Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa
File: 3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier: Ztn/kRROqYdn3+8z7lQp5IZdec3jfJH0a5FCQh8jPKs=
Subject key identifier: 0B:A0:48:DD:20:5F:47:EA:3E:B0:FD:8D:F3:72:69:5C:AC:CF:92:89
Certificate issuer: /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial: 5260298492A78BF057CF2FDA150C3CF29BDB5750
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa
Signing time: Wed 05 Mar 2025 20:00:07 +0000
ROA not before: Wed 05 Mar 2025 19:55:07 +0000
ROA not after: Wed 04 Mar 2026 20:00:07 +0000
asID: 263900
IP address blocks: 138.204.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:60:29:84:92:a7:8b:f0:57:cf:2f:da:15:0c:3c:f2:9b:db:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Validity
Not Before: Mar 5 19:55:07 2025 GMT
Not After : Mar 4 20:00:07 2026 GMT
Subject: CN=0BA048DD205F47EA3EB0FD8DF372695CACCF9289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:2b:42:4d:06:06:17:34:a2:5e:61:cd:75:
fa:77:6b:60:18:48:9f:a8:05:78:c4:59:28:39:c6:
c2:c8:cd:93:ec:21:bf:a0:83:28:86:a1:b3:de:89:
6e:e1:cf:92:e9:0e:d3:e1:e2:bf:15:0e:b2:7c:10:
09:fe:28:dd:b7:9f:9e:2e:b0:e6:b5:5b:6f:28:cb:
c2:12:2b:8f:3e:7c:50:5a:e5:88:b3:04:b0:93:37:
9a:35:a5:ea:31:9f:41:b9:ea:b3:67:b2:7a:d7:7b:
29:05:63:35:ba:93:bf:ec:b0:c2:a8:43:ed:fc:8b:
e8:d7:d4:87:ca:a9:8f:3c:37:0e:25:7b:5f:26:73:
30:09:30:57:31:f8:8f:34:79:d5:0e:ae:1b:a7:7a:
08:c4:1b:a4:b2:61:82:df:49:3f:42:c1:4d:24:5a:
3f:91:d1:a1:90:ba:cc:ab:33:87:52:2b:6a:fb:6f:
4f:c9:3e:63:ec:98:97:d4:0b:2b:e1:7a:29:7f:dd:
bd:1f:35:ce:b7:0e:87:6a:66:bf:20:34:5b:67:9a:
7d:f8:9b:ec:81:5e:7f:d9:57:74:13:f1:ba:8d:32:
7c:e5:ac:f0:aa:fd:91:81:df:1c:7b:3c:cc:6c:2a:
9a:b2:69:d9:9a:90:74:3c:0e:be:20:c4:cc:de:30:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:48:DD:20:5F:47:EA:3E:B0:FD:8D:F3:72:69:5C:AC:CF:92:89
X509v3 Authority Key Identifier:
keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.148.0/24
Signature Algorithm: sha256WithRSAEncryption
77:29:95:a5:9e:dd:3f:04:c3:c1:2a:8d:68:5d:ab:29:a3:7a:
f2:7c:a9:e3:79:14:3d:6a:f3:2b:35:37:c3:5a:31:7b:f9:7b:
13:50:e6:f5:d9:00:ff:1c:d6:10:31:b0:20:42:b7:45:41:f7:
5d:b6:e4:8d:83:54:8b:d8:6e:40:87:15:fb:fd:8b:f8:3e:59:
34:bc:12:3e:93:ca:a7:d9:34:35:3c:68:58:e2:65:3e:b5:41:
81:b9:3a:15:c5:52:54:11:07:70:8b:fc:5b:b1:36:7a:4f:49:
ad:2b:0a:05:93:91:a6:e2:87:f6:97:09:f6:ca:d1:58:32:29:
1c:00:28:d0:94:5f:66:a2:e1:15:e7:6f:20:80:b6:db:cb:ef:
09:a8:b1:72:e9:3c:9b:91:f9:08:76:67:1b:80:5a:97:ad:02:
8f:e8:42:18:a0:4c:66:f5:7d:5d:13:73:3c:59:4f:7a:73:de:
57:83:35:64:51:cd:2a:50:2d:50:b0:2b:96:0a:32:fc:7e:38:
b5:cb:63:94:73:d9:b5:c3:f0:be:2b:4e:e4:86:09:04:ab:89:
3b:55:92:34:69:1c:98:02:67:8f:e6:5e:8a:28:05:8d:6d:9b:
5f:8a:12:93:a9:a0:40:0f:cb:75:8d:83:9e:61:f3:05:da:51:
f5:92:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:35:43 2025 by rpki-client