:fd:c4:4f:36:3e:69:
86:7b:c8:08:bd:ea:64:81:db:74:ea:12:79:35:f5:
4d:a7:c9:79:bb:62:4e:8e:f5:00:40:31:0e:6f:7c:
0a:f4:da:f8:e9:54:2c:37:9a:c8:74:06:17:e8:f2:
c4:d1:a6:9d:07:2e:ca:4a:e2:b0:8d:e6:0d:51:bd:
c3:d7:9a:78:3a:f0:a9:3a:a1:e8:f4:b4:f2:17:77:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:22:BA:63:BD:14:09:87:2A:38:1A:20:89:44:8A:68:76:F1:74
X509v3 Authority Key Identifier:
keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.112.0/23
Signature Algorithm: sha256WithRSAEncryption
97:6c:ff:c4:99:54:9e:04:cf:52:16:23:d6:57:39:67:1d:56:
2c:23:ac:10:c2:be:5a:db:ec:84:3f:e8:8e:5e:03:cc:f6:29:
65:60:61:72:86:ef:f4:f4:4a:91:cd:59:b8:be:89:53:cf:d6:
53:19:b1:7c:45:24:07:72:14:78:60:9a:cd:57:c9:33:2f:53:
60:11:ec:53:a1:92:d2:bf:5c:5b:e3:cc:96:70:8a:7b:1a:9a:
5a:7f:98:79:2b:72:20:0a:27:7a:6c:a7:46:03:55:b6:9c:5d:
8c:1d:f6:53:c4:cd:41:64:a9:11:4b:cb:88:e0:7a:e3:a7:04:
b9:71:ce:3c:b1:f9:dc:bb:b0:ff:17:e6:75:52:a2:f1:05:c3:
f3:22:20:91:35:16:3e:d3:09:b2:81:ed:15:b0:9a:ad:b4:6b:
94:8d:02:65:00:a3:18:09:bf:87:a8:c9:97:64:91:ce:e7:b8:
ed:6f:8b:df:60:34:cf:e6:7b:d5:19:2c:96:51:85:dc:17:50:
4f:61:98:3f:fd:38:5e:9c:99:bb:17:5d:0f:75:c5:c1:de:8b:
42:b0:68:06:32:89:0c:dd:7b:93:3d:ad:76:14:e1:b9:cc:69:
42:7e:b9:98:52:99:aa:2f:8b:77:64:75:a9:cd:7f:d8:91:59:
6e:29:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:09:27 2025 by rpki-client