Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa
File: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=
Subject key identifier: 32:FA:97:4F:B1:E5:57:71:F0:E0:D0:99:A6:17:6E:4D:5B:61:BA:01
Certificate issuer: /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial: 5947D6CA7F34DE6626F5D220DCC8FF13AF143F4D
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 262595
IP address blocks: 138.121.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:47:d6:ca:7f:34:de:66:26:f5:d2:20:dc:c8:ff:13:af:14:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=32FA974FB1E55771F0E0D099A6176E4D5B61BA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:f1:01:59:1a:7a:c7:aa:68:1a:c5:a3:3a:
a2:c2:cc:2b:cd:b0:7d:c9:41:84:32:4c:88:eb:1b:
81:e8:15:45:d3:3f:dd:50:03:8a:a0:b8:d8:f7:e5:
a8:dd:db:a6:b1:25:23:fa:04:df:40:18:c7:b1:07:
a1:ac:be:7e:78:92:15:83:15:12:66:94:ae:a2:3a:
4d:4f:58:0e:a4:99:97:05:3f:1a:79:60:ca:f4:ba:
d7:b9:38:7e:f7:af:66:53:71:31:66:c3:80:a9:aa:
4c:97:e1:aa:24:ea:63:b9:b2:f8:01:c4:0c:1c:83:
51:22:51:9c:7d:2f:8c:00:26:fd:bb:be:65:c6:05:
a9:21:2b:c2:99:3e:34:26:9c:f3:0e:57:b8:ae:be:
f7:4e:fa:fd:7f:70:3e:44:d5:76:47:7b:15:7b:f8:
eb:36:d1:34:42:36:79:88:b3:69:55:59:39:34:dc:
8b:07:be:87:e5:94:82:97:d7:3f:c3:d9:6d:60:47:
80:2e:a3:dc:87:09:cf:55:45:9f:ec:f3:bd:cc:52:
1e:34:75:55:49:97:16:e7:02:7f:e3:60:35:e1:bc:
2f:17:78:b1:72:b0:c0:c3:89:d2:c5:98:e5:f6:26:
47:87:a9:84:13:a4:7b:be:cd:9d:4a:12:e3:82:5e:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:97:4F:B1:E5:57:71:F0:E0:D0:99:A6:17:6E:4D:5B:61:BA:01
X509v3 Authority Key Identifier:
keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:b5:e3:f6:f5:59:78:a5:79:38:44:d0:15:97:0a:3c:80:99:
ea:dd:67:6b:cd:b7:38:37:5b:d0:5a:ef:8f:e1:74:69:3d:92:
ec:23:63:30:30:92:9c:81:05:e2:73:37:28:e0:1e:34:36:9b:
5b:29:6f:b5:79:d1:cc:2f:1d:2d:a6:a0:1b:00:1f:ee:77:3f:
68:9b:2a:70:15:67:48:5b:c0:b9:fe:76:1a:1b:aa:8e:a8:26:
01:1d:89:f0:f0:56:03:46:a6:af:f3:14:38:37:97:44:fd:ba:
64:e3:30:2a:10:ea:3f:3e:d9:a4:d2:03:3a:a7:62:cc:12:91:
f2:9c:a1:00:2f:7b:a9:05:83:ba:14:e4:92:03:e7:75:c0:d1:
08:18:48:bd:7a:49:43:71:d4:a6:df:58:51:4f:da:53:ec:70:
f0:ba:79:5b:ef:6a:bf:08:4d:12:21:24:9b:36:b1:dd:2b:bf:
69:47:15:a0:7f:72:44:45:07:23:6f:0f:ba:78:29:2c:fc:f7:
db:52:b4:9a:fb:7f:15:65:45:f4:eb:90:17:df:be:c8:c8:14:
6d:16:d8:fd:86:66:a6:7c:6e:06:fd:5e:91:4c:32:a8:70:55:
b6:65:bd:2c:0a:ec:3d:00:47:46:93:98:4d:9d:8d:96:17:32:
f9:cf:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:52:10 2025 by rpki-client