Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa
File: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier: Dihry6nHZ/5DWblXtzPaoNsCaT4X9MeVR+yoJM2IMi0=
Subject key identifier: 7C:9B:27:0F:05:CA:1E:62:D6:0D:3D:D8:DB:8F:7F:D8:B5:26:D9:C5
Certificate issuer: /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial: 3CAC2E4B321E54ABB6750E2F0215E9BCF0ED6B86
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa
Signing time: Wed 20 Mar 2024 07:10:21 +0000
ROA not before: Wed 20 Mar 2024 07:05:21 +0000
ROA not after: Wed 19 Mar 2025 07:10:21 +0000
asID: 270910
IP address blocks: 138.121.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ac:2e:4b:32:1e:54:ab:b6:75:0e:2f:02:15:e9:bc:f0:ed:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Validity
Not Before: Mar 20 07:05:21 2024 GMT
Not After : Mar 19 07:10:21 2025 GMT
Subject: CN=7C9B270F05CA1E62D60D3DD8DB8F7FD8B526D9C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:8a:8c:68:e5:00:18:cb:88:c7:70:e1:2f:
8a:02:0d:7e:25:5d:c2:2c:b5:ec:9c:3b:16:42:17:
90:28:57:4e:c9:d7:6c:95:6d:15:11:83:f7:35:22:
53:b0:a7:64:5e:df:73:f2:ae:b2:c2:fa:cd:cc:f8:
99:14:32:dd:4c:81:9e:83:9a:b7:34:57:8e:57:19:
aa:e8:3f:07:95:c6:2e:57:12:29:bf:05:99:f1:73:
d9:0f:04:76:46:95:ce:f6:c3:7c:4d:96:b4:59:4d:
3a:30:7f:cd:7e:ef:42:79:8a:c0:0d:1f:1a:1a:05:
88:64:03:c5:be:57:3a:ea:b3:51:2b:f3:77:f1:78:
fc:8e:ee:9c:44:90:b5:fc:38:02:7a:ce:4e:de:64:
4f:2a:79:c1:4d:be:20:54:d2:b1:8b:4d:39:4f:8a:
63:33:f6:11:ab:6a:29:c2:ab:2d:0c:62:99:8c:e6:
4e:d6:a8:ec:dd:25:4f:98:cb:76:15:0a:a9:b6:66:
5f:f6:46:68:cd:a8:e9:50:6a:42:27:60:00:0b:f2:
6b:dd:c6:90:24:c2:00:18:52:15:4f:87:dc:dd:b5:
03:59:1f:7a:9a:9e:82:02:75:85:9a:3e:4e:6d:d2:
e4:fb:dd:c1:24:bb:91:87:04:83:86:6d:38:56:e3:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:27:0F:05:CA:1E:62:D6:0D:3D:D8:DB:8F:7F:D8:B5:26:D9:C5
X509v3 Authority Key Identifier:
keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.164.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e9:80:7f:31:56:51:80:e0:bb:e7:81:4d:60:a2:b5:a5:35:
35:00:5a:4f:19:6e:62:2c:17:21:c7:ab:cb:e7:15:1e:ec:c7:
2b:06:cd:cd:10:3f:7e:ad:90:d4:5b:df:80:34:af:23:d8:ef:
71:fb:49:1f:99:21:99:74:3c:76:01:be:04:14:7d:5b:99:a5:
93:a4:29:4c:a0:4f:50:fa:4f:f7:c6:8d:7f:a8:ee:e9:30:53:
df:3d:b0:9f:43:42:aa:09:e7:11:27:89:55:30:63:b0:dd:60:
e7:74:2b:f6:3e:2d:af:6a:d6:70:33:55:36:f5:8b:f0:7d:08:
9e:5b:c9:d0:59:50:44:f4:e9:51:e1:cc:5f:0f:2c:f6:87:bc:
82:59:61:c3:7a:35:14:a4:0d:58:df:5e:51:e5:ee:af:35:6a:
3b:2b:68:2a:7a:11:f8:65:59:ac:3b:87:97:57:ad:60:74:ec:
39:28:fd:1e:26:01:d3:3f:bf:a1:70:dd:4d:b3:4c:a0:8d:2d:
42:9e:dd:7a:62:22:6a:ff:c3:0b:08:03:7a:1f:07:99:19:01:
dd:a0:91:ff:7c:06:35:e4:93:57:07:81:bf:95:75:96:72:9f:
e2:3a:b9:b7:80:8c:9f:0c:d1:50:83:bb:c3:a4:eb:67:1a:eb:
b3:f8:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:18 2025 by rpki-client