Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
File: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier: vRosT9i71yxByMp0a25QrskbJjHc15Im++AZI3B+iDY=
Subject key identifier: 30:7A:37:71:66:C2:14:71:45:08:75:62:7B:D8:78:77:FB:96:EB:C5
Certificate issuer: /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial: 052DFB50964657AA0EC6E230CFDE63820207767D
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 264247
IP address blocks: 138.118.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2d:fb:50:96:46:57:aa:0e:c6:e2:30:cf:de:63:82:02:07:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=307A377166C21471450875627BD87877FB96EBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:ef:75:73:a9:9d:42:d4:f9:2d:dc:35:85:
6e:98:f2:ec:e9:7f:be:69:86:23:aa:51:4b:75:33:
53:32:d0:2b:a1:23:2d:06:b2:23:dc:90:b6:00:83:
6c:0c:cb:72:df:7a:da:f7:45:66:a5:a6:c1:d4:51:
1d:34:6d:b0:7d:5d:75:9c:0f:26:03:47:39:d3:be:
7c:b3:e8:d6:2a:88:fe:47:93:6e:36:80:0b:66:ae:
64:96:d5:fe:fc:09:c7:86:78:24:09:1a:5a:cc:f6:
81:e4:9e:5d:3b:79:f0:1e:c2:8f:02:a9:d8:d8:e5:
bc:17:3b:47:03:ec:a6:14:74:04:48:ff:25:f2:70:
5d:1d:5f:d4:4f:91:c0:96:dc:2a:50:76:90:6a:bd:
91:49:a7:fd:30:47:49:01:51:ed:5d:24:49:18:d6:
74:24:65:2f:af:00:98:cb:8b:7b:3e:27:6f:87:0e:
b3:cf:d5:41:05:4c:47:8e:b9:a6:4f:fc:cd:15:f3:
98:1a:55:97:f2:17:bf:76:75:38:64:18:61:8c:54:
f7:85:b8:d1:1b:24:b4:58:74:b5:26:28:cf:94:ab:
2b:2a:85:23:a7:71:bd:71:e6:55:b9:51:e1:a1:d4:
95:fe:ff:d5:80:56:ff:97:a8:c8:74:39:1b:c4:43:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:37:71:66:C2:14:71:45:08:75:62:7B:D8:78:77:FB:96:EB:C5
X509v3 Authority Key Identifier:
keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4c:5c:c6:72:e2:39:0a:ff:f0:ae:ec:9c:fb:d1:58:31:1a:
58:b1:6c:08:f4:94:bf:bb:bc:2f:3a:c2:ee:b7:36:53:11:f7:
00:fe:4d:c6:bc:a7:8f:3b:9c:97:35:5e:0f:26:65:77:48:a6:
53:3d:40:58:6b:2b:cb:e3:24:76:ec:cf:8e:fd:e0:38:18:b5:
ad:59:a2:84:af:fc:d0:74:57:58:24:74:87:c4:95:7a:6d:c6:
62:70:86:65:1f:d1:22:57:a7:a5:4e:3b:99:62:78:53:ab:67:
35:fc:b2:ae:db:49:66:05:50:a3:f0:78:c5:f4:c9:23:e1:d3:
a6:82:c6:1d:e6:9e:f6:60:3c:29:ef:99:c1:ec:7b:36:04:df:
15:62:88:7a:87:4d:d1:74:ce:df:ac:73:46:0c:11:19:6b:78:
83:64:2f:39:75:f3:a1:5e:af:c5:96:46:77:bf:20:16:bc:20:
45:b3:24:74:47:66:77:1b:da:2e:1a:ce:eb:3b:24:fb:d2:a3:
50:81:f2:da:60:1f:29:fa:90:e7:b6:97:21:c4:ad:3c:16:e8:
b9:5d:de:54:73:32:56:ca:0c:69:e1:45:1f:f1:e3:69:7b:ca:
05:0e:ad:dd:8f:f6:84:5c:a8:b4:4c:e6:b8:7e:d4:34:b2:59:
0e:b8:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:09:39 2025 by rpki-client