Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
File: 3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier: u9CUKciMWwvYy39pOrdNuKoErtpPFi/n45NE4c5lres=
Subject key identifier: FB:7E:25:CB:02:8C:A9:B3:2D:02:62:A9:98:0F:4C:89:5A:A7:E6:54
Certificate issuer: /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial: 71B3C69FA9C2EE7205DF5CEAB93EA27EAC81EF2F
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
Signing time: Wed 05 Mar 2025 20:00:06 +0000
ROA not before: Wed 05 Mar 2025 19:55:06 +0000
ROA not after: Wed 04 Mar 2026 20:00:06 +0000
asID: 263900
IP address blocks: 138.204.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b3:c6:9f:a9:c2:ee:72:05:df:5c:ea:b9:3e:a2:7e:ac:81:ef:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Validity
Not Before: Mar 5 19:55:06 2025 GMT
Not After : Mar 4 20:00:06 2026 GMT
Subject: CN=FB7E25CB028CA9B32D0262A9980F4C895AA7E654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:ba:29:ad:dc:ec:79:ed:7f:2b:f5:68:5e:
6a:c0:92:99:e1:45:e4:dd:9c:d6:7b:b6:3e:ba:05:
fb:6b:2b:02:77:d5:98:fa:92:be:d5:f0:96:bc:69:
0c:59:60:60:ad:fa:4f:59:45:9e:b6:76:81:4f:a8:
1e:66:d1:31:f9:d6:34:a2:ef:b8:5f:66:1d:41:7c:
4c:3f:14:cc:a8:ca:a1:70:89:4d:4b:ea:b9:13:4f:
11:ed:a7:a2:2b:57:90:85:36:01:70:d4:0d:77:71:
ff:49:7a:6b:88:20:50:e5:f9:00:6f:b2:a7:01:0a:
d2:a2:ef:30:cd:54:21:ae:b0:59:a6:d8:26:a3:4d:
5b:ab:bd:53:e1:90:c1:27:0c:0e:70:77:46:35:2d:
0f:da:5a:f4:d2:5c:5f:cf:4a:08:07:da:2e:a5:00:
05:8e:b9:b0:80:be:b1:ff:ef:db:a7:69:1d:39:0f:
bc:3d:a1:b1:e0:15:fb:9e:bb:27:8c:da:07:87:57:
4c:80:d1:19:29:ca:1f:f3:ba:3d:5f:da:a6:29:6c:
15:1d:e2:48:37:17:31:17:9d:a0:14:37:8e:fd:e9:
c9:fc:e9:09:cc:f0:81:8b:b4:7e:9b:6f:99:0c:96:
ac:af:1a:bb:0c:72:1f:47:6b:c4:4a:f6:e2:46:71:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:25:CB:02:8C:A9:B3:2D:02:62:A9:98:0F:4C:89:5A:A7:E6:54
X509v3 Authority Key Identifier:
keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.149.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b2:40:ff:66:b3:34:05:3b:96:ac:b2:e0:7b:34:22:5b:a5:
43:0c:8e:0f:50:72:b1:6a:26:5a:d0:ed:0a:04:18:ba:d2:1e:
14:95:0d:b6:35:87:04:1e:c5:cc:31:38:e3:2b:48:72:8e:26:
30:06:af:01:42:2e:34:0e:a3:dd:9e:52:88:73:20:4f:8f:c1:
40:d5:1b:df:f4:a8:b8:21:58:7b:1d:d3:18:65:bb:4f:d3:bf:
0f:01:81:82:58:df:5b:b9:ae:4e:24:18:f9:45:b0:91:53:6a:
8f:04:fb:0b:bd:f2:85:c7:16:3d:ba:cd:7a:8a:44:d1:29:95:
ba:65:f4:4d:fb:e5:b8:dd:3f:ab:56:7d:99:bc:61:26:98:bf:
ea:5e:ed:a2:af:8e:31:8d:4b:7c:e1:1a:6c:b7:c7:d0:b4:5d:
fa:d6:b2:d6:85:b6:15:40:96:59:f9:00:d8:92:36:9b:e4:9b:
f1:c7:bf:4c:b7:de:0b:91:49:b8:9d:7c:af:b4:b2:46:62:d7:
31:4b:38:00:76:d5:48:b3:af:0a:09:d8:6a:7d:a6:38:fe:e1:
c3:29:e2:0f:c9:ff:d1:cf:75:90:d6:c5:d4:83:76:e1:d2:00:
3e:ff:88:91:f5:ba:40:36:8c:f8:34:9d:1d:77:fe:ca:94:47:
7e:6e:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:33:09 2025 by rpki-client