Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa
File: 3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa (raw, json)
Hash identifier: mTaLjZUShtLJyxJwhuYyIiTNfts2Bx378H3viQB5wZ8=
Subject key identifier: A9:66:35:2D:B5:2B:17:E7:47:4D:D8:E5:D0:67:75:4A:F1:35:0D:40
Certificate issuer: /CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Certificate serial: 45EDE7C4FDFF53DFB692EC9B647D7B57EB7E5D19
Authority key identifier: A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa
Signing time: Fri 21 Feb 2025 13:17:13 +0000
ROA not before: Fri 21 Feb 2025 13:12:13 +0000
ROA not after: Fri 20 Feb 2026 13:17:13 +0000
asID: 272213
IP address blocks: 138.117.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ed:e7:c4:fd:ff:53:df:b6:92:ec:9b:64:7d:7b:57:eb:7e:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Validity
Not Before: Feb 21 13:12:13 2025 GMT
Not After : Feb 20 13:17:13 2026 GMT
Subject: CN=A966352DB52B17E7474DD8E5D067754AF1350D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:19:82:1d:9f:ab:64:33:de:18:a6:7d:61:
39:87:81:7e:17:1b:fd:3d:bc:be:b4:65:0a:61:57:
c3:3f:6f:7f:bb:1e:ca:1e:be:a8:0c:07:11:f9:35:
1e:22:dd:c9:a7:8a:f3:4e:0a:e3:96:db:b9:b7:c4:
0a:db:bc:f4:bd:26:69:04:03:c1:d6:c0:c6:5a:78:
36:f9:42:69:8f:40:c2:03:52:4a:05:69:82:bb:93:
bf:49:95:82:85:cf:63:ba:53:c9:dc:72:f9:7d:30:
2d:16:0f:31:2e:50:28:54:eb:16:ff:5d:9d:d6:2c:
d8:9d:18:d5:47:ae:76:bf:de:3f:da:77:8c:4d:5e:
2e:db:bf:a6:54:f6:01:9a:e1:8e:cd:e1:38:0a:0d:
f7:6e:7b:8d:8a:48:25:08:29:d7:23:33:ad:7a:bf:
55:3b:6d:8d:ac:e9:3d:cf:a2:04:70:1f:6a:ca:94:
44:f8:4e:06:29:50:a0:e1:2e:b1:88:b6:cb:a9:a0:
ba:6e:32:1f:16:0e:66:42:b8:40:67:b4:60:b2:00:
11:81:ad:60:30:7c:8a:39:72:b2:a7:2e:e2:75:25:
27:a4:d0:dd:04:ac:b8:ef:5b:48:2c:db:7e:8c:36:
a0:fa:d4:26:36:a0:eb:c6:04:62:d6:7f:9e:a3:1e:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:35:2D:B5:2B:17:E7:47:4D:D8:E5:D0:67:75:4A:F1:35:0D:40
X509v3 Authority Key Identifier:
keyid:A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:99:8c:81:69:4e:9a:f7:fa:ad:c3:f8:94:c9:f2:0c:f5:7d:
d0:66:4e:98:eb:2d:cf:0b:7e:ec:52:fe:c5:73:83:7f:74:93:
d1:9c:c6:cf:be:99:cf:97:ee:c5:32:15:2a:b9:c5:1e:5f:0d:
23:d6:49:5c:5a:b5:96:b4:95:a9:4d:bc:cd:f9:ca:11:57:b0:
0c:64:c8:91:37:10:67:1d:cb:5a:1d:27:4b:1b:03:48:a6:9a:
af:fb:81:5f:e9:36:2b:7f:8a:53:fd:93:ab:3f:38:7b:67:b7:
46:84:28:9c:f0:e7:91:bb:6a:64:44:ab:25:8b:6a:5e:9a:99:
95:e4:1a:40:72:34:bc:35:f7:a4:13:54:6a:0a:c9:c8:b5:65:
db:5a:ac:36:61:de:86:7f:1d:5f:2a:4f:3c:cc:0f:93:f8:c6:
ba:64:bd:61:34:a7:bc:e0:e6:c9:6f:82:ad:0f:47:c8:eb:ab:
77:b8:cb:17:a3:b1:85:7d:d6:06:1d:fa:eb:62:86:00:b4:50:
c6:d4:1b:92:74:9a:67:12:01:b8:40:61:88:93:ce:9d:31:62:
07:17:83:90:7d:07:9c:bf:2b:57:ea:90:29:67:8c:fd:14:6a:
55:eb:20:2b:b8:8f:3c:f6:bb:c1:58:97:f5:b2:9c:82:e8:3e:
4b:16:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:05 2025 by rpki-client