Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
File: 3133382e39372e302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier: /v2vzETncLM7OTbfehrJd+2tAoahNTcid4eovEkO4cM=
Subject key identifier: 30:19:AC:1C:03:5D:85:8B:31:65:95:17:14:26:77:03:D6:D1:C8:E5
Certificate issuer: /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial: 0B821DD809B299F62C8CAA07ED767A349AE93C1D
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
Signing time: Thu 27 Mar 2025 18:15:47 +0000
ROA not before: Thu 27 Mar 2025 18:10:47 +0000
ROA not after: Thu 26 Mar 2026 18:15:47 +0000
asID: 262346
IP address blocks: 138.97.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:82:1d:d8:09:b2:99:f6:2c:8c:aa:07:ed:76:7a:34:9a:e9:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Validity
Not Before: Mar 27 18:10:47 2025 GMT
Not After : Mar 26 18:15:47 2026 GMT
Subject: CN=3019AC1C035D858B3165951714267703D6D1C8E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:0f:1a:e8:27:f5:88:b8:ab:cb:bc:f7:1a:
6f:9e:d0:dc:e8:76:37:94:40:59:a3:89:b1:cd:7f:
fd:85:73:34:ea:dc:c7:aa:8e:57:c9:cd:e1:1d:16:
35:f0:f6:47:51:2c:aa:29:e6:09:92:76:fb:8b:97:
35:9b:f8:c7:6d:30:e5:f5:4a:77:80:1c:c9:13:e8:
33:6f:20:97:49:08:1f:41:27:f8:56:2d:dd:bf:58:
bd:ea:e9:c2:b0:a1:0e:0c:a6:20:51:2f:ef:9a:4e:
07:52:11:c2:d7:00:36:1b:2e:31:cd:04:cb:32:0c:
e6:7c:c7:60:7a:be:b6:80:e8:98:7f:e3:c9:14:13:
41:5f:7e:9a:a9:31:dc:07:fd:55:34:b9:da:f0:c2:
d7:78:b1:0f:6d:76:83:09:12:fa:d2:42:ed:57:31:
c8:f3:2b:e3:da:97:1e:26:78:2a:8e:c0:7e:88:ca:
7e:ef:37:d8:a3:60:18:1b:fe:6c:25:70:cc:9e:ec:
60:b1:bb:9b:ce:aa:5e:c2:8f:f7:21:be:ed:e6:ff:
50:25:ac:6c:28:44:23:58:48:da:9d:9f:2b:82:2d:
ab:80:8d:6d:a0:b8:1b:f0:76:78:63:de:3a:c5:e3:
0a:1e:5d:22:67:5c:8d:b3:1d:aa:fe:98:2b:05:84:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:AC:1C:03:5D:85:8B:31:65:95:17:14:26:77:03:D6:D1:C8:E5
X509v3 Authority Key Identifier:
keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.0.0/22
Signature Algorithm: sha256WithRSAEncryption
39:c2:ef:f1:3e:06:f7:61:ff:ff:da:cf:0f:34:51:d0:bd:58:
89:ca:e3:21:ad:59:fd:32:62:4d:87:6e:1c:dd:f5:ff:42:81:
be:ff:57:56:36:e5:ff:6b:c7:e1:ce:99:9f:ce:ca:81:18:5a:
43:b6:79:29:11:0a:d0:59:f4:8f:68:2c:75:79:e9:cb:a4:79:
fb:07:66:66:f6:d6:c8:93:ba:88:5f:a3:78:c3:20:ac:30:8b:
d9:21:c6:ed:42:d6:ac:53:f3:46:cd:51:ef:fa:7c:91:c2:c7:
55:9c:69:42:17:c9:c0:93:9f:2e:a8:72:de:39:23:ad:e6:9c:
b5:b1:0a:67:13:f0:b2:db:ab:aa:2d:34:b5:12:75:85:e1:5e:
d9:b7:86:5a:a5:67:31:83:71:0a:b4:d3:2b:a6:59:8c:e4:fb:
e4:9d:2b:eb:df:04:ba:58:b6:5a:d4:2d:f4:ff:71:c3:74:6c:
c8:64:34:68:0f:3a:fb:c8:09:ab:be:a0:29:42:c0:d3:2f:db:
d4:50:5e:ca:79:c3:03:31:8e:ab:7f:c5:ab:d9:20:10:51:46:
9f:c3:5d:74:9e:13:4f:17:4a:e1:42:39:29:5f:fa:e0:3a:39:
08:f0:77:1e:99:52:56:e6:b4:b1:3b:3c:8e:77:e5:78:02:9b:
7d:10:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:34 2025 by rpki-client