Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
File: 3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (raw, json)
Hash identifier: t0HlX2PxrzIfkYvkgk3DqFDq9MqwfjNIT0gSyEmkw1A=
Subject key identifier: 0B:50:3C:C4:0B:59:87:AE:85:31:90:4E:AC:20:8D:FD:21:E9:74:CD
Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial: 422C4590774E5C45D15F847E62BBDA95A67AB732
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
Signing time: Thu 04 Apr 2024 07:50:19 +0000
ROA not before: Thu 04 Apr 2024 07:45:19 +0000
ROA not after: Thu 03 Apr 2025 07:50:19 +0000
asID: 264544
IP address blocks: 138.0.112.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:45:90:77:4e:5c:45:d1:5f:84:7e:62:bb:da:95:a6:7a:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Validity
Not Before: Apr 4 07:45:19 2024 GMT
Not After : Apr 3 07:50:19 2025 GMT
Subject: CN=0B503CC40B5987AE8531904EAC208DFD21E974CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:8e:34:29:c9:d6:5f:e5:8b:8c:c9:b9:3c:
da:2c:62:bb:d4:fe:16:f2:02:c9:ab:f7:af:30:ad:
ab:9a:d9:50:41:a2:4a:d9:e6:c6:62:19:27:cf:af:
0e:fb:d3:4d:03:cf:0a:11:30:e3:99:5a:b7:3a:2a:
2e:82:b9:44:9b:c5:5b:64:0e:ef:d4:aa:81:e9:36:
ab:b5:9a:60:2f:9a:82:13:2b:c1:9c:14:8c:5a:ca:
5b:61:5e:70:a0:01:fb:9e:74:e1:cd:05:5e:f1:14:
1c:09:a7:37:f5:c3:8a:cd:66:34:a2:1f:a1:57:21:
c3:d2:71:0d:96:6f:74:f7:28:ca:54:5e:d3:d6:17:
0b:78:88:c1:2b:71:ff:1a:59:7d:39:cd:39:b5:72:
d0:b1:58:3f:38:39:40:0b:a2:37:37:81:b4:88:16:
28:01:fd:fa:96:17:81:b1:5a:bd:d5:be:8e:43:a0:
df:87:1c:0e:bd:af:ee:ac:59:e7:be:12:a5:8d:f8:
10:3d:f6:cb:f9:1d:2b:e7:27:7c:a8:3d:24:fb:c3:
d0:da:b6:0f:af:e4:f7:4f:a1:2c:bd:68:04:6d:45:
45:ea:d4:4e:80:7d:ae:50:1e:06:36:d7:2d:d3:97:
b7:07:f7:f3:3b:20:21:77:45:9b:8c:52:bd:8b:c7:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:3C:C4:0B:59:87:AE:85:31:90:4E:AC:20:8D:FD:21:E9:74:CD
X509v3 Authority Key Identifier:
keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/22
Signature Algorithm: sha256WithRSAEncryption
53:3b:70:44:f5:4d:dd:b8:15:53:c8:bf:42:70:6c:d4:8c:90:
a3:21:a1:da:5a:4d:5a:88:e8:e6:da:91:c7:39:bc:46:a1:49:
73:e2:32:3e:a8:f4:d3:84:0c:e3:89:8b:68:a8:a8:d3:c4:a7:
9a:1c:36:be:ee:74:69:b1:d3:04:e6:7c:0f:6f:14:2b:71:21:
af:e2:1c:bc:d5:b9:cf:fe:00:8b:11:c5:84:50:1d:b2:ba:83:
66:06:92:71:a8:86:0c:2e:eb:85:87:b0:9f:5f:78:b4:2b:4a:
e1:19:60:e3:b4:ee:d9:26:a0:75:33:85:79:e1:ad:48:2e:90:
c6:05:d4:7b:64:8e:42:95:40:a7:b1:15:d6:bc:37:17:d0:d2:
78:e6:9c:55:fb:fd:94:c2:f7:b1:0b:a1:fd:59:aa:bb:8c:38:
3a:b6:da:4b:a0:c6:32:a2:ef:95:3a:21:11:79:70:b9:73:78:
bf:d1:8e:41:ea:c2:ce:d6:27:09:d8:25:38:6d:07:e2:7f:72:
5b:fd:24:a6:0f:80:12:cb:e4:c3:d3:7b:cd:79:83:79:0b:49:
38:fa:65:5c:a4:a9:f2:18:c8:2a:a6:33:28:e9:e5:ff:37:b2:
f1:1e:f2:01:a8:2e:fc:78:45:66:de:87:5a:e0:66:c2:38:3b:
99:8b:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:03 2025 by rpki-client