Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa
File: 3133382e35392e3134382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: aXnMrnaf3BxeCS9cTlbcWmhrhJ2cH6jtjSAbXocRNmI=
Subject key identifier: A2:7F:B2:F2:5D:C5:1E:3D:7A:F0:9C:F5:30:42:4F:59:87:91:09:EE
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 0F798CCB27CDD6633795234F126B947495D7BC28
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:48 +0000
ROA not before: Mon 01 Jul 2024 18:40:48 +0000
ROA not after: Mon 30 Jun 2025 18:45:48 +0000
asID: 28165
IP address blocks: 138.59.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:79:8c:cb:27:cd:d6:63:37:95:23:4f:12:6b:94:74:95:d7:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:48 2024 GMT
Not After : Jun 30 18:45:48 2025 GMT
Subject: CN=A27FB2F25DC51E3D7AF09CF530424F59879109EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:54:e0:3d:26:50:c7:5d:a5:8d:2c:3b:15:
e5:08:d8:a9:47:24:e0:99:6b:bc:db:41:0e:44:95:
61:3d:b7:4e:52:01:0a:84:53:5b:d5:b5:30:93:ff:
1d:cc:3e:81:38:e9:80:22:1b:25:21:bd:3d:c7:13:
db:5e:e1:8a:b0:ed:c9:70:84:c3:10:52:02:93:ed:
68:82:22:61:84:21:0c:0c:96:87:68:49:24:8f:f7:
83:f8:f9:0b:db:05:33:d7:01:55:7d:42:63:c4:1d:
93:12:ff:f5:97:95:99:b3:04:9a:4d:88:9a:7c:25:
25:04:e2:27:f0:d3:2e:a2:00:2e:f3:71:d9:99:43:
85:7c:44:28:cd:d9:cc:b5:93:9a:71:d3:d4:74:73:
4a:b8:c7:88:08:c3:17:10:63:15:a9:7d:b9:e0:59:
ec:ee:1d:48:90:2d:7b:39:dd:35:19:e9:7e:a1:3b:
63:bf:93:82:ef:fd:f4:e7:a2:b9:c9:49:63:15:20:
2c:93:f8:18:2b:59:d2:e1:48:ac:ce:61:7b:c7:4b:
b6:7a:c4:a8:4a:d1:17:6e:97:61:f8:a2:c6:f7:b5:
c2:9a:8c:ca:45:93:18:88:4c:b9:df:62:7f:72:9c:
cb:43:d0:ae:68:3b:1e:80:08:c7:79:56:42:a2:b9:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:B2:F2:5D:C5:1E:3D:7A:F0:9C:F5:30:42:4F:59:87:91:09:EE
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cb:f0:d1:da:c3:22:fa:c8:ce:2d:dc:c3:43:89:eb:0d:be:
d0:9c:53:86:84:92:10:fc:96:95:56:a2:0b:62:ed:04:9d:1f:
6d:61:fb:e0:a1:33:39:2e:a9:33:c9:fb:53:06:98:c2:4f:a9:
97:86:53:90:29:af:f7:ff:9e:9e:18:77:55:5c:0e:93:87:4c:
0a:07:53:04:c5:14:1c:92:0e:ae:cb:8e:61:9e:41:15:9c:95:
3b:17:fc:ab:83:4c:b7:6c:da:34:ac:6b:99:76:b9:d6:3f:9a:
1f:08:89:71:69:20:35:5d:97:cf:28:3e:80:21:36:45:a8:48:
05:9a:5a:05:a9:4c:91:88:2d:40:4a:96:2c:1a:06:83:56:52:
b0:19:3f:2c:e0:02:90:92:1f:33:62:e9:11:a0:08:fe:ae:f4:
f8:82:df:99:3a:63:6d:30:44:67:52:f9:37:2c:ce:c3:6a:b6:
43:71:56:4b:f6:22:75:45:e1:87:50:1f:17:38:78:b1:ce:33:
36:b0:70:c6:68:24:ea:01:e0:07:dc:8a:52:6e:7c:01:da:b3:
67:e5:b3:5f:f2:de:9a:05:f6:2f:69:92:77:e3:03:93:8c:84:
f8:67:ef:6b:21:7c:2c:1a:cd:9d:c5:c2:81:87:24:c0:f4:5d:
ef:75:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:48 2025 by rpki-client