Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
File: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier: XLWG64SYarW1CuFL6R/opP71s+7iNDgB7ZbZqmi22qM=
Subject key identifier: 06:D4:B0:ED:0D:2D:EE:75:B5:B3:88:83:D4:E2:2D:86:23:25:50:4D
Certificate issuer: /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial: 35345E3D0B4EC80437978A085DFF9A2B11885AD1
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
Signing time: Wed 31 Jan 2024 18:00:00 +0000
ROA not before: Wed 31 Jan 2024 17:55:00 +0000
ROA not after: Wed 29 Jan 2025 18:00:00 +0000
asID: 262755
IP address blocks: 138.0.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:34:5e:3d:0b:4e:c8:04:37:97:8a:08:5d:ff:9a:2b:11:88:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Validity
Not Before: Jan 31 17:55:00 2024 GMT
Not After : Jan 29 18:00:00 2025 GMT
Subject: CN=06D4B0ED0D2DEE75B5B38883D4E22D862325504D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:86:cd:60:36:c6:0c:32:45:8e:89:77:cf:
03:61:41:13:d5:f3:dd:b6:91:92:91:02:d9:19:02:
ee:04:09:44:f8:64:25:4c:e7:e1:18:b0:6b:63:8f:
23:23:a8:5e:07:4d:4a:af:fc:4e:7d:38:79:7b:37:
6b:f3:80:09:58:0b:03:72:4b:74:5a:87:20:c2:9c:
5c:16:f0:da:db:b9:5d:d0:70:b5:88:3e:b3:61:8c:
60:b9:c0:47:f0:21:63:00:15:a0:4c:52:b8:d7:b6:
10:a9:b2:f9:4b:2b:50:24:92:c2:a6:3c:5b:d6:e0:
99:4b:78:9e:29:e1:96:ec:8c:cb:4e:14:4d:62:fe:
bb:08:c5:4c:35:15:cc:64:22:a2:62:c8:9b:70:aa:
f2:1d:1e:9d:6c:2b:c9:bf:ea:1e:c1:b9:d8:95:52:
bf:c8:30:4f:48:e8:50:85:fe:92:20:65:a9:46:0f:
71:08:4f:43:a3:6d:1e:6b:46:d7:38:69:31:a6:b2:
65:ea:13:b2:55:48:ed:83:f1:e9:74:68:72:dd:90:
7a:60:9d:86:f3:65:54:78:3f:00:cf:25:79:1b:01:
73:92:6e:2c:72:bd:b7:09:bf:55:f2:e5:74:69:dd:
a3:51:af:65:09:8c:d1:79:2a:71:84:a3:c8:76:43:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:B0:ED:0D:2D:EE:75:B5:B3:88:83:D4:E2:2D:86:23:25:50:4D
X509v3 Authority Key Identifier:
keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:9e:e0:51:e5:e3:f2:2e:7a:86:16:54:27:02:dd:69:f5:86:
0e:e1:ef:a3:f1:21:40:24:3e:63:5f:95:db:5f:ca:1a:d7:6b:
3d:df:e9:14:c8:45:6c:63:eb:c4:39:2e:38:2d:81:0f:7d:a9:
e5:1f:b5:1e:69:d5:e5:71:48:45:81:22:4c:c9:c5:e3:5c:b9:
fb:f1:e5:ae:08:0d:f6:3e:8c:85:30:91:72:5b:5a:0c:70:9e:
37:fa:c0:c8:d1:49:f5:ee:cd:35:b5:4d:ef:dc:80:d0:a8:e2:
76:6f:b2:4c:7e:c7:82:5c:65:60:80:75:49:c6:68:bd:6d:1e:
73:5b:7f:d6:65:d9:e5:02:1b:40:f3:a8:c4:c5:36:64:0b:86:
45:e2:ac:28:56:18:67:a6:d6:1b:74:3b:5c:15:97:76:37:15:
2d:ad:01:21:62:20:c3:15:67:06:59:c8:a3:c7:f7:b5:ad:aa:
f3:72:43:61:77:80:0f:fd:5e:44:e0:73:93:9f:ed:23:85:b4:
4a:e6:78:ca:db:3b:49:92:a4:11:58:c5:95:e4:c9:18:c1:ca:
f1:e1:3e:9b:01:c4:09:3a:15:aa:02:fe:f7:81:aa:ee:3a:3c:
7a:41:11:5f:4c:2c:64:b4:6a:9d:8c:24:e1:a4:be:90:c7:27:
46:94:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:37 2025 by rpki-client