Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38372e302f32342d3234203d3e20323634313933.roa
File: 3133382e33362e38372e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier: MKYRRCDoU87xFiQZ8a5HV1XozACommv0c5YgSOBiZiQ=
Subject key identifier: 42:68:3A:19:B1:BC:94:2E:0C:E5:30:85:10:0B:BC:04:75:63:17:AA
Certificate issuer: /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial: 77C7C916D5C04050A25F739BF080B57961887150
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38372e302f32342d3234203d3e20323634313933.roa
Signing time: Sun 26 Jan 2025 20:11:50 +0000
ROA not before: Sun 26 Jan 2025 20:06:50 +0000
ROA not after: Sun 25 Jan 2026 20:11:50 +0000
asID: 264193
IP address blocks: 138.36.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c7:c9:16:d5:c0:40:50:a2:5f:73:9b:f0:80:b5:79:61:88:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Validity
Not Before: Jan 26 20:06:50 2025 GMT
Not After : Jan 25 20:11:50 2026 GMT
Subject: CN=42683A19B1BC942E0CE53085100BBC04756317AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:90:41:82:33:b2:58:7d:0b:ca:49:bb:d3:
13:bd:ac:20:91:90:6a:41:f4:27:5b:1a:3a:51:b5:
ef:1a:ab:35:b1:95:75:50:80:14:d1:80:26:ed:93:
2c:d6:23:ff:a8:92:7e:eb:9e:51:41:03:a0:5f:e7:
7b:aa:b8:b2:de:b3:e9:e2:aa:78:a4:4d:0d:0c:84:
63:54:eb:3e:62:56:bf:04:18:02:55:9a:c8:06:ee:
39:a6:5a:c5:e8:f0:4e:a0:0e:cd:40:70:83:92:77:
3b:a5:42:37:8a:c6:06:09:e2:4a:00:1a:ee:84:77:
6a:ba:cb:b3:af:71:ca:bd:3a:78:20:e4:ec:02:a7:
30:9c:85:24:be:c8:77:b4:04:b0:b6:c9:77:9b:0d:
08:1c:df:c1:ef:64:1e:39:0c:89:59:d6:3d:cb:5e:
06:1d:6e:40:e8:be:a3:08:17:b3:22:64:98:b1:b0:
ab:93:55:b5:2a:78:01:95:b7:4e:28:d5:91:f1:52:
00:cc:ae:50:70:c5:a4:88:58:2a:db:8c:d6:aa:87:
70:27:6c:09:b8:76:bb:3f:17:a4:09:4b:46:eb:90:
4f:1f:fa:ea:39:f5:c2:23:a7:a8:37:d2:0a:86:ee:
f4:24:aa:12:9d:03:de:04:0b:a0:70:8f:57:42:3f:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:3A:19:B1:BC:94:2E:0C:E5:30:85:10:0B:BC:04:75:63:17:AA
X509v3 Authority Key Identifier:
keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38372e302f32342d3234203d3e20323634313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.87.0/24
Signature Algorithm: sha256WithRSAEncryption
67:06:76:11:95:cc:e3:90:94:09:5c:95:e8:96:2e:a5:bf:c4:
8a:f7:ad:d0:3d:67:cf:ac:59:23:3d:81:6f:19:69:2d:08:9c:
84:00:c0:70:fe:9f:07:12:28:45:2a:6b:c7:cb:f6:bd:e4:78:
e4:87:95:46:f7:3e:94:93:eb:47:c8:a5:69:93:22:5c:2a:0b:
a1:67:ab:5c:af:34:a0:8e:3a:c7:a7:69:94:35:2a:70:c7:10:
c9:db:54:6e:53:22:a8:e3:46:8d:34:00:36:02:83:8a:c9:a3:
e9:b2:62:ea:5e:6e:29:ce:b8:07:ed:13:34:36:93:b2:5c:74:
74:a3:2b:a0:6f:77:88:53:da:6c:ae:d3:64:a0:94:21:e8:68:
25:46:08:ec:4a:a4:e9:3f:d1:1b:f3:b9:ce:92:25:b3:9a:7f:
d4:94:30:32:05:2f:7b:74:6d:ef:c3:39:da:48:53:7b:26:00:
2c:01:3f:2a:2b:e8:bf:1c:a7:9d:d5:88:ad:2f:51:7a:e8:d0:
e1:7d:5d:23:63:3a:b4:6b:cb:e4:7a:e2:ee:2a:1e:56:e9:ea:
4c:b2:8f:c9:2d:b2:7e:60:19:0f:6d:87:5c:c0:5d:1a:ee:80:
43:a1:d1:ae:f9:08:30:d8:3f:2c:b8:79:0b:46:b7:51:a0:7f:
ae:4f:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:49:32 2025 by rpki-client