Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
File: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (raw, json)
Hash identifier: qg+sg+vMyWTh5Y76PfMeU3MLQaWCLmZw2oq/Vk5OmFk=
Subject key identifier: 9F:3C:C1:71:14:A9:D9:00:9B:E9:47:5A:0C:59:E0:71:19:16:AA:42
Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial: 676C9F7513E9B28B1062689D24E0E073F488DBEB
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
Signing time: Thu 04 Apr 2024 07:17:28 +0000
ROA not before: Thu 04 Apr 2024 07:12:28 +0000
ROA not after: Thu 03 Apr 2025 07:17:28 +0000
asID: 270910
IP address blocks: 138.121.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6c:9f:75:13:e9:b2:8b:10:62:68:9d:24:e0:e0:73:f4:88:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Validity
Not Before: Apr 4 07:12:28 2024 GMT
Not After : Apr 3 07:17:28 2025 GMT
Subject: CN=9F3CC17114A9D9009BE9475A0C59E0711916AA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:a7:8f:d4:73:6c:44:24:41:50:84:83:52:
fa:8c:c1:aa:87:2e:69:c2:e9:97:08:d5:1e:e8:dd:
7f:0f:14:b3:6f:29:c0:bc:4b:82:19:f5:5a:8f:c7:
65:fd:b0:0c:06:64:e4:95:74:0f:08:de:b4:74:06:
52:4c:ab:ae:6e:89:aa:d3:65:15:79:44:ed:47:0b:
9f:11:db:f1:51:20:b0:be:f9:25:d6:fd:b2:0a:06:
cb:73:f7:2d:4f:b5:1f:02:e1:08:99:98:39:03:ba:
58:40:f6:d7:ce:ee:55:91:89:95:24:f2:21:73:03:
d3:31:21:3c:b5:28:42:57:0f:41:ea:6c:60:6e:0a:
e4:ed:ce:3d:0d:c4:40:e8:72:75:53:8b:72:3f:a9:
59:6d:d7:98:aa:a6:13:95:e9:01:e3:e9:87:d9:b8:
ee:43:61:e1:42:76:8e:fc:1e:a2:ed:3d:8e:eb:28:
36:9d:2f:68:d4:39:c2:c6:97:bf:dd:ca:7f:e4:fb:
f1:23:91:75:d9:de:8e:2a:8a:a8:f3:53:5b:8f:a2:
6f:9f:28:56:65:71:0a:13:8c:3c:40:b9:4b:d7:7a:
f9:97:a8:1c:4f:52:eb:22:2b:33:16:cd:74:0d:df:
42:0c:61:f7:2b:b5:b3:17:62:55:40:65:b7:37:05:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:C1:71:14:A9:D9:00:9B:E9:47:5A:0C:59:E0:71:19:16:AA:42
X509v3 Authority Key Identifier:
keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.164.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:fe:8e:28:bf:d3:12:4e:bf:96:86:bb:c1:a6:58:dd:86:e6:
b0:ba:9d:8e:60:dc:ed:71:e0:f9:74:d3:d5:7e:65:55:f3:93:
95:f4:23:ff:c3:dc:17:24:74:4a:ac:9c:ff:a8:44:d6:b5:f0:
83:76:44:ac:7f:ac:39:c8:b0:8d:38:f1:74:9a:20:42:18:92:
ea:8f:5c:ea:f9:49:bc:9b:aa:b1:f8:57:ef:0d:f0:fa:fb:4b:
5f:0d:78:5a:af:88:5f:b0:db:5b:ea:bb:b2:14:42:56:3c:20:
26:3f:d0:ad:61:53:d7:46:48:7e:76:5d:55:29:94:7f:d1:36:
4a:61:37:6f:a1:ee:41:4a:50:33:50:8f:01:fb:33:21:96:c0:
8d:3d:d5:ad:99:1e:cb:10:75:bc:4f:ee:06:93:53:9b:fd:2d:
50:b5:04:8d:5c:5c:4f:95:5e:33:55:32:c1:48:a1:1e:4d:37:
5a:84:fe:4e:bb:c6:0a:c6:80:fe:4f:c6:73:4d:41:de:63:7b:
ec:a9:30:94:df:ce:21:8e:60:b2:6e:e7:3a:99:7c:f6:96:bc:
27:fc:32:74:bc:2d:bd:d6:a9:a2:6b:e1:ef:d1:05:72:2a:e2:
bb:3c:ce:23:8b:84:23:fe:78:b7:0f:fd:64:4b:65:51:8e:f5:
9b:22:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:57 2025 by rpki-client