Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
File: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (raw, json)
Hash identifier: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=
Subject key identifier: 36:57:22:4A:65:8E:49:3F:E4:6A:A8:77:B5:76:4D:15:93:EE:6B:63
Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial: 08F8BE26BD64190E8CBB980A71960937ED6050FD
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
Signing time: Thu 06 Mar 2025 00:52:35 +0000
ROA not before: Thu 06 Mar 2025 00:47:35 +0000
ROA not after: Thu 05 Mar 2026 00:52:35 +0000
asID: 53107
IP address blocks: 138.97.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f8:be:26:bd:64:19:0e:8c:bb:98:0a:71:96:09:37:ed:60:50:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Validity
Not Before: Mar 6 00:47:35 2025 GMT
Not After : Mar 5 00:52:35 2026 GMT
Subject: CN=3657224A658E493FE46AA877B5764D1593EE6B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:40:93:be:54:0a:ed:3b:0c:f2:9d:1a:69:
f5:8f:a9:d0:a4:1c:b7:fa:1c:cb:f4:04:a7:64:f4:
9b:f5:9b:f1:24:02:95:cb:41:78:81:cb:12:42:86:
c6:84:20:b7:22:06:51:84:c2:0d:99:99:72:bc:e6:
da:0b:cd:49:b4:42:53:9e:4b:1b:3a:6a:c2:2e:18:
0a:fc:6d:e0:eb:f2:89:51:6c:01:9e:6c:3a:54:6e:
07:77:06:56:0a:23:a3:3e:f0:5d:de:b2:01:e3:c2:
07:7c:c2:b9:75:b8:58:85:ed:99:26:b7:4e:d8:7e:
2c:85:26:1c:97:5f:68:f7:b1:fc:2d:61:a2:66:38:
99:89:d2:d5:5e:86:41:7e:dd:36:70:0d:9c:6c:a6:
da:5f:ef:15:bc:2c:52:be:fc:79:2f:c3:3a:ad:6e:
12:4c:a3:6d:be:fc:21:16:97:f6:54:41:1c:99:72:
03:74:61:78:84:64:15:7c:42:b8:61:ec:16:67:36:
20:ce:70:1a:ee:56:35:b2:20:f2:90:3b:f3:ac:57:
44:52:97:57:b5:9a:2e:e1:f5:85:2d:b7:b0:b9:72:
31:5f:03:78:34:5d:70:bb:cb:78:34:cf:61:99:65:
97:d7:0c:89:c1:9d:77:e8:b8:f5:ec:e5:5f:dd:26:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:22:4A:65:8E:49:3F:E4:6A:A8:77:B5:76:4D:15:93:EE:6B:63
X509v3 Authority Key Identifier:
keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ad:06:c1:57:50:78:12:2d:72:36:88:02:39:05:8a:ef:41:
50:8a:fb:d5:f2:76:01:0e:63:ca:e7:e6:e9:32:de:87:60:35:
02:29:fb:f8:85:0a:3b:99:fd:13:2f:ae:32:58:55:4b:9f:46:
e2:1c:b4:92:2b:3d:b2:b2:e0:6b:e0:9f:78:5c:3b:16:5b:e9:
f3:a4:2d:04:fc:b8:77:51:b2:a0:e3:d5:5c:66:e2:42:8b:7f:
48:ba:5d:26:2f:68:92:8f:30:f1:b3:d9:c1:4b:2c:c2:86:4b:
2c:f7:84:44:8f:c6:d2:42:af:bd:03:5b:8f:d7:58:05:48:fe:
bb:c8:31:c5:b9:fd:00:01:77:10:ed:5a:17:f7:1b:90:36:70:
ea:c8:62:d0:95:b0:52:24:db:b0:91:91:c0:b4:1a:10:fa:08:
f5:6c:be:56:ef:7d:e0:ae:16:af:7f:b4:ce:fd:ec:72:29:40:
fb:b8:ae:59:80:65:fa:bb:7f:2a:0e:f3:8d:b7:68:54:68:a0:
d4:07:20:3a:8d:ce:17:ce:7c:83:75:b6:75:bb:54:e6:20:85:
f3:66:1a:22:3f:de:b2:2e:d2:00:1c:6e:43:49:40:27:f9:db:
62:46:d1:fe:db:f2:cd:9b:9b:18:9f:c1:14:ed:44:9b:45:24:
93:49:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:25:20 2025 by rpki-client