Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
File: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier: 51mRVkyY/Wy3Sqsx++CaRGGvJ9aPoX6BV03uZ6v/nyw=
Subject key identifier: A9:74:CE:1B:34:13:D9:B7:DD:D9:30:84:D2:29:91:32:5A:C9:40:00
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 7C39F4B2F4B07246B65ED37827C558241EDF950C
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 21:00:01 +0000
ROA not before: Sat 04 Nov 2023 20:55:01 +0000
ROA not after: Sat 02 Nov 2024 21:00:01 +0000
asID: 264247
IP address blocks: 138.118.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:39:f4:b2:f4:b0:72:46:b6:5e:d3:78:27:c5:58:24:1e:df:95:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 20:55:01 2023 GMT
Not After : Nov 2 21:00:01 2024 GMT
Subject: CN=A974CE1B3413D9B7DDD93084D22991325AC94000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:8e:96:48:f9:8b:e2:fc:53:4b:79:9a:d8:
0f:13:dd:6c:79:d2:a4:9d:82:4d:0f:bc:77:6a:d7:
ab:f9:c0:ce:47:90:50:3c:03:27:92:11:43:f4:1d:
85:4f:1f:bd:7b:d2:5b:2a:a7:6b:f6:c1:2d:ae:f7:
b0:4b:2e:04:ad:78:c8:0a:2b:e0:06:f3:a4:67:f8:
87:ce:d3:84:9c:63:77:f5:ee:1b:51:75:2c:80:3e:
68:e1:ff:ea:b3:7f:51:82:68:a1:e9:a8:32:8c:c8:
9b:fa:3e:d1:65:d3:4e:ec:59:63:29:24:84:75:2a:
1a:6e:4b:f1:a1:0a:cf:08:af:ad:3c:fa:53:c0:78:
f9:23:fc:b3:f3:26:23:46:ee:08:7e:62:42:27:46:
94:94:d5:78:43:cc:42:31:d0:28:ac:3f:de:89:45:
b4:ac:6d:e9:58:58:4a:f9:ea:28:95:b2:dd:3a:d5:
29:07:25:e2:d2:f2:da:e1:46:40:cc:06:34:a8:af:
63:ed:ba:fc:a1:dc:54:cf:50:30:9f:a7:cf:a3:a6:
02:29:6b:cd:ee:76:7f:49:a9:27:49:3d:12:d0:5c:
42:06:0d:14:ab:53:a9:57:e0:ae:a5:6f:c3:0d:fe:
a7:bc:26:ac:67:c3:77:54:8c:c7:bc:de:73:f9:c9:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:74:CE:1B:34:13:D9:B7:DD:D9:30:84:D2:29:91:32:5A:C9:40:00
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.34.0/24
Signature Algorithm: sha256WithRSAEncryption
66:dd:ce:8d:65:26:6e:de:2d:7b:14:75:0f:91:b8:b5:21:30:
7b:e5:ff:43:31:c0:f8:de:0b:f8:41:92:89:cb:ff:59:ea:e4:
42:e8:bc:f6:88:59:07:39:17:09:70:4e:03:6e:26:2b:73:04:
f3:fb:43:74:bc:13:d3:ed:26:27:f3:93:28:70:a1:61:69:1c:
10:26:a1:04:b7:b8:5c:13:0c:3f:52:3b:00:7f:87:f7:2a:1b:
ff:29:53:38:d8:3a:5c:e9:4f:bb:95:ce:18:c0:51:29:54:3a:
0d:45:85:2a:3d:69:94:c8:99:07:35:da:77:ee:44:77:b6:93:
a0:0b:fd:97:b5:ba:40:c9:02:50:81:05:4a:99:fa:d6:9f:9b:
a0:b6:bd:65:76:65:f0:d8:e2:f1:4e:5b:cc:83:38:ca:92:9c:
2b:34:27:ae:08:a3:45:3a:60:fe:5e:99:26:a5:62:4a:f2:86:
60:98:da:1e:af:b5:aa:77:7f:a8:a8:66:95:64:a5:ac:37:73:
9a:b3:00:e0:4a:82:fd:65:23:32:81:8b:c5:96:a7:f9:83:c0:
bc:2e:4c:a8:7b:7e:87:46:8c:3c:d1:55:2b:2b:4e:ef:88:bf:
53:e7:fe:d5:4e:c4:6c:91:e1:9f:a6:cf:63:10:96:e5:cc:92:
81:80:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:49 2025 by rpki-client