Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa
File: 3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier: kJ6M6XzyJrtpmnJOQImdSYZj3f36Ww+VqUvbdERknio=
Subject key identifier: 46:DE:72:CA:F5:37:2E:4F:06:1A:69:FA:15:4A:AD:AB:39:FA:4D:A6
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 7EBCB2063E3F4BEA7A8E0B2ACDF5D4263FD7DE41
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 21:00:00 +0000
ROA not before: Sat 04 Nov 2023 20:55:00 +0000
ROA not after: Sat 02 Nov 2024 21:00:00 +0000
asID: 264247
IP address blocks: 138.118.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bc:b2:06:3e:3f:4b:ea:7a:8e:0b:2a:cd:f5:d4:26:3f:d7:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 20:55:00 2023 GMT
Not After : Nov 2 21:00:00 2024 GMT
Subject: CN=46DE72CAF5372E4F061A69FA154AADAB39FA4DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:d9:1c:c5:7a:66:96:ab:97:af:c3:e9:91:
a7:19:b8:be:f1:77:cd:79:d5:7f:1a:66:87:72:82:
64:24:e7:e1:c4:e2:fd:21:16:9d:8f:80:13:aa:0d:
1f:4f:9c:57:4d:10:e0:40:8a:89:c9:33:28:40:61:
08:0f:2c:8f:12:75:7e:2b:e2:3f:91:5a:60:44:49:
2c:de:fa:53:69:95:3d:f8:e6:13:98:ee:e2:d8:3a:
65:3e:79:a7:1c:d6:4e:19:35:19:f9:24:e4:59:f4:
87:10:ae:d9:b7:61:7f:66:90:67:ce:0b:37:5f:9f:
87:21:77:64:67:cc:b7:4c:c2:3b:7b:71:c2:1b:83:
86:20:a5:f3:64:60:a1:7c:09:4a:07:09:27:6e:81:
47:57:82:e8:cd:1c:75:ef:d5:30:09:c9:15:ee:87:
37:93:1c:7f:a1:e6:46:57:cd:ac:5e:80:02:f1:41:
d6:12:f4:db:b5:77:b9:55:95:01:a8:48:f2:25:36:
4d:56:1c:37:f2:c5:35:a5:80:03:60:a9:b0:de:b3:
b6:70:a2:46:89:a0:62:0b:f7:a6:55:55:48:e6:1e:
0c:27:29:e2:09:85:7c:60:cf:72:18:34:29:33:97:
14:58:9e:5a:da:5b:c5:ed:2a:9e:6e:3a:43:78:c3:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:72:CA:F5:37:2E:4F:06:1A:69:FA:15:4A:AD:AB:39:FA:4D:A6
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.32.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6b:32:73:e0:9a:69:fe:3e:9b:65:c5:a0:8b:08:ab:3a:84:
ae:bc:b7:ca:14:6d:87:a9:57:8a:cb:3b:8c:85:c9:e1:03:48:
1e:3f:d9:de:d1:06:30:fe:d8:e2:02:d4:d5:9e:d3:6c:dd:58:
a6:74:7d:6a:a8:3c:24:2c:cc:a8:52:6e:87:00:ed:c9:b5:c2:
00:9d:ba:e4:3e:d7:0d:ab:dd:b6:0a:4b:b3:b6:f3:c5:28:61:
bd:9a:fd:ac:41:66:42:89:18:7b:b2:4a:41:9a:54:59:b6:b1:
a4:dc:5a:f6:8b:4a:44:65:25:09:db:b0:68:48:72:81:89:1b:
05:fa:ab:5c:9b:75:aa:3a:0a:f4:56:5b:01:a6:15:68:d2:fe:
71:eb:cd:5a:3d:77:94:c4:ee:9c:9c:d2:f2:96:0d:b1:27:04:
e1:2b:ac:b9:f0:09:30:c7:69:5a:c9:a7:86:5b:b1:1a:9e:c2:
7e:37:d8:52:ce:1a:d7:10:d1:db:01:34:a6:c1:26:89:d1:39:
d2:47:6b:4d:30:e2:50:f0:16:3a:43:e4:40:5e:a9:fe:d5:bf:
ba:78:1c:2b:d6:26:20:a3:1d:06:5d:b1:ca:6a:18:08:a1:02:
ab:70:d3:04:04:30:d1:66:06:fc:74:ca:1d:0f:94:69:4d:e0:
cf:c3:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:02 2025 by rpki-client