Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa
File: 3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa (raw, json)
Hash identifier: GygNyt8Z/cH0caNVFOx3TXcauAd0dhHCYLifKvneYqk=
Subject key identifier: 54:00:68:D4:3D:BF:6C:3B:62:82:0E:CA:D0:EB:C2:87:76:2A:B9:E5
Certificate issuer: /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial: 02114BC7FF86C28ED71457F0B1A26F697B5A65EC
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa
Signing time: Thu 20 Apr 2023 14:14:11 +0000
ROA not before: Thu 20 Apr 2023 14:09:11 +0000
ROA not after: Thu 18 Apr 2024 14:14:11 +0000
asID: 264215
IP address blocks: 138.99.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:11:4b:c7:ff:86:c2:8e:d7:14:57:f0:b1:a2:6f:69:7b:5a:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
Validity
Not Before: Apr 20 14:09:11 2023 GMT
Not After : Apr 18 14:14:11 2024 GMT
Subject: CN=540068D43DBF6C3B62820ECAD0EBC287762AB9E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:4e:45:93:b4:75:c8:b8:18:95:9a:0f:32:
43:20:16:cc:4b:d6:f7:bb:a4:91:63:7d:c5:3a:1d:
07:63:13:a0:04:0a:f6:f3:f8:06:70:93:5c:d5:a2:
e7:a7:7a:cd:bf:8f:f2:4e:43:58:99:12:ad:b7:19:
3f:96:0a:ef:eb:0d:20:a8:28:16:1d:59:2e:db:6a:
f0:b6:58:76:8e:0e:80:a8:44:22:d3:95:b0:38:0b:
7d:83:3c:38:aa:67:c9:84:41:f6:c9:db:61:aa:a5:
cf:4f:d3:6b:bb:1b:71:49:4d:8a:13:74:87:4b:59:
e8:50:10:e5:dc:00:2f:8d:a8:0b:1b:3c:0e:81:72:
c3:9a:a0:69:13:91:6b:4f:08:b6:0d:59:78:d2:7f:
72:fb:76:d2:ed:3b:9c:47:52:76:64:5b:42:d9:df:
f3:b2:6e:5a:34:ba:47:0d:2f:7b:df:ed:a3:d5:98:
b2:87:6a:35:e6:51:37:44:76:c1:37:cc:ff:24:b0:
3f:01:54:b9:df:0e:41:dd:fc:18:75:d1:5f:bd:61:
64:76:b2:05:7b:b2:03:4b:8f:8c:f3:b3:88:70:47:
68:a7:2c:6d:3b:78:36:43:60:0d:53:43:1b:f0:5c:
c2:19:ae:0b:38:78:f4:03:c5:77:99:a8:4a:cf:77:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:68:D4:3D:BF:6C:3B:62:82:0E:CA:D0:EB:C2:87:76:2A:B9:E5
X509v3 Authority Key Identifier:
keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.132.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d9:4a:f5:cc:83:37:cf:7e:ba:9f:47:56:49:a3:bd:8d:ce:
90:ad:c6:3d:b8:77:2a:22:e0:46:46:b1:1d:2e:af:00:52:1d:
45:06:ae:43:0e:94:f5:b4:bd:eb:bd:8b:f9:59:0b:49:eb:9e:
99:17:88:c2:ef:1d:b4:8b:30:88:6e:76:91:99:8f:a1:2e:5a:
bf:93:42:98:64:6d:87:9a:a5:02:b9:cd:0d:69:13:34:b3:6a:
42:c5:b4:45:6d:64:9c:8f:fe:09:49:b7:f2:81:cb:56:f4:cb:
b2:6d:24:1f:7c:84:18:c1:17:f6:e3:d3:1b:9b:35:c7:76:38:
7e:47:40:d8:34:a0:bf:9b:0b:18:d7:ce:11:32:84:d4:1c:7f:
11:74:69:ac:1e:d7:f9:4f:33:ff:21:60:75:89:3d:f8:ed:9b:
b0:f7:4b:dd:1d:c1:82:27:41:66:b7:44:8c:54:d6:ed:3d:95:
47:9d:0c:a8:d8:a3:01:85:3f:9f:c4:9d:f0:c9:57:32:b0:f0:
90:7f:c6:75:14:b1:56:fb:f1:91:15:5d:66:e8:c4:1f:a6:dc:
3f:0c:6c:22:f9:16:eb:e1:a9:22:aa:b0:e0:a8:87:fa:d5:12:
33:77:74:9b:2c:29:ef:25:9d:c5:be:3b:5c:10:e2:25:e3:7c:
90:e4:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:55 2025 by rpki-client