Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
File: 3133382e33362e38332e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier: 3qzbepm8NQ5AcAf2MShPjQhExz5T5ox+9cQgqWzdxTM=
Subject key identifier: 26:6C:CD:9E:AF:88:AD:08:12:16:5E:2F:C7:40:7C:AD:CE:EA:54:24
Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial: 324FA85C0D54B9D82CD8FE03F2794D1CBE4C3652
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
Signing time: Wed 03 Apr 2024 18:32:11 +0000
ROA not before: Wed 03 Apr 2024 18:27:11 +0000
ROA not after: Wed 02 Apr 2025 18:32:11 +0000
asID: 264571
IP address blocks: 138.36.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4f:a8:5c:0d:54:b9:d8:2c:d8:fe:03:f2:79:4d:1c:be:4c:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
Validity
Not Before: Apr 3 18:27:11 2024 GMT
Not After : Apr 2 18:32:11 2025 GMT
Subject: CN=266CCD9EAF88AD0812165E2FC7407CADCEEA5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:4b:4c:64:69:8a:63:ad:89:05:26:b7:a7:
13:b3:36:6e:71:0a:d5:ec:7e:59:68:99:ad:3c:11:
89:ab:35:b9:f6:35:62:51:cc:ab:ef:20:4b:f6:5d:
04:d4:75:3d:ad:65:06:5b:b7:4b:56:22:bb:e1:2d:
b7:05:de:9e:6e:b9:eb:87:33:3b:20:35:a2:32:12:
2b:61:a6:56:77:57:5b:c1:f6:a0:c7:04:54:c0:4d:
7c:23:99:70:a9:69:d7:f1:48:47:e3:83:e4:7a:35:
6a:b8:62:d2:f3:91:d2:d0:cd:0e:0e:4e:ef:69:96:
2e:58:74:1e:75:92:f4:b4:a0:6f:d7:ba:fc:e3:e9:
11:11:c5:4d:ce:26:57:21:84:86:d9:08:e2:e1:76:
1d:2f:90:be:5b:e4:08:3d:22:c1:7e:3c:43:3f:4c:
52:9f:47:02:bf:d8:53:e5:f2:7e:f0:e1:a7:9c:47:
4b:77:f5:ef:f5:5f:05:94:0f:5c:8c:a3:4c:26:9f:
72:e9:54:ee:2b:da:47:7a:ab:20:32:e1:48:c1:ec:
ab:f6:33:5f:54:e3:8d:44:61:7b:cb:a4:16:04:04:
bf:c5:32:3a:68:c1:e2:f8:72:1b:2e:a9:cf:83:c9:
22:8a:7f:0f:a2:d8:4c:e3:be:cd:01:bd:3a:4b:cc:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:CD:9E:AF:88:AD:08:12:16:5E:2F:C7:40:7C:AD:CE:EA:54:24
X509v3 Authority Key Identifier:
keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.83.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b9:99:b6:b9:38:1f:e6:27:a1:b3:ce:95:be:e2:d5:30:e3:
03:a9:5c:c8:3a:52:6c:ec:e0:73:51:8a:00:6c:be:33:3b:d1:
80:8c:cd:d9:7d:92:46:4b:c3:b1:77:2f:38:4c:02:0b:0d:bb:
be:93:fe:09:59:f0:c9:73:f3:da:46:b0:6b:97:15:29:d0:92:
0e:ce:f7:07:1e:22:b8:17:a6:31:2c:52:cc:28:fd:86:f4:53:
95:42:4f:d1:ca:6d:a1:e1:73:9b:fb:a1:a4:cb:ef:93:09:e2:
34:6c:c7:e2:a9:70:3d:8f:b6:f3:1c:32:bd:64:51:bd:3d:18:
5f:c6:d9:b0:a0:2d:8e:ea:8a:31:28:cc:69:a6:ce:5a:60:69:
84:40:dc:f1:a2:30:c7:3d:23:93:5c:8b:e0:14:35:6a:09:ee:
c7:3f:66:85:e2:1b:0b:7d:30:9c:85:f9:23:38:be:10:c2:d2:
bd:14:87:db:76:3d:26:32:e1:43:91:fc:30:89:09:bd:31:a2:
5f:74:b3:b4:3f:e3:be:d6:a2:2f:78:1c:73:14:6a:2e:46:4c:
ed:c7:a9:3e:dd:c2:1e:47:f4:9c:9e:a2:63:5f:17:61:36:87:
84:ca:50:04:7f:01:c2:2f:cf:e4:f3:e1:14:e4:9f:81:83:d8:
d3:38:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:46 2025 by rpki-client