Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
File: 3133382e33362e38332e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier: zOzGICq9cgGLLQzIS4zvAJ5ASuBxJKAo9MqoG4gE2k0=
Subject key identifier: C4:99:0C:B7:E7:4D:B5:78:F2:E1:4B:1D:7E:2A:7C:63:59:04:B8:18
Certificate issuer: /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial: 641FE63AAB9B5E934F963355130366CC1B3D898A
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
Signing time: Mon 18 Sep 2023 14:00:00 +0000
ROA not before: Mon 18 Sep 2023 13:55:00 +0000
ROA not after: Mon 16 Sep 2024 14:00:00 +0000
asID: 264571
IP address blocks: 138.36.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1f:e6:3a:ab:9b:5e:93:4f:96:33:55:13:03:66:cc:1b:3d:89:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Validity
Not Before: Sep 18 13:55:00 2023 GMT
Not After : Sep 16 14:00:00 2024 GMT
Subject: CN=C4990CB7E74DB578F2E14B1D7E2A7C635904B818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:53:43:96:d1:34:5c:76:40:f1:65:82:71:
30:ce:30:72:d5:6f:31:ae:f8:93:88:82:09:d4:0f:
20:b5:c7:cf:e7:20:8a:ea:50:38:02:a2:da:74:0e:
13:06:7e:8a:e1:d6:6d:03:af:92:73:24:21:b0:d7:
51:ed:59:23:18:c5:a8:54:c9:cc:ab:3e:dd:35:96:
e6:a0:71:98:31:30:d2:99:f1:47:ab:e3:f4:03:3a:
78:90:a8:85:f1:4f:9b:e7:78:13:f7:e2:e2:94:a7:
6d:16:7f:a2:08:cc:83:e2:41:2f:35:5d:7c:9e:1b:
b5:f8:0a:b7:f7:6f:cd:10:af:3f:5f:ee:d5:cd:3a:
09:27:ae:3c:b5:03:38:50:9c:f7:c4:18:4f:f7:e7:
59:34:aa:41:69:a0:d6:07:5b:d6:21:a4:48:31:61:
32:76:a2:1d:8c:c6:95:2d:07:52:46:62:80:90:1e:
d3:ae:97:d0:f7:a2:6f:13:d5:90:ce:0f:7f:7b:8c:
49:c4:88:54:c1:23:9e:4f:c7:47:f0:e6:59:9d:a8:
34:68:0c:ca:a6:13:d8:59:9a:95:d3:7f:4f:c0:95:
48:53:83:75:f6:da:43:32:c9:20:6e:61:8a:c1:89:
ab:08:e0:39:6d:9e:34:2d:10:cf:fd:e5:f9:a0:c0:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:0C:B7:E7:4D:B5:78:F2:E1:4B:1D:7E:2A:7C:63:59:04:B8:18
X509v3 Authority Key Identifier:
keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8e:1c:c3:a8:f5:49:e1:be:49:31:68:8e:6d:18:3d:e4:24:
7f:29:1b:69:68:53:1d:9d:3b:23:f0:55:63:9b:53:91:b0:ab:
0f:3e:9d:a1:9c:f3:f7:51:2f:8b:0c:43:8e:fd:79:ad:de:84:
4d:58:a5:08:9b:e0:3b:78:ac:66:42:7f:f8:f1:7f:e8:84:9d:
07:98:6b:83:42:af:18:3e:26:a8:d1:c3:63:0e:21:e6:2e:ee:
27:fd:db:69:b3:03:dc:16:a4:e4:18:0b:cb:da:1f:c5:e1:23:
63:71:e6:20:6f:c1:c3:2c:4b:55:22:bf:84:12:ea:86:0b:f5:
48:62:59:e4:0f:14:7c:a7:c1:ff:39:ae:8e:5b:8a:cc:29:a8:
8a:c5:19:44:d3:35:5b:47:71:a0:db:a3:be:d9:fc:43:f9:b3:
fe:8e:0d:f2:cd:9a:38:a0:16:db:f9:96:9e:9e:87:c8:94:c3:
b3:ca:f1:71:74:ca:40:fd:f2:4a:07:17:75:ab:7b:f9:83:78:
f4:ba:ae:32:5d:9d:ea:7f:5a:cf:5e:0e:7d:c4:b2:f5:fd:aa:
7b:18:b8:b8:58:61:0a:a6:62:fc:c7:51:b5:e2:b8:3f:a6:bb:
8b:37:23:10:9f:5d:e8:fd:93:9c:d9:df:d0:f3:7c:bb:d3:04:
09:d4:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:42 2025 by rpki-client