Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa
File: 3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa (raw, json)
Hash identifier: jQLW/2zjPa4fvFFAABvaQG1Fy6ZHf99Fewii7ng3JBE=
Subject key identifier: CF:43:53:13:5B:E9:82:9B:95:E7:B6:82:80:1D:C6:B6:E4:EC:76:48
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 148BB7D29A35239E398DAF05B91C08B1EA01EECC
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 14:01:14 +0000
ROA not before: Tue 14 Jan 2025 13:56:14 +0000
ROA not after: Tue 13 Jan 2026 14:01:14 +0000
asID: 270997
IP address blocks: 138.99.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8b:b7:d2:9a:35:23:9e:39:8d:af:05:b9:1c:08:b1:ea:01:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:56:14 2025 GMT
Not After : Jan 13 14:01:14 2026 GMT
Subject: CN=CF4353135BE9829B95E7B682801DC6B6E4EC7648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:1d:82:2a:99:89:a4:6f:3a:59:74:0e:a0:
a4:c2:d6:73:ec:4f:be:78:06:73:2f:3c:97:a5:e2:
ab:eb:a9:b3:a3:35:74:c1:f5:e9:12:3b:48:61:9a:
4d:d3:59:13:06:6c:da:93:1c:98:8e:30:ba:a2:77:
02:69:dc:d5:62:7b:7f:ff:0d:7f:f3:6c:11:7a:fe:
0c:43:38:c1:d1:ec:98:54:60:cb:e3:ea:db:4f:cb:
fb:ce:58:ed:12:8c:5c:5d:0c:f4:e3:13:b2:e6:d6:
14:ea:6b:b3:a6:3a:7e:dd:d8:52:2a:4f:6c:af:f4:
cf:21:18:8e:5b:61:a2:73:0a:37:82:73:4d:b7:5e:
4f:8e:49:bb:46:15:a1:79:bc:53:57:27:f0:de:1d:
ed:e4:2d:68:47:ad:4b:0f:59:43:b3:53:f9:03:a3:
88:6a:1a:20:3e:b8:2b:df:9a:5e:c6:39:e0:29:4e:
8c:0e:27:95:ce:f9:43:2c:6e:68:66:29:fb:b4:28:
ca:42:cd:4a:37:9e:af:a1:19:63:4f:16:22:ad:4c:
65:87:55:b9:79:92:33:a9:65:27:42:b5:1d:7b:6b:
b8:da:5e:bc:0d:e5:63:2d:4f:2d:4d:a7:10:db:6a:
87:03:29:d0:9e:d0:b2:e3:7d:d7:50:ca:e3:06:ea:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:53:13:5B:E9:82:9B:95:E7:B6:82:80:1D:C6:B6:E4:EC:76:48
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.127.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2e:ae:dc:f9:0b:20:a4:27:b5:c8:6a:65:a5:b8:de:7c:ad:
84:b2:31:a0:18:1c:c5:a5:dd:1b:fc:fb:df:64:61:41:c3:3d:
f5:93:a6:69:40:71:7b:36:8a:28:6a:a1:38:5b:68:26:de:4a:
1f:c1:1a:c0:49:42:3b:86:f3:ed:4f:aa:03:d2:99:a0:7f:34:
25:68:7e:b3:5e:0d:b6:36:fa:94:c4:c7:c1:4d:ce:40:55:bc:
b3:61:3d:ae:28:d0:9f:e5:83:18:f7:58:74:15:3b:85:7a:c3:
41:0c:3d:33:0c:7e:9d:af:31:a3:1a:c4:67:d4:09:e9:c3:3a:
ac:c0:9a:cd:36:da:d1:52:bb:1d:70:83:64:06:ec:e6:9b:23:
47:30:43:ce:3e:7d:cc:95:0e:4b:d8:ed:70:9c:9f:c3:2f:1a:
b0:53:97:c9:8b:a0:19:16:95:83:51:2a:99:34:32:a7:e9:2b:
f6:fa:d3:52:8f:29:13:56:71:84:4f:45:44:6f:90:05:96:ba:
b9:5e:ce:6c:7a:f8:18:6e:63:97:4a:ea:76:08:6f:bc:9d:e1:
e3:62:13:9c:57:af:bf:22:c8:b9:ae:69:17:a9:b8:44:15:4c:
af:6e:6f:98:30:8a:b3:55:d5:ae:d7:a5:1c:7a:7d:4c:fd:b7:
49:20:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:15:40 2025 by rpki-client