Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232372e302f32342d3234203d3e20323732323133.roa
File: 3133382e3131372e3232372e302f32342d3234203d3e20323732323133.roa (raw, json)
Hash identifier: 41/MwZw94uTJhtdhR7+K+M3sGeUluiWN85cT9SikNxI=
Subject key identifier: 24:0F:02:48:07:48:C0:45:27:C8:89:83:E1:A9:59:D0:7D:07:BD:DC
Certificate issuer: /CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Certificate serial: 736161A17F1954FA28C91A818F0730DAB400E8F0
Authority key identifier: A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232372e302f32342d3234203d3e20323732323133.roa
Signing time: Fri 21 Feb 2025 13:17:13 +0000
ROA not before: Fri 21 Feb 2025 13:12:13 +0000
ROA not after: Fri 20 Feb 2026 13:17:13 +0000
asID: 272213
IP address blocks: 138.117.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:61:61:a1:7f:19:54:fa:28:c9:1a:81:8f:07:30:da:b4:00:e8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Validity
Not Before: Feb 21 13:12:13 2025 GMT
Not After : Feb 20 13:17:13 2026 GMT
Subject: CN=240F02480748C04527C88983E1A959D07D07BDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:ed:00:e6:30:3a:28:37:9b:32:e6:5d:23:
c5:27:94:8e:0f:6c:e2:fc:18:bc:16:33:0d:c6:18:
24:29:32:8c:37:b9:ca:35:23:e9:f1:e8:02:5d:52:
d7:11:a4:13:1e:66:c8:44:63:85:cc:f7:69:37:bf:
33:db:e2:55:e2:00:ac:78:3c:5e:28:30:23:40:06:
bc:09:fd:e7:23:c1:d0:84:21:dd:d5:39:61:d2:13:
9a:ff:d6:ea:44:21:21:a9:d8:68:f2:ac:76:3a:87:
60:dd:0a:b0:41:56:2b:1a:55:15:b6:3b:09:72:3c:
a3:8d:4e:26:cf:e2:14:44:fe:68:a2:90:75:36:d0:
66:41:47:cd:18:8d:4a:f8:05:4d:5e:ba:2d:e4:2f:
35:ec:30:91:5b:32:4f:fb:d7:3d:fb:d2:36:e9:26:
c9:0a:b3:ab:bd:63:f4:50:70:e5:b6:00:57:eb:55:
65:13:26:9a:d0:e3:62:82:64:57:c0:70:bb:d2:8c:
a3:3a:8b:85:0f:69:ef:a1:c4:68:a7:1b:20:0e:60:
87:03:30:99:4d:dc:1c:af:45:61:d7:e4:97:ca:f3:
ed:11:96:5b:c5:8a:83:8a:3b:10:50:94:a3:5d:55:
34:f0:e6:1f:54:43:cd:98:90:1d:31:ba:57:3b:7e:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:02:48:07:48:C0:45:27:C8:89:83:E1:A9:59:D0:7D:07:BD:DC
X509v3 Authority Key Identifier:
keyid:A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232372e302f32342d3234203d3e20323732323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.227.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7b:e1:fd:78:90:12:0d:54:93:28:7a:44:ad:2e:48:77:04:
8c:de:71:cb:ba:4c:c1:dd:67:25:0c:d6:4a:74:3e:59:3d:9e:
eb:16:25:21:87:f0:ec:cb:04:52:53:4a:bf:2f:f2:97:6e:7e:
08:ea:36:ed:0c:46:d9:c5:72:f0:80:da:69:78:fe:91:38:5d:
8b:69:3b:3f:7e:72:55:0d:ec:68:cf:72:70:00:37:6b:40:13:
9b:8d:41:27:8f:ba:b7:36:01:2c:c9:c2:31:0d:6a:8f:4d:ac:
e5:16:c5:eb:2b:2f:f0:37:3a:e8:50:58:44:9c:44:99:4c:54:
1e:1d:ee:30:59:e8:e5:dd:bb:4d:79:47:71:05:88:1a:93:f4:
ff:70:2d:64:61:d6:b1:be:34:99:b4:32:14:63:17:07:e9:34:
f8:0f:89:80:32:e1:6c:71:8d:e0:35:34:fd:27:70:c8:da:47:
1a:83:4a:18:6b:67:a1:94:2a:8e:11:45:6a:09:63:f7:41:7e:
08:1d:88:98:ed:b4:0e:31:be:8a:3f:e7:5b:bd:c7:67:3e:04:
36:ab:2f:30:82:ba:ea:a9:17:31:9f:5a:dc:e0:b0:8d:2b:dc:
79:76:44:86:83:2f:31:48:16:1a:a0:70:e9:de:c4:a5:3b:f6:
f1:5a:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:07 2025 by rpki-client