Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3232203d3e203532363535.roa
File: 3133382e39342e3137362e302f32322d3232203d3e203532363535.roa (raw, json)
Hash identifier: l8iIwhSlx2gOCfzOJapY+Ay03QJDAaDZ3ACuNb8bVCU=
Subject key identifier: 3B:1B:9B:07:48:10:10:C5:46:1E:EF:1F:AA:25:56:20:57:E2:AB:84
Certificate issuer: /CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Certificate serial: 3D97779D1152875F916423D7F1EAD847D8CAD453
Authority key identifier: 55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3232203d3e203532363535.roa
Signing time: Fri 23 Aug 2024 20:11:13 +0000
ROA not before: Fri 23 Aug 2024 20:06:13 +0000
ROA not after: Fri 22 Aug 2025 20:11:13 +0000
asID: 52655
IP address blocks: 138.94.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:97:77:9d:11:52:87:5f:91:64:23:d7:f1:ea:d8:47:d8:ca:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Validity
Not Before: Aug 23 20:06:13 2024 GMT
Not After : Aug 22 20:11:13 2025 GMT
Subject: CN=3B1B9B07481010C5461EEF1FAA25562057E2AB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:0e:85:b5:1f:59:d1:6f:c6:77:84:03:17:
db:60:56:14:d1:1b:ce:ee:ef:6f:f6:58:a8:a0:3f:
fa:b8:aa:66:74:f5:b1:37:37:f6:21:d5:34:ab:60:
2a:b6:c8:b5:15:73:89:41:ca:3b:dc:18:23:3d:8c:
7d:6c:b4:0e:aa:b7:8c:b8:d4:c6:55:cd:02:8a:8d:
6c:82:a5:47:bd:1d:61:31:93:3e:b3:b9:43:ac:cd:
b0:69:74:c4:9d:39:74:ff:b8:aa:aa:be:c9:09:22:
fc:6d:ec:10:72:a7:ff:4c:4a:39:af:fc:72:69:5e:
43:3d:ce:69:96:ee:b2:a5:0b:fe:d1:c7:fb:9e:0f:
37:df:f5:9b:92:49:24:f4:31:a4:2c:af:28:18:ec:
b2:56:c0:3c:2a:c5:2b:d1:01:23:74:00:bb:9d:ce:
b7:7c:07:c0:52:0d:dd:89:73:94:33:89:d0:9b:93:
91:bf:99:b8:06:d3:37:8b:1c:f0:8c:ae:1a:58:8b:
06:a6:24:44:63:76:69:48:f0:b3:b8:46:a4:d5:06:
b9:4f:eb:8d:66:64:fa:1d:b7:29:dd:73:52:4e:d8:
06:b5:e1:18:10:e4:b9:a0:24:c7:bf:d5:44:f7:74:
8e:a1:af:05:39:9f:14:5b:b8:1d:a3:d4:16:83:98:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:9B:07:48:10:10:C5:46:1E:EF:1F:AA:25:56:20:57:E2:AB:84
X509v3 Authority Key Identifier:
keyid:55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3232203d3e203532363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.176.0/22
Signature Algorithm: sha256WithRSAEncryption
05:56:67:98:08:62:b0:00:45:e5:2c:85:92:a8:42:50:5b:43:
cb:f4:10:da:fe:34:1f:06:92:a0:85:4c:1f:e9:e9:70:54:d8:
87:11:08:04:e4:31:13:9f:8a:b5:5e:a9:42:36:0c:86:71:64:
c8:8c:bf:1e:fa:2e:15:a6:a6:bc:77:8d:36:07:ab:8d:a2:1b:
bf:88:31:6b:35:f2:24:26:e9:6b:bb:b5:61:00:30:ce:db:0b:
f4:14:68:1e:5c:18:b9:ad:83:13:86:81:99:d9:76:07:7b:b4:
9e:31:59:9e:86:0c:42:da:29:2b:0f:47:36:5d:be:3b:9f:07:
2c:9b:a1:e5:08:fd:40:28:3f:84:3e:fb:de:59:96:61:dc:eb:
c9:b9:ac:2c:4a:9d:a5:1a:34:b5:78:c1:94:e6:9a:6a:ec:8e:
67:ea:e9:0d:df:15:44:70:11:a1:38:64:06:42:41:bd:5e:f2:
ea:82:16:3a:af:bb:42:9b:33:e1:78:45:59:06:3b:24:9b:f6:
23:00:0a:89:d1:30:de:7d:d6:ca:42:b8:01:7f:e7:e6:41:62:
46:14:ce:c6:cf:79:e0:2c:b1:dc:58:51:ca:60:ee:a4:6a:2f:
3b:00:6d:bb:2d:62:64:c9:d2:10:df:a7:26:f6:18:10:4f:a8:
3b:02:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:03 2024 by rpki-client on console-ams.rpki-client.org