Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230352e302f32342d3234203d3e20323634313936.roa
File: 3133382e39372e3230352e302f32342d3234203d3e20323634313936.roa (raw, json)
Hash identifier: ws78t4a/jBMTc1BqP5fSBa2En7hgu4viJdEhYN99dGo=
Subject key identifier: 70:70:A1:01:2A:4F:DA:06:8D:BD:EF:30:7F:50:2A:93:56:99:18:7A
Certificate issuer: /CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Certificate serial: 3BEDACD60E07328345BAA28E6F7580E0BD86300E
Authority key identifier: 3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230352e302f32342d3234203d3e20323634313936.roa
Signing time: Fri 27 Jan 2023 02:34:28 +0000
ROA not before: Fri 27 Jan 2023 02:29:28 +0000
ROA not after: Fri 26 Jan 2024 02:34:28 +0000
asID: 264196
IP address blocks: 138.97.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ed:ac:d6:0e:07:32:83:45:ba:a2:8e:6f:75:80:e0:bd:86:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Validity
Not Before: Jan 27 02:29:28 2023 GMT
Not After : Jan 26 02:34:28 2024 GMT
Subject: CN=7070A1012A4FDA068DBDEF307F502A935699187A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:72:ae:5c:53:56:61:94:5f:c0:42:f4:63:
4c:25:e7:8c:ad:d4:0b:cb:d2:0c:55:f7:54:5b:c5:
b0:3c:f2:63:13:93:ff:46:e5:3a:82:76:88:d2:86:
c8:aa:b3:4e:ac:1b:57:6b:cd:df:e5:7c:28:4a:47:
c0:7e:16:d2:f7:51:ae:ee:b5:42:60:20:74:fb:47:
4e:ac:16:b8:ff:03:6b:e8:fa:f0:56:94:a8:86:16:
86:6c:a6:36:26:7b:b4:75:ca:58:8c:5c:df:7e:5f:
2d:6e:33:70:4c:78:da:d1:1e:4f:e7:a6:72:9f:a4:
aa:41:81:3f:58:77:d9:85:af:7c:bf:32:62:5a:55:
da:bd:93:f9:91:9c:c5:d5:c4:6b:23:cf:51:fc:f7:
05:e0:76:c4:b1:ef:55:55:82:ef:34:ec:f1:46:7b:
a3:76:b4:57:43:0c:5b:62:8d:ba:87:e2:d2:b5:a1:
92:69:a8:97:ae:36:68:e3:76:33:2d:cb:c9:f6:76:
97:8d:37:7b:51:99:ba:84:4a:7d:1b:79:9b:df:59:
f4:85:01:84:a2:3a:a0:b5:54:1f:24:42:e3:46:9c:
0c:74:38:35:9d:ff:ef:f9:1f:79:a2:42:7a:0f:d3:
84:eb:28:15:48:ca:f3:04:0a:b3:1e:ea:d3:7b:c6:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:A1:01:2A:4F:DA:06:8D:BD:EF:30:7F:50:2A:93:56:99:18:7A
X509v3 Authority Key Identifier:
keyid:3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230352e302f32342d3234203d3e20323634313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
21:01:8f:4a:07:d9:32:2d:ae:cc:ba:71:6c:47:61:97:2f:67:
14:1b:6d:3f:a9:b5:f0:19:a1:a5:95:0e:65:37:2b:0d:d6:db:
f1:f4:a5:4a:73:d2:c9:33:51:c9:82:e5:d8:84:3a:08:ca:83:
90:a1:23:e9:72:d2:b1:6c:28:a6:91:67:09:8f:e8:46:ac:5e:
09:05:80:f4:ee:1e:b1:1a:74:fd:c8:8b:12:9b:24:ba:a2:63:
c4:fb:04:ca:53:79:10:f2:c8:b4:16:b6:36:16:ee:03:96:88:
69:f1:3a:7c:2c:7e:47:51:76:5d:70:a4:4e:db:38:53:a2:12:
13:cb:94:a8:86:c6:eb:74:db:77:65:15:92:24:74:e8:ca:f8:
b6:fe:25:b7:75:17:41:f0:e9:00:70:06:ba:0e:bc:32:aa:fa:
91:1f:5c:ea:8a:03:77:e5:59:54:d7:a7:3b:2b:ca:94:be:94:
f8:bc:dd:27:c0:de:12:1b:45:77:f4:a7:59:92:78:d5:4c:a7:
bc:90:a7:57:62:19:32:16:3d:d7:9e:54:93:9a:fc:07:03:5c:
db:57:ab:f2:d0:d5:a0:95:4a:34:e0:4c:59:26:78:28:73:0f:
12:b9:42:b6:ef:c9:fd:e9:e1:a2:c6:cc:e3:76:a1:d1:b8:54:
27:6f:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:07 2025 by rpki-client