Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133382e39342e3131322e302f32322d3234203d3e203532383636.roa
File: 3133382e39342e3131322e302f32322d3234203d3e203532383636.roa (raw, json)
Hash identifier: IsiEslvUsPSDMiVKItltHXn3SKsnLRv+MCWlagov0lo=
Subject key identifier: C5:04:D2:C6:26:BE:62:F3:B5:3D:75:07:81:E2:0C:96:FF:9B:A4:5F
Certificate issuer: /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial: 201DCFC6C9322CF1CA634665AD59E4EC482F36B9
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133382e39342e3131322e302f32322d3234203d3e203532383636.roa
Signing time: Wed 12 Jul 2023 21:00:10 +0000
ROA not before: Wed 12 Jul 2023 20:55:10 +0000
ROA not after: Wed 10 Jul 2024 21:00:10 +0000
asID: 52866
IP address blocks: 138.94.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1d:cf:c6:c9:32:2c:f1:ca:63:46:65:ad:59:e4:ec:48:2f:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Validity
Not Before: Jul 12 20:55:10 2023 GMT
Not After : Jul 10 21:00:10 2024 GMT
Subject: CN=C504D2C626BE62F3B53D750781E20C96FF9BA45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:95:bd:f1:ae:cf:84:2c:e5:84:d4:49:36:
e7:19:ac:76:cc:35:2d:3b:cb:14:ff:e9:71:a8:2a:
e7:b0:6c:f0:20:a2:99:96:1e:c7:9e:ac:1a:3a:88:
44:a0:ea:52:ac:a1:39:81:91:cf:ca:97:2c:99:f7:
b6:3f:c6:68:9a:53:9e:15:02:f0:4c:b5:32:c0:07:
d5:2c:f6:eb:a6:10:22:61:8c:0f:fb:bb:fd:9c:30:
bb:b5:80:7f:ef:e4:eb:f0:dc:15:06:e1:04:6d:7a:
64:67:a5:bb:bd:9d:48:21:67:f4:12:77:f1:3e:92:
85:ce:a6:fd:9b:c4:36:52:e3:26:72:19:bc:7a:c9:
f7:e0:30:db:0e:be:8b:6f:ce:98:e4:99:c0:5b:75:
fa:ac:75:f7:f9:fa:dc:8b:8c:0e:71:f2:83:c0:13:
24:d9:2c:29:cc:f8:7a:06:4f:5a:cd:d5:56:c5:8d:
13:d9:4e:c9:bc:0a:d5:21:a3:e1:1a:14:64:42:b3:
43:f8:fc:74:6e:fa:d9:df:b4:62:35:ba:c1:08:11:
6c:e7:b6:c0:75:55:89:6d:78:15:69:92:23:82:29:
d4:29:40:8b:89:57:4f:de:56:a6:d5:e1:2d:23:a0:
a7:8c:e9:a5:8e:12:66:d2:91:62:53:34:c7:a1:0e:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:D2:C6:26:BE:62:F3:B5:3D:75:07:81:E2:0C:96:FF:9B:A4:5F
X509v3 Authority Key Identifier:
keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133382e39342e3131322e302f32322d3234203d3e203532383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:ca:f3:a3:22:ed:86:85:ae:6f:38:ae:2c:d1:bc:31:6e:e2:
d9:69:6e:1d:80:ee:63:c1:b0:78:dd:71:e6:b1:3e:94:99:a1:
ef:67:0e:93:c0:ad:5c:fc:f9:01:f3:4c:03:c3:ac:e3:2d:4f:
a9:19:a2:db:5d:02:72:90:3b:7a:f7:b6:55:40:64:24:af:68:
91:88:7d:f1:14:6d:f4:02:f6:3b:79:fb:f6:db:29:02:24:c1:
fe:db:be:b7:54:cf:c0:cf:66:f3:3b:ae:00:c8:6f:9d:c3:05:
dd:3a:1c:21:d0:2b:c2:4b:58:2b:bc:11:c5:57:55:95:b1:b1:
ab:6f:7d:7c:2b:8f:e4:b7:84:9b:3b:a2:6a:9b:02:08:35:2e:
f3:bb:e8:a9:ab:43:8d:ec:89:37:20:52:9a:0b:e3:38:4e:3e:
19:39:6c:dd:61:61:1a:bf:e8:5f:84:d0:51:f9:88:d1:a5:e8:
e8:66:6c:a8:ba:45:f2:50:46:21:34:13:d4:5b:5a:20:ae:66:
c2:99:f2:4d:32:7f:a7:db:66:71:56:d9:c3:bf:7c:79:19:55:
d2:a3:e4:ea:72:17:1e:33:d5:78:d8:d5:82:bb:1d:5c:23:9f:
c6:d8:36:40:2f:7d:75:81:6f:43:9a:9f:ce:40:e8:66:63:9d:
be:a6:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:05 2025 by rpki-client