Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa
File: 3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: 43mtOauM5kxfjh4Lt8o0NYiE2ZLzKnlPjTpqf3zfW6c=
Subject key identifier: 52:0A:7F:F7:01:F0:F5:1E:C6:48:64:6A:2E:4C:1B:E0:E1:B8:2D:37
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 624D0DD2017CFFD9607D00D88817F9B3F43F14A9
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:12 +0000
ROA not before: Fri 22 Dec 2023 20:20:12 +0000
ROA not after: Fri 20 Dec 2024 20:25:12 +0000
asID: 263073
IP address blocks: 138.219.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4d:0d:d2:01:7c:ff:d9:60:7d:00:d8:88:17:f9:b3:f4:3f:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:12 2023 GMT
Not After : Dec 20 20:25:12 2024 GMT
Subject: CN=520A7FF701F0F51EC648646A2E4C1BE0E1B82D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:63:36:24:77:80:2c:d5:87:8b:93:9d:fa:
fe:b0:c7:fa:51:30:3c:d6:37:c0:52:28:9b:0e:80:
ba:fb:5b:58:e7:a8:7a:ec:33:f0:f4:00:b8:74:d7:
41:28:25:4d:01:54:08:a1:f7:a7:e9:2a:5f:72:25:
c5:0b:bd:87:c4:e5:27:6f:b0:05:80:43:cd:72:aa:
85:af:43:90:3f:e6:4c:92:f6:aa:ed:16:f1:52:54:
b3:ef:10:c3:c9:06:32:66:d7:d0:ac:2b:01:a2:17:
12:a4:ba:c2:0f:35:a0:78:40:1c:56:6c:b8:90:ae:
fa:9d:40:f1:c8:14:d4:8a:74:9b:be:41:9c:b2:a8:
f8:2b:4e:25:55:fa:1d:5b:17:11:e0:23:27:3d:2e:
b4:d6:e4:a9:f6:b9:eb:d5:63:ae:ca:93:b5:89:ed:
ac:44:d8:60:53:dc:7b:30:5d:17:2a:58:ab:96:c9:
6f:0e:a1:af:1f:ce:d5:d2:d2:71:7c:40:5e:72:58:
94:94:d2:8a:8b:55:52:7b:bf:69:70:cc:57:c6:1c:
40:59:8a:56:fe:67:2d:ab:c4:88:54:a3:fd:2d:f1:
86:38:50:75:2a:23:f7:85:c6:57:f7:e9:ba:95:55:
22:7e:7d:9a:a4:56:69:4b:c4:2d:32:41:65:39:10:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:7F:F7:01:F0:F5:1E:C6:48:64:6A:2E:4C:1B:E0:E1:B8:2D:37
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:80:e9:1c:a8:f8:7e:7a:eb:88:2d:ce:16:7d:59:94:21:bf:
e4:32:69:94:5b:d5:bd:39:d1:c9:91:4b:33:d0:f0:22:7d:6e:
f1:33:8b:6a:2c:53:97:d2:0a:6e:37:50:cd:49:00:f2:2e:da:
61:3b:b8:43:52:bd:7f:0b:ba:37:3a:e8:dc:64:a0:c8:75:ca:
8e:35:6b:1a:83:9e:88:85:2c:ff:75:d0:de:91:a4:1c:70:dd:
98:d2:35:5d:e9:b8:7a:ab:b7:db:cd:a5:97:a4:62:7f:d8:ad:
9a:7d:70:1a:de:ea:58:89:47:78:6f:4c:04:b3:0c:b8:55:4a:
5e:94:65:9d:bd:9a:71:76:a1:1d:c5:76:b0:98:0c:8d:39:20:
2d:52:b5:32:45:cc:4e:8c:a4:fb:95:87:6b:e0:33:a0:d9:4a:
a4:ba:f0:41:53:ff:62:ea:8e:be:a9:4c:e8:1e:fa:f2:6f:a0:
26:ce:70:95:bb:b9:27:41:a6:e3:c0:1f:2f:2e:06:e4:1c:a6:
83:e7:3e:50:e8:c3:01:30:b9:82:4c:e7:6e:41:39:05:74:48:
02:f1:81:eb:bd:9f:27:98:63:58:c8:20:15:3e:98:1a:8e:d6:
42:b3:d3:5b:a9:1c:87:56:f1:8d:2a:0e:55:8f:9a:0f:a8:8f:
ca:9b:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client