Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132352e302f32342d3234203d3e20323730393937.roa
File: 3133382e39392e3132352e302f32342d3234203d3e20323730393937.roa (raw, json)
Hash identifier: bNfV0YD8dbxpSbmQLwLgEftjhnAqvTBGji1xcbIUmgQ=
Subject key identifier: 3A:C2:1E:5D:49:90:F4:DE:BC:04:B7:A9:94:F1:8D:A8:D8:AC:FC:62
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 305777720E8F355FF4EA7A3B84C36EC1DEF48473
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132352e302f32342d3234203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 14:01:17 +0000
ROA not before: Tue 14 Jan 2025 13:56:17 +0000
ROA not after: Tue 13 Jan 2026 14:01:17 +0000
asID: 270997
IP address blocks: 138.99.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:57:77:72:0e:8f:35:5f:f4:ea:7a:3b:84:c3:6e:c1:de:f4:84:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:56:17 2025 GMT
Not After : Jan 13 14:01:17 2026 GMT
Subject: CN=3AC21E5D4990F4DEBC04B7A994F18DA8D8ACFC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:1e:98:78:59:5a:1a:65:ff:61:b3:33:0b:
13:9c:e5:7b:4b:b7:25:3f:8d:29:71:36:4e:75:0d:
9b:9e:40:88:f4:f1:bf:fe:e2:e1:d5:d1:d3:78:4c:
2d:b3:a9:83:0e:62:ff:9e:08:4d:15:a4:2e:9b:90:
d3:ff:44:33:38:27:62:6a:a3:35:29:89:2f:84:76:
f0:fa:62:4e:11:08:2c:76:33:df:9a:22:77:8a:fa:
fe:ef:bd:2f:db:ce:2f:fc:97:16:ce:c3:f6:1c:aa:
34:2c:67:a0:23:f4:6d:f3:df:ae:d7:f1:68:ac:92:
d3:b1:32:9e:5d:af:f3:9a:bb:73:83:1c:1b:6a:c4:
b8:94:ec:e1:bc:cb:ff:6e:70:67:52:ba:54:02:ab:
55:15:4f:32:86:eb:43:f6:7d:ca:65:17:5a:fe:64:
a8:23:6c:8b:01:16:96:3e:45:8f:11:e5:68:cd:3a:
78:1a:67:fc:54:3a:3b:d8:a4:f5:ae:24:dc:cc:b1:
53:bc:6f:3b:8e:e0:b5:77:2b:97:63:32:59:b3:54:
68:21:4b:2b:93:85:0e:85:09:1b:d3:5c:b3:65:24:
6a:a5:f3:28:c4:08:91:b9:27:d6:20:7a:4e:ab:32:
1d:aa:be:72:61:ee:e5:c4:78:d0:de:dd:4f:84:95:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:1E:5D:49:90:F4:DE:BC:04:B7:A9:94:F1:8D:A8:D8:AC:FC:62
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132352e302f32342d3234203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:35:5e:21:2c:91:dc:c9:80:02:2c:4f:1a:32:aa:e3:12:06:
45:31:05:1d:91:c2:3f:9c:75:2f:c2:98:44:31:a6:aa:58:d4:
b8:7b:26:0b:35:ca:38:d5:ba:c6:95:f9:37:e9:c0:e9:7f:15:
af:c1:96:4a:c5:e6:83:0b:db:1e:6c:ec:7d:d5:c5:40:b3:5b:
ec:dc:47:97:20:03:9d:55:53:9d:5c:30:64:40:e7:4c:1f:48:
60:6d:78:52:3a:ef:ce:65:9f:fd:01:2d:62:06:79:b4:8d:04:
07:cd:1e:74:0f:b0:92:da:14:7b:4e:b6:92:ee:77:cd:0f:74:
ee:15:8b:bd:63:52:6a:f1:b3:f1:df:0a:ee:bc:8d:50:e3:fd:
fc:c9:f3:bd:85:82:bd:5b:bc:8a:01:4f:eb:c2:34:e4:00:8a:
d3:9d:4a:c0:2b:06:ec:0d:a3:5c:be:a3:92:06:c5:3a:64:1b:
7f:c3:c3:13:62:b3:c0:1e:22:5e:86:db:0a:bf:c5:43:25:80:
21:03:cc:95:c6:7c:8c:81:9c:b7:31:54:b6:79:27:b1:73:f9:
f6:41:8b:4d:00:1f:d1:7f:c0:de:b8:b5:a8:8f:10:b4:62:df:
94:01:ba:9c:2a:89:73:81:ce:86:73:a4:95:6d:20:0f:d5:ad:
c5:48:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:06 2025 by rpki-client