Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa
File: 3133382e302e3131322e302f32332d3233203d3e20323634353434.roa (raw, json)
Hash identifier: Zc3emTwNKpcAPeJPUJwtfWIExbrgjg7FchJYEiLE6+g=
Subject key identifier: C7:28:F6:D8:5F:B9:D3:28:BD:0C:AD:35:79:94:24:47:EA:50:A2:64
Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial: 7BB06F047AD8DF9D1E9DC4B770863AF9293DEDC6
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa
Signing time: Tue 04 Feb 2025 02:44:09 +0000
ROA not before: Tue 04 Feb 2025 02:39:09 +0000
ROA not after: Tue 03 Feb 2026 02:44:09 +0000
asID: 264544
IP address blocks: 138.0.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b0:6f:04:7a:d8:df:9d:1e:9d:c4:b7:70:86:3a:f9:29:3d:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Validity
Not Before: Feb 4 02:39:09 2025 GMT
Not After : Feb 3 02:44:09 2026 GMT
Subject: CN=C728F6D85FB9D328BD0CAD3579942447EA50A264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:5d:5c:c5:0a:53:67:08:47:46:56:a7:ed:
77:34:67:cb:ac:7c:4d:c6:b3:2b:12:77:22:a6:ee:
6f:7a:bc:e8:d5:ef:54:57:f9:df:56:46:90:80:07:
5d:41:f4:2e:2e:94:ab:65:99:64:03:fa:ec:1e:d8:
e0:91:8a:f2:3c:99:6d:16:a8:04:85:c9:af:bd:f5:
b0:e0:a4:1d:ba:14:7c:cd:5d:f8:d1:e2:b6:1d:bc:
ce:15:26:b3:b6:6e:6b:97:6b:e4:a9:d2:f7:08:82:
15:72:6d:40:de:db:dc:ac:b0:09:ed:1e:9f:08:e2:
c6:12:56:0b:09:1b:2d:2d:83:79:59:29:39:1e:48:
ae:92:15:d0:61:1e:09:c1:45:45:03:0c:e2:dc:54:
5c:ab:3c:59:27:0d:6e:4d:15:2b:6b:a1:0a:bd:c7:
9a:83:5b:a1:ef:f9:d5:42:b1:46:20:ef:10:b2:a1:
a5:62:26:50:5d:66:a3:c2:72:8d:9f:14:23:4b:91:
d4:bc:7d:31:ee:38:c6:dc:7e:51:89:2e:92:8e:30:
b7:7c:69:0e:11:9c:cd:61:bb:88:69:fd:b8:d9:37:
a5:df:41:2e:d3:c2:2b:c9:7f:dd:d0:9e:37:02:12:
49:b4:f4:cb:ef:28:1d:2d:ce:e9:c5:98:5a:f5:11:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:F6:D8:5F:B9:D3:28:BD:0C:AD:35:79:94:24:47:EA:50:A2:64
X509v3 Authority Key Identifier:
keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:b4:c4:e3:fc:f8:0a:42:d1:7b:ca:83:c4:71:b3:4e:06:a9:
cf:62:80:d4:45:50:a1:ca:7e:52:7f:66:5f:b5:9b:4c:6b:ab:
30:67:40:57:0e:4a:99:9f:76:1d:4b:0d:68:1c:c2:ff:4a:74:
d8:57:d3:a2:7c:ae:4a:5b:10:ac:9a:94:16:62:61:6d:d5:f6:
32:12:ea:7b:46:fd:e3:b5:7b:4a:82:d8:ea:a2:17:e6:a2:2d:
99:4a:35:ce:66:85:c4:fd:c4:11:56:32:b8:63:c3:c7:97:f6:
92:af:c9:0f:84:ee:4e:16:62:d1:5b:d8:2b:56:f0:28:ec:98:
d6:e7:d6:52:96:b2:02:a7:4c:f3:32:44:57:6f:eb:1f:15:a7:
50:cc:9b:bf:3d:0a:b5:d4:1f:94:f1:f6:71:c0:b9:2b:f4:ca:
96:3b:02:a9:83:e1:bf:9e:8c:91:f1:d2:8f:34:77:07:f4:98:
e1:92:94:6a:ef:14:bc:d1:f9:93:49:be:e7:54:27:03:0a:4f:
7b:6b:a0:07:58:7d:c0:a0:20:6e:79:d5:cf:da:2b:cc:8c:23:
ea:07:1a:49:6a:f7:79:12:e7:2c:15:d5:d3:eb:ec:b3:64:9f:
40:a1:b8:09:bd:dd:e7:21:6e:22:08:78:9c:32:9e:77:71:9e:
1f:9e:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:41 2025 by rpki-client