Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
File: 3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (raw, json)
Hash identifier: Ul0edCGJ7qzxUpEzVowkFojJ3qA4ItE2Zej9l0zFMQs=
Subject key identifier: 6B:11:7D:B5:17:65:59:41:45:47:D3:CB:9E:C3:EA:81:84:42:6F:14
Certificate issuer: /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial: 5ADCB261864F3A6534CF73EDB008177C2DBFEFB5
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
Signing time: Wed 05 Mar 2025 20:00:06 +0000
ROA not before: Wed 05 Mar 2025 19:55:06 +0000
ROA not after: Wed 04 Mar 2026 20:00:06 +0000
asID: 263900
IP address blocks: 138.204.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dc:b2:61:86:4f:3a:65:34:cf:73:ed:b0:08:17:7c:2d:bf:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Validity
Not Before: Mar 5 19:55:06 2025 GMT
Not After : Mar 4 20:00:06 2026 GMT
Subject: CN=6B117DB5176559414547D3CB9EC3EA8184426F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:22:15:05:63:55:6f:f1:16:c7:e6:6c:c4:
2c:1a:65:50:11:2d:e1:4f:59:19:cc:a3:8f:58:fa:
fc:8a:b4:b2:4d:b2:63:11:78:0a:d6:3f:4a:b1:56:
cd:fc:52:e0:44:77:e1:5f:e6:71:0c:47:1a:63:46:
52:28:fc:bd:77:87:f1:f7:51:15:f6:07:72:47:88:
45:f4:5f:d7:a7:46:a5:4d:4c:c4:0a:a4:fe:81:d2:
28:28:74:98:85:fc:3d:88:59:0f:df:48:49:3b:7d:
9a:c5:7f:ae:b6:7b:7f:1d:c5:77:6f:c6:05:65:79:
b1:e6:3b:ca:6c:3e:43:39:ea:fa:23:9e:15:20:f5:
3e:48:40:fa:bf:0d:5d:27:ac:7d:6d:26:df:bb:67:
22:76:c5:04:a1:32:18:f2:1f:fb:93:3f:2d:f7:4f:
fb:92:d1:52:ff:c3:5b:46:6c:93:9f:99:b7:50:42:
e0:47:12:90:ab:29:d5:16:5d:83:ee:fe:ee:38:65:
a1:4b:2a:19:c6:76:e6:65:d7:bf:35:45:d3:1b:a6:
aa:3a:a9:ce:50:a8:93:ec:8a:e1:9e:bd:41:1c:20:
29:5c:7a:af:09:55:c3:ce:60:fd:df:7a:57:1b:61:
51:69:66:8b:92:86:9c:75:4a:a6:5c:70:4c:5d:9f:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:7D:B5:17:65:59:41:45:47:D3:CB:9E:C3:EA:81:84:42:6F:14
X509v3 Authority Key Identifier:
keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:0f:be:2d:52:e8:ff:ad:8f:6f:ad:99:f4:a1:97:24:58:b8:
50:81:4e:fa:79:0f:59:84:fe:e1:44:d0:d3:6f:a6:d3:9a:32:
b6:51:cc:42:11:c8:c3:c2:a0:29:7e:56:ec:d8:40:84:4a:a3:
b4:2b:85:bb:af:a6:29:21:bc:de:02:ba:4f:9d:cc:c2:01:09:
c6:3d:ce:77:30:1d:1f:23:e9:0f:2f:c4:19:18:02:93:ed:63:
2c:ec:6b:0f:45:c3:fd:58:c0:db:99:59:a0:4c:83:95:bc:10:
d6:36:5d:67:0f:76:02:6e:18:d9:20:b5:01:b0:d1:a0:41:66:
58:6f:68:08:5e:52:52:77:9f:0c:d4:23:24:88:3e:96:ee:c9:
23:ae:3b:98:a5:66:ea:34:8c:a0:86:c8:0c:e7:92:33:f5:a8:
25:a2:d9:2c:72:65:a3:76:80:0b:38:b9:53:44:00:72:a0:21:
f0:cd:a7:61:95:7e:ac:b7:78:af:9c:fe:b3:be:9c:ee:3e:84:
24:87:93:3a:47:81:6b:d9:98:99:17:8e:d8:4c:3f:e2:f3:82:
15:c7:c3:87:76:2b:a1:5f:69:67:94:ec:1e:ed:c2:e0:6a:d4:
31:34:0f:1b:d4:48:1f:d2:a3:2e:3d:d1:0e:3d:03:4c:13:2f:
a7:93:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:34:58 2025 by rpki-client