Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
File: 3133382e39392e37322e302f32322d3234203d3e20323634313738.roa (raw, json)
Hash identifier: SvJGAaJ1xxBwTuPbPXEJC009BhHa504WVUEMlwkvPng=
Subject key identifier: 9E:D5:99:DA:D2:18:6B:C0:E2:E2:71:FD:E6:FD:B3:BE:26:E2:D8:CE
Certificate issuer: /CN=C383962F0CB0251601C519176CC875B435E4DD12
Certificate serial: 1D6602E8C27D5F1CE958E425D020336A698521ED
Authority key identifier: C3:83:96:2F:0C:B0:25:16:01:C5:19:17:6C:C8:75:B4:35:E4:DD:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C383962F0CB0251601C519176CC875B435E4DD12.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
Signing time: Fri 24 Jan 2025 18:18:34 +0000
ROA not before: Fri 24 Jan 2025 18:13:34 +0000
ROA not after: Fri 23 Jan 2026 18:18:34 +0000
asID: 264178
IP address blocks: 138.99.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:66:02:e8:c2:7d:5f:1c:e9:58:e4:25:d0:20:33:6a:69:85:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C383962F0CB0251601C519176CC875B435E4DD12
Validity
Not Before: Jan 24 18:13:34 2025 GMT
Not After : Jan 23 18:18:34 2026 GMT
Subject: CN=9ED599DAD2186BC0E2E271FDE6FDB3BE26E2D8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:3e:f4:29:d8:67:58:42:be:f5:a3:03:d4:
ab:cd:3c:79:c0:f4:4e:e4:58:23:fe:03:e3:17:84:
6e:c6:43:e2:3d:18:82:bc:2c:88:98:4d:34:af:1e:
3b:2d:8f:62:91:a0:84:54:6d:4f:f1:86:72:22:8d:
90:7d:16:52:44:65:7b:ca:e8:79:a7:15:fd:5c:1d:
9e:1d:71:da:a9:ae:f4:e7:9c:a5:5e:fe:b6:57:42:
30:f2:93:d8:95:e7:84:2b:14:be:ff:6a:75:89:4e:
90:8b:58:df:d8:3c:53:18:7d:38:7a:9e:48:4b:62:
3b:17:2d:0a:96:8a:f8:73:8b:e3:d3:69:b5:10:61:
cf:c9:9f:8f:a0:b9:4c:ea:d3:5d:cb:52:44:0a:d4:
a1:f1:4b:b1:3e:23:f2:e1:fd:7e:57:af:91:4c:c4:
8f:a7:ce:d1:08:2f:4d:5f:04:20:6f:52:02:ce:a1:
39:3f:ec:c7:32:1b:3f:01:5b:03:60:17:82:c7:6e:
90:b5:29:4a:5b:5d:89:5e:98:fa:91:f8:3a:00:e2:
fb:64:41:2c:51:41:28:4a:ab:10:0e:7b:55:96:c8:
47:41:4c:95:92:81:3e:ea:85:66:a2:67:d3:63:c4:
b7:67:47:65:ac:1f:83:85:d0:5b:20:a0:83:49:0c:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:99:DA:D2:18:6B:C0:E2:E2:71:FD:E6:FD:B3:BE:26:E2:D8:CE
X509v3 Authority Key Identifier:
keyid:C3:83:96:2F:0C:B0:25:16:01:C5:19:17:6C:C8:75:B4:35:E4:DD:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/C383962F0CB0251601C519176CC875B435E4DD12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C383962F0CB0251601C519176CC875B435E4DD12.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.72.0/22
Signature Algorithm: sha256WithRSAEncryption
55:58:29:55:95:58:ec:56:3a:91:43:03:69:7a:49:f5:fa:09:
6f:3b:68:46:46:4a:4c:6a:43:66:7d:b4:9b:43:b8:22:56:98:
39:64:e2:4c:fe:8b:b5:4f:68:0a:45:a2:9e:cc:ff:0a:14:1b:
cf:9b:39:c5:cc:ed:d7:4b:f9:be:48:1b:52:8a:b5:8c:59:06:
bb:ee:33:24:04:b3:2d:1a:b8:ae:c1:87:00:90:64:4a:88:ef:
5f:c2:4a:75:14:df:d6:ee:3a:ee:b1:3e:c8:c4:de:d9:78:89:
02:f7:25:aa:c9:31:93:3e:77:74:5b:25:fd:1c:53:2c:4c:e8:
a1:a9:3a:df:ca:56:3c:78:de:d2:22:86:19:6c:4d:96:62:01:
17:7e:52:ca:b0:b3:67:e8:f8:c2:0a:33:aa:d5:a6:82:f5:79:
0b:d0:b0:de:d9:d0:f3:bc:44:3e:6a:5a:1a:a3:1f:e4:f5:82:
21:e6:13:e8:54:ce:61:ee:db:1b:c8:f9:84:9f:00:8d:6c:04:
10:35:29:e0:67:9f:63:85:c6:2a:57:46:5c:9b:96:56:4a:1d:
eb:dd:5c:31:c3:99:36:02:f2:ed:20:14:c7:20:2f:14:fc:d7:
6a:5a:e8:72:10:bd:48:0c:48:01:f6:c8:86:51:50:3b:52:0e:
c7:f8:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:45:45 2025 by rpki-client