Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa
File: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier: 5Z6SATEsbmZ2NriB4+1NQkqds/zql4HvQnsVlIIo5Us=
Subject key identifier: 5A:E0:D4:C2:68:38:A9:F5:CF:97:DA:93:5F:A2:A7:B0:C9:1D:03:62
Certificate issuer: /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial: 1B69B55F6264E3F7BBECFEE69722F54FAA54C105
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa
Signing time: Wed 20 Mar 2024 07:10:20 +0000
ROA not before: Wed 20 Mar 2024 07:05:20 +0000
ROA not after: Wed 19 Mar 2025 07:10:20 +0000
asID: 270910
IP address blocks: 138.121.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:69:b5:5f:62:64:e3:f7:bb:ec:fe:e6:97:22:f5:4f:aa:54:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Validity
Not Before: Mar 20 07:05:20 2024 GMT
Not After : Mar 19 07:10:20 2025 GMT
Subject: CN=5AE0D4C26838A9F5CF97DA935FA2A7B0C91D0362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:49:29:b7:9d:28:2f:3a:52:df:64:1a:7a:
8d:ca:8d:db:9d:96:9f:74:5e:6e:c7:b9:0c:88:ee:
c0:4d:12:90:c4:7d:e2:a9:7e:b8:8d:e6:0b:96:4c:
24:50:11:03:27:ee:5d:b8:08:69:2a:7a:f4:48:98:
55:dd:9d:d2:5e:41:c1:bf:5c:0b:ee:f8:5b:0c:49:
ab:a5:03:dd:72:d9:6c:ee:26:3a:f4:f1:44:25:12:
4c:9e:11:6a:86:14:37:a2:60:5f:81:2e:f1:ce:cd:
51:f7:eb:e6:2e:31:3b:68:d1:d8:21:f1:71:af:2d:
fb:5b:7b:28:6f:18:92:61:4a:d3:24:a6:ed:fb:a8:
b9:ec:05:8b:5f:24:35:a7:0f:37:d8:8a:41:07:eb:
bc:f0:f3:50:7e:44:f8:f2:67:f2:83:e6:1d:09:df:
12:70:bd:57:f8:d4:40:e3:04:34:0e:2c:d6:e3:2e:
62:f4:90:d7:35:11:e9:e4:85:63:10:a4:df:80:9d:
86:85:88:4f:08:f8:e6:2e:41:68:1a:bc:f0:67:54:
bb:30:47:b1:de:65:2d:47:c0:9e:ce:8e:94:1b:7a:
49:d7:46:e4:8c:83:05:c2:96:22:2c:4b:d6:4f:48:
ca:48:63:96:03:e8:83:09:eb:1b:6b:7f:d5:f8:a4:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:D4:C2:68:38:A9:F5:CF:97:DA:93:5F:A2:A7:B0:C9:1D:03:62
X509v3 Authority Key Identifier:
keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:99:82:10:90:7e:3b:bd:97:e3:f1:d9:b7:4f:1b:9f:b6:
9c:59:00:a6:c2:14:5d:50:4b:97:28:9c:70:00:49:a3:77:9a:
89:1b:f3:02:10:ca:8a:23:b0:6c:72:fc:e8:bd:65:be:56:5b:
90:7e:73:14:d5:23:f3:c9:8e:aa:64:d5:62:d0:53:03:11:4b:
7d:79:32:77:36:60:cc:c5:cf:26:9f:f5:0b:cb:74:2d:d2:2e:
db:f1:32:3a:72:62:a2:ac:9d:c1:fc:75:e1:30:88:35:c8:f2:
4e:f2:3a:17:27:81:fe:ea:74:5d:a0:7b:55:e2:e7:e4:79:39:
7e:5d:3c:ac:ca:f1:c0:e6:73:dd:79:ee:cc:6e:eb:84:08:68:
df:eb:85:bc:5b:5c:e3:d7:05:62:3e:9f:ac:6a:bf:b8:12:c9:
e5:71:de:29:36:8f:b7:d2:c2:3c:5e:66:8e:2b:9a:4b:86:e6:
aa:39:77:47:73:7d:de:19:4a:b6:ba:2a:07:09:a2:e3:05:24:
51:62:ab:06:2e:12:44:7b:f6:3a:33:80:8f:18:6b:43:53:67:
38:91:6a:eb:1a:dc:15:b8:a1:40:3d:c9:82:e9:1e:ec:e8:4b:
b1:42:52:65:32:a3:a6:98:39:ca:0d:f7:e6:bd:09:52:c7:98:
5d:01:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:53 2025 by rpki-client