Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
File: 3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa (raw, json)
Hash identifier: YkrsLYvxWyfaJ0NWfMhEC2fhuzCykrsVPZwXW4VNIkY=
Subject key identifier: 33:79:37:B9:E8:62:95:92:5B:D0:22:E2:56:CC:74:97:09:A0:F7:DA
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 563026D2542E00FCEA17BB706BCDC58D1F0A73AB
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 13:56:48 +0000
ROA not before: Tue 14 Jan 2025 13:51:48 +0000
ROA not after: Tue 13 Jan 2026 13:56:48 +0000
asID: 270997
IP address blocks: 138.99.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:30:26:d2:54:2e:00:fc:ea:17:bb:70:6b:cd:c5:8d:1f:0a:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:51:48 2025 GMT
Not After : Jan 13 13:56:48 2026 GMT
Subject: CN=337937B9E86295925BD022E256CC749709A0F7DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:05:be:4a:ea:6e:63:56:c5:a7:cf:b5:0e:
82:e7:ca:4e:a0:0f:4c:66:4f:bd:35:95:0c:19:b2:
20:51:58:e0:c8:d1:fb:5b:4b:90:9b:21:33:7d:9d:
eb:b8:a9:6d:84:5b:73:6b:bd:ae:c1:23:e8:fc:e9:
a8:17:54:ff:83:37:33:84:5e:d8:b3:56:1d:ec:5f:
36:fd:29:b1:cf:cc:66:40:98:7f:1b:37:d4:2c:4c:
d4:dd:4a:d5:98:72:36:8e:8c:bf:9b:35:d5:65:fb:
6d:09:c3:f0:da:9f:d2:46:ab:70:ce:93:00:19:dc:
04:e2:e0:92:41:e3:0e:b7:30:41:87:74:41:28:1e:
db:69:21:eb:1b:eb:a2:d0:f1:17:85:3f:22:4e:a9:
b6:3d:ce:e2:17:d1:00:f1:37:57:20:23:af:1c:48:
74:38:70:a3:85:9f:b6:54:02:13:d8:5b:10:8a:8e:
9b:f5:18:b1:d9:31:02:fc:cf:ba:09:72:cd:68:ef:
2c:28:16:6e:6e:6d:c4:04:73:16:58:dd:cd:b2:5a:
9d:ff:22:8b:f4:aa:a3:bd:54:61:ee:32:a7:73:92:
66:28:3e:79:50:c8:82:99:05:43:7d:dc:47:ad:a5:
60:15:46:54:8a:6a:dc:11:a2:01:6c:4d:f8:0e:70:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:37:B9:E8:62:95:92:5B:D0:22:E2:56:CC:74:97:09:A0:F7:DA
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.124.0/22
Signature Algorithm: sha256WithRSAEncryption
37:83:87:b1:c5:10:a9:c4:08:8c:6c:87:8d:38:53:a8:87:6f:
8d:0e:76:95:2f:88:1d:06:75:5e:da:9b:cf:8e:86:66:77:a4:
17:63:59:ed:43:7d:1c:03:cf:54:21:2c:13:98:c9:82:81:55:
9d:58:37:7a:2d:88:44:42:6e:19:99:da:07:6a:55:3d:26:6b:
40:63:a5:f3:1c:06:af:e9:5a:8d:6a:5d:dc:3d:4a:1a:ee:20:
94:47:ff:68:92:f5:33:13:91:af:e0:e4:d5:f8:79:a1:fe:29:
5a:a5:66:78:49:44:ae:b3:d1:e4:97:65:17:e7:d6:7e:ac:ed:
cf:36:8f:a7:73:d7:b6:14:1b:96:e9:29:a8:b1:23:f9:db:87:
ce:a3:54:a9:4f:0f:1e:44:8d:40:a2:8b:88:23:f2:e8:36:dc:
9d:64:34:cd:9b:a7:d8:9e:f2:96:09:b6:e9:d6:b8:99:f3:3e:
6b:0a:24:34:42:51:d6:f5:55:f5:28:a5:50:a3:33:f9:b3:83:
8c:3f:a9:a6:ad:52:46:43:ca:8a:ea:89:96:d2:31:d9:a5:8f:
a2:8c:7c:6b:9c:ab:26:9b:b4:d4:d2:d0:a6:cf:33:9e:35:7c:
13:b9:15:76:e2:a9:9d:73:b0:ee:5d:ad:5b:29:2d:67:df:b0:
c7:c7:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:09:01 2025 by rpki-client