Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa
File: 3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier: LHzfWvXEMMB2l4RH/0VMJMrSrPjceFgnpLvrgUYZBSM=
Subject key identifier: 0A:E8:1C:E4:CE:C2:CE:34:92:C5:E4:90:D7:74:DA:E6:5B:41:F5:5F
Certificate issuer: /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial: 676254C2BCC87F9B0C284C38D8F71D8D5D3D57FB
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa
Signing time: Thu 18 Jan 2024 18:43:12 +0000
ROA not before: Thu 18 Jan 2024 18:38:12 +0000
ROA not after: Thu 16 Jan 2025 18:43:12 +0000
asID: 264293
IP address blocks: 138.121.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:54:c2:bc:c8:7f:9b:0c:28:4c:38:d8:f7:1d:8d:5d:3d:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
Validity
Not Before: Jan 18 18:38:12 2024 GMT
Not After : Jan 16 18:43:12 2025 GMT
Subject: CN=0AE81CE4CEC2CE3492C5E490D774DAE65B41F55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:f2:25:cb:ce:74:5a:f5:92:38:40:5d:a7:
fe:b0:be:fd:67:f3:d2:6b:ad:27:69:4a:92:5c:ee:
04:87:c1:09:5a:e9:98:1d:73:a4:c5:68:2e:36:94:
95:1b:d8:86:fd:f3:e4:1b:16:e5:19:ea:db:6f:88:
0d:6b:49:34:02:06:1e:2a:57:ea:27:7c:38:81:8d:
63:88:e6:11:25:d1:ec:74:ae:78:d6:5e:3b:20:c0:
2a:a9:76:b5:53:e9:f7:82:b2:ae:a0:36:7c:50:60:
2e:34:58:fa:ec:0a:92:28:cd:6c:95:e3:49:19:bd:
c9:83:fb:5c:ea:e0:90:b7:80:be:68:17:75:41:25:
38:cd:b4:8d:42:c1:68:04:2f:5d:c7:d6:4b:70:61:
fc:0f:55:d3:67:6b:9e:de:8e:ec:03:42:00:18:20:
24:97:82:72:46:52:12:e7:ff:75:ba:f7:17:c9:81:
6c:f3:13:1f:88:97:75:71:49:e0:07:13:ce:bf:fd:
93:4c:9d:e3:63:84:65:ad:a6:ef:2d:2e:31:f4:fd:
dd:1f:c8:30:97:90:ba:a4:48:32:97:6b:2b:77:ac:
83:46:82:14:a8:2e:fa:0c:45:aa:5d:d5:e0:b8:f9:
ec:f9:3c:22:09:5e:58:29:1e:e0:d8:8a:64:83:f4:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:1C:E4:CE:C2:CE:34:92:C5:E4:90:D7:74:DA:E6:5B:41:F5:5F
X509v3 Authority Key Identifier:
keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
48:d2:71:b0:c6:a0:7c:3f:0a:ee:68:9a:73:da:0c:56:1a:6d:
82:69:25:7b:98:b5:d8:4d:f7:01:08:e3:b6:57:ed:3e:a4:5a:
aa:6b:1e:1c:cb:7b:49:6a:21:29:50:ef:f6:bc:27:50:7c:af:
0a:4a:b2:ec:e9:0c:3c:d2:02:0f:35:8d:36:54:e3:ae:31:0d:
3a:09:41:d6:38:e3:3a:ff:62:1b:64:a7:b2:c4:e6:36:a5:95:
a9:a5:27:4c:ce:60:cb:75:a5:96:a0:b2:78:19:72:3f:2a:6b:
76:f3:1a:a2:ca:0a:77:b1:33:16:44:d1:23:9b:54:29:81:fa:
ef:cb:6d:0b:6e:9c:d8:c0:1f:71:35:28:38:b6:56:22:08:2b:
21:80:ff:a6:40:1c:15:fd:e1:e6:27:73:59:86:65:7e:dd:68:
33:65:2d:2d:fc:51:b0:84:dd:a3:f9:ec:2a:63:82:31:1a:34:
70:3a:73:07:b9:38:cf:65:58:59:61:a6:69:7b:24:77:2d:ea:
f0:94:8a:e0:23:92:30:6b:dc:fb:7c:2d:e0:04:7a:d8:1b:28:
1f:5d:7c:b7:ae:aa:82:5d:30:77:35:27:d5:e6:ca:59:01:de:
81:58:af:bf:a2:bb:14:ad:46:90:fa:78:cc:bb:b5:11:b6:02:
45:e9:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:48 2025 by rpki-client