Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3234203d3e20323634313330.roa
File: 3133382e39372e36302e302f32322d3234203d3e20323634313330.roa (raw, json)
Hash identifier: f2OSpd2eyaL+LiP0ICQH/9jb3DES6d8v/3qMymh3zdM=
Subject key identifier: A7:64:58:66:03:C5:F4:59:4A:E1:BD:ED:29:BE:4C:8C:3D:2B:FC:9F
Certificate issuer: /CN=A8BD0436E6BF9E340AF020F5EA34B5C289DED09A
Certificate serial: 0BA7CCF7AF38A5B2DBABC8D75DE4AD8F4A196254
Authority key identifier: A8:BD:04:36:E6:BF:9E:34:0A:F0:20:F5:EA:34:B5:C2:89:DE:D0:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3234203d3e20323634313330.roa
Signing time: Wed 22 Jan 2025 13:21:14 +0000
ROA not before: Wed 22 Jan 2025 13:16:14 +0000
ROA not after: Wed 21 Jan 2026 13:21:14 +0000
asID: 264130
IP address blocks: 138.97.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a7:cc:f7:af:38:a5:b2:db:ab:c8:d7:5d:e4:ad:8f:4a:19:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8BD0436E6BF9E340AF020F5EA34B5C289DED09A
Validity
Not Before: Jan 22 13:16:14 2025 GMT
Not After : Jan 21 13:21:14 2026 GMT
Subject: CN=A764586603C5F4594AE1BDED29BE4C8C3D2BFC9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:18:7f:0d:96:df:af:6c:5a:b9:13:ad:d9:
cc:2e:63:b0:5a:51:2e:c1:73:6b:fa:f0:51:f4:4a:
fb:70:26:57:3d:59:b4:f6:53:4f:aa:d6:64:4c:6b:
7d:f2:57:d2:78:41:07:d4:a3:1e:74:e8:2f:f0:96:
01:7f:67:f4:a0:7e:59:3a:bc:4b:ba:d3:37:9d:f5:
68:ed:a6:cc:37:9b:25:4a:22:8c:15:77:5b:ec:47:
74:1a:23:63:a1:07:0c:f5:92:4f:1e:5a:c6:41:81:
fd:74:4f:4f:f4:be:18:f4:be:1e:4e:ff:2c:79:16:
4d:7d:01:20:a5:40:ff:ae:1d:3f:5a:89:44:79:2b:
b4:0e:05:74:4a:bc:c2:3d:9f:27:2c:14:db:d2:68:
52:a8:1b:bd:1a:f7:f1:b0:c4:05:fe:46:32:57:63:
58:46:ad:7c:dc:28:29:d9:d5:e7:d1:43:47:34:b8:
52:27:7a:42:e7:5c:7c:93:e0:37:40:77:09:86:27:
2e:b8:26:34:df:51:d4:3d:e0:0b:08:07:30:94:0b:
9c:b8:16:f8:cf:6f:83:5e:66:1e:3d:d8:af:4a:47:
5a:86:96:6c:dc:1f:eb:bf:37:83:ad:77:5a:bf:ed:
51:f8:99:54:9e:47:a0:39:53:0e:5f:84:64:af:09:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:58:66:03:C5:F4:59:4A:E1:BD:ED:29:BE:4C:8C:3D:2B:FC:9F
X509v3 Authority Key Identifier:
keyid:A8:BD:04:36:E6:BF:9E:34:0A:F0:20:F5:EA:34:B5:C2:89:DE:D0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3234203d3e20323634313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e3:96:1a:2a:4f:0e:49:4e:80:9a:6d:91:c3:66:4e:2d:6c:
97:92:37:c6:88:4b:03:98:45:3a:61:49:13:f7:83:54:2c:3e:
5e:a5:26:c6:01:9d:37:3e:58:f0:54:26:71:a5:b9:3c:3a:e7:
f1:7b:d4:68:93:46:14:b4:61:d5:e9:23:dc:2e:07:ca:d5:f6:
6e:eb:a4:1d:7a:9f:38:af:7c:ad:73:f9:18:1d:46:12:d6:f1:
8d:1e:9c:3e:58:50:a9:60:bc:bc:fd:b8:b4:82:8c:38:4c:d5:
64:fa:d3:98:b1:d8:c0:45:ef:8a:7b:17:ba:5f:a5:50:ef:f3:
8c:dc:fb:28:62:23:d4:f8:fa:30:0c:e0:62:05:fd:55:90:0a:
68:aa:33:21:eb:77:08:df:22:48:6c:3c:b9:ec:ab:d0:7e:e2:
41:70:2b:b9:6e:e1:67:81:b4:8d:95:41:76:01:23:a9:17:36:
c9:34:56:a0:d1:34:7f:39:24:4e:7e:b3:67:66:e0:e8:bd:64:
6f:1a:30:7b:a8:96:d7:e1:87:66:a8:9e:4c:0b:d9:5f:c3:43:
12:fc:af:a9:7c:8d:c4:c6:05:77:6a:63:c1:01:25:e9:c7:16:
38:0f:87:3a:bf:c5:7a:23:7a:68:8b:6a:6e:b9:7d:d0:8c:e4:
18:c6:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:59:54 2025 by rpki-client