Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa
File: 3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa (raw, json)
Hash identifier: nWzLuaiOgz6s9t8EE2W9IrO0SAywUliSZdtfvgmuHpI=
Subject key identifier: F2:61:B8:35:4A:77:CB:24:8D:50:23:E9:FA:57:CA:32:B5:93:0D:DE
Certificate issuer: /CN=309943EC91951A9ADF4A2C846825824B6F268881
Certificate serial: 7BDB8CEE4661EBAEEBAEB93654F2814CD0BBEA35
Authority key identifier: 30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/309943EC91951A9ADF4A2C846825824B6F268881.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa
Signing time: Fri 21 Feb 2025 12:32:14 +0000
ROA not before: Fri 21 Feb 2025 12:27:14 +0000
ROA not after: Fri 20 Feb 2026 12:32:14 +0000
asID: 264288
IP address blocks: 138.121.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:db:8c:ee:46:61:eb:ae:eb:ae:b9:36:54:f2:81:4c:d0:bb:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309943EC91951A9ADF4A2C846825824B6F268881
Validity
Not Before: Feb 21 12:27:14 2025 GMT
Not After : Feb 20 12:32:14 2026 GMT
Subject: CN=F261B8354A77CB248D5023E9FA57CA32B5930DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:9b:1c:0b:bc:89:5b:c4:b2:65:fc:90:db:
80:ff:f6:e4:ce:c5:d7:51:0f:d2:64:9d:1b:0c:0f:
5d:a2:e8:e2:7c:4c:e5:b5:74:6a:12:66:71:03:b3:
c2:bf:37:94:b6:95:18:f6:86:4f:24:a1:30:bc:14:
fa:5c:22:6a:b0:50:9c:f1:cc:7e:02:26:4a:d7:50:
33:ef:be:a9:04:c2:2b:6d:e3:10:db:9b:43:74:64:
ec:09:7e:df:34:6e:c8:68:84:e8:02:d9:fc:80:dc:
c0:d2:94:b1:4d:e3:ea:cc:b6:d3:dd:7e:34:08:9b:
dc:01:55:0b:cb:56:31:f5:dc:44:81:05:79:1f:0f:
da:60:44:3a:de:1d:be:36:e4:4d:47:5d:44:be:9b:
dc:ac:91:ad:a0:97:60:d1:1a:87:ee:a6:d0:63:a5:
99:a8:62:14:ad:f6:b4:11:06:a9:67:22:16:a7:44:
97:29:59:49:42:4e:5e:e9:68:2f:3d:1a:f0:5d:39:
07:46:f2:e5:0d:ba:31:83:3c:09:ec:98:6e:57:79:
4e:63:cd:cf:9c:e7:43:41:d3:3e:a6:d1:1d:ef:6f:
8e:6f:f2:24:08:6a:de:27:87:c3:1d:34:af:95:28:
9e:03:e6:03:ef:b2:fe:27:3b:04:81:6a:1d:79:8f:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:B8:35:4A:77:CB:24:8D:50:23:E9:FA:57:CA:32:B5:93:0D:DE
X509v3 Authority Key Identifier:
keyid:30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/309943EC91951A9ADF4A2C846825824B6F268881.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/309943EC91951A9ADF4A2C846825824B6F268881.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.32.0/22
Signature Algorithm: sha256WithRSAEncryption
04:1f:37:4b:39:13:20:57:7b:ca:cd:ba:91:7e:6d:57:e0:46:
da:cf:73:ff:44:1a:84:e3:2b:a8:c6:6d:31:63:d0:05:d4:98:
84:c9:93:c4:9f:06:56:09:71:d5:3b:bd:b9:a2:81:95:b2:4b:
13:23:bd:24:36:70:75:eb:d9:49:8e:05:08:92:de:3e:9d:8d:
b8:40:31:c5:df:5f:8c:88:b2:b5:b7:ea:ca:46:24:ff:f0:23:
64:a2:a0:1f:9e:75:1b:d3:02:23:b3:77:24:5e:58:ac:50:14:
4c:1b:61:7e:b9:ac:54:b1:45:d5:89:63:34:48:2d:7e:20:63:
56:ec:a3:fc:b6:33:d8:d4:2a:ff:65:9f:e3:13:da:56:be:52:
eb:49:c2:45:9e:56:df:a4:96:a2:34:71:d4:76:a9:cb:fa:c0:
81:d9:ec:1d:3f:81:06:11:0d:25:88:7f:ef:f4:3e:86:a9:00:
f2:fb:b2:9a:ce:56:72:0f:62:fd:7a:ed:ec:b0:1c:f4:51:88:
25:65:16:9f:07:f0:de:1d:54:c9:2a:6d:36:97:45:ac:7f:3f:
87:ef:45:60:ae:58:ba:c4:be:26:21:70:79:1c:3a:b5:9d:4f:
cd:02:28:c3:15:3d:12:67:aa:6c:53:f8:d7:a6:c0:f7:1d:f0:
98:79:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:54:23 2025 by rpki-client