Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa
File: 3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa (raw, json)
Hash identifier: BWGn7GwWk0wjSyxK14uOK1yMglbu4nJHFRWLcjppOkU=
Subject key identifier: FE:43:D5:B8:B8:A7:F9:C2:0C:7E:52:0E:B0:6B:64:DC:1D:81:17:88
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 7DC33192A39CE8BD4219BE74BFEC272C8C04224C
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 13:56:57 +0000
ROA not before: Tue 14 Jan 2025 13:51:57 +0000
ROA not after: Tue 13 Jan 2026 13:56:57 +0000
asID: 270997
IP address blocks: 138.99.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c3:31:92:a3:9c:e8:bd:42:19:be:74:bf:ec:27:2c:8c:04:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:51:57 2025 GMT
Not After : Jan 13 13:56:57 2026 GMT
Subject: CN=FE43D5B8B8A7F9C20C7E520EB06B64DC1D811788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:ae:87:f2:ad:16:90:ad:b4:eb:04:f8:88:
b8:c0:a8:ff:78:42:ae:81:c0:60:c1:a1:b1:42:3b:
38:f3:d3:90:73:93:e2:c8:2f:82:c6:f7:65:e0:61:
e6:10:4c:34:d1:59:50:52:6b:5f:57:62:bc:be:78:
3c:14:f7:49:f0:6d:d0:41:ee:dc:55:fb:1a:08:91:
cc:f8:bc:27:ab:bc:2e:1c:80:ce:e1:1f:64:d9:11:
8d:6d:60:fb:06:d7:36:93:70:8e:cf:71:2a:d7:6c:
2a:6d:e1:bd:07:4d:a1:08:4a:84:ed:b6:e8:c7:60:
08:26:79:27:62:c5:5a:12:c3:ae:1b:3b:9b:3b:65:
90:42:d2:c4:76:08:50:52:60:f0:69:8d:ec:07:9e:
1b:b6:42:71:d0:60:8d:4c:c9:60:79:d3:8b:82:1a:
4f:2d:99:63:f0:04:84:62:b6:bb:8f:f4:16:62:6b:
a5:92:0b:d1:87:b0:30:2d:99:48:ff:73:85:b4:b7:
72:bd:77:e6:d3:ae:7d:15:03:28:4d:35:5f:b7:12:
cd:cd:94:b3:21:21:a7:47:bd:c3:25:10:b5:79:cf:
41:74:ab:06:6c:72:5f:2e:f4:bb:b3:f8:dd:ee:52:
ca:e3:14:28:81:9a:41:12:25:29:fb:52:fe:ff:5c:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:43:D5:B8:B8:A7:F9:C2:0C:7E:52:0E:B0:6B:64:DC:1D:81:17:88
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.126.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a3:8e:e7:ab:4b:85:70:ef:4a:dc:3a:5c:67:bb:82:4e:a0:
5c:02:a1:01:0a:76:9a:14:da:43:9d:7e:c3:b2:5c:2b:db:78:
34:06:8a:1f:72:89:10:c3:7e:a2:00:e9:02:57:50:ee:a9:e2:
33:77:de:4a:ba:c1:fa:31:77:c7:55:e0:0e:9d:d0:cd:64:63:
3d:fa:50:af:5a:c1:2f:5e:15:27:bb:0e:36:9a:ef:88:7d:33:
47:6d:22:df:40:f0:5a:0f:ce:82:a0:fa:dc:f5:b3:c3:45:f4:
8c:66:47:4f:d1:ea:21:0f:e0:ce:20:8d:ca:cf:a5:19:c3:bf:
33:be:b2:c7:49:a4:d8:73:84:2a:db:23:90:88:56:aa:da:d5:
2a:94:3d:47:60:ee:82:51:9b:cf:bd:e4:8e:a4:66:30:73:f2:
72:2c:b7:8c:22:32:92:30:75:5a:79:7d:2b:ac:19:62:79:a8:
6e:10:e2:24:6f:29:a8:9a:5e:32:98:a9:85:e6:e8:ac:51:3b:
dd:2e:0e:d2:ce:ae:ea:86:05:c6:90:f2:3e:0f:dc:a9:70:ff:
f9:55:c7:ea:f1:7d:74:5d:b0:ef:8b:46:80:9e:39:76:cb:3a:
10:a3:d7:c0:bb:f1:91:06:4d:3d:54:c3:cf:e9:3c:d7:88:d6:
06:e7:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:15:24 2025 by rpki-client