Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa
File: 3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier: ctSXm2bsRg+PPG6ndHPS7bs37aLaHCnBIxjlRLWNjW0=
Subject key identifier: E5:C9:7C:BF:63:DA:FD:12:3B:6A:B0:80:E4:36:DE:B4:ED:5B:62:F4
Certificate issuer: /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial: 722A41B5EA0FCF9D2FC8BE37F511966718E0966E
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa
Signing time: Thu 12 Dec 2024 15:11:55 +0000
ROA not before: Thu 12 Dec 2024 15:06:55 +0000
ROA not after: Thu 11 Dec 2025 15:11:55 +0000
asID: 262777
IP address blocks: 138.219.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2a:41:b5:ea:0f:cf:9d:2f:c8:be:37:f5:11:96:67:18:e0:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Validity
Not Before: Dec 12 15:06:55 2024 GMT
Not After : Dec 11 15:11:55 2025 GMT
Subject: CN=E5C97CBF63DAFD123B6AB080E436DEB4ED5B62F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:5d:dc:34:f4:45:3f:c5:7f:ea:45:2c:c5:
03:c0:68:81:04:ce:c0:39:4b:32:01:fc:e3:97:f9:
69:e5:0f:9d:ca:16:e5:36:05:c7:a4:39:1a:3e:8f:
83:6c:98:93:2f:ed:7d:4c:3a:90:91:e3:16:2b:a8:
24:e0:bd:28:e7:dd:95:c6:fe:5f:85:9d:52:ed:0a:
ee:c6:a7:ca:0d:5d:31:ca:33:ec:96:43:26:bc:ec:
21:0e:70:00:9e:a6:ca:dd:ac:13:e5:cb:cb:b2:d7:
72:8f:5a:77:1a:69:bd:fb:b8:71:00:f7:d4:ba:d7:
88:76:fe:87:22:9f:78:5a:b6:8a:b5:79:85:ff:ef:
00:72:99:cf:25:56:da:55:da:0a:a9:b4:c9:24:3b:
6e:cb:78:ec:40:7f:06:45:7d:75:52:c9:82:f1:39:
0a:ae:22:09:3e:5a:37:fe:04:3d:52:a7:26:b3:6b:
0f:b6:13:dc:cd:ab:eb:68:b2:6c:fb:11:24:b0:7b:
7c:89:0c:81:d5:d5:c6:34:6b:ab:4c:69:ef:4e:9d:
65:13:a8:fb:a7:ee:8f:60:09:f8:cc:46:4a:3d:55:
a8:80:7b:4a:f2:a5:e9:c1:fe:c5:7a:20:e4:ea:26:
97:af:a1:f1:07:4e:ed:ae:2b:1d:c9:8d:1f:4b:ff:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:7C:BF:63:DA:FD:12:3B:6A:B0:80:E4:36:DE:B4:ED:5B:62:F4
X509v3 Authority Key Identifier:
keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.208.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e3:dd:d4:a0:f8:5f:6a:9f:86:39:42:fc:79:48:80:06:b4:
f0:fd:f1:bf:18:4a:14:47:90:c9:9f:e6:dd:a6:a8:c3:23:07:
7d:6c:90:ba:99:55:d4:79:7c:43:8b:8d:70:b1:85:f4:8e:0d:
d1:cc:75:2c:d0:fb:32:76:8c:ab:cf:86:3c:d4:20:fa:5f:82:
40:a0:12:99:7c:37:11:05:d7:db:17:c1:ab:75:9d:fe:b7:18:
fc:c5:66:91:db:8d:76:eb:4e:15:17:da:f5:c5:72:40:5a:7b:
53:60:32:e6:b6:47:88:67:a5:e2:f6:2b:3d:9f:f5:dd:3c:4e:
3c:73:70:b7:67:56:48:d7:59:83:de:ec:4c:8b:31:97:a0:50:
e9:ed:ea:28:75:fb:c3:54:55:c3:0d:b6:91:89:ca:65:9b:a9:
a6:78:fb:af:43:fe:c5:fc:b1:e2:f0:36:77:8d:52:39:5e:20:
22:a8:8f:a7:ed:d4:5d:dc:c0:85:03:d8:8a:19:ac:bc:5d:e2:
50:f2:a9:5b:e7:13:44:c7:38:7e:88:68:88:da:90:27:76:1f:
26:77:62:d8:f0:46:32:37:89:60:f5:fa:11:d1:4f:e1:80:de:
8e:8b:11:d1:37:fd:50:51:d0:2a:0b:25:e2:0b:50:59:c6:81:
c6:57:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:51 2025 by rpki-client