Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32332d3233203d3e203238353938.roa
File: 3133382e3132322e38302e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier: gajQ7NXfJE1U566eDp8Pb8dLEyW4xptYenYbEDUeUws=
Subject key identifier: 9F:BF:39:37:2D:37:D8:CC:3D:C0:72:4E:38:5D:B7:03:A5:3D:F3:03
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 0F676461FA10D93C4C78A807A75FCA8EF3C8F683
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32332d3233203d3e203238353938.roa
Signing time: Mon 23 Oct 2023 13:01:00 +0000
ROA not before: Mon 23 Oct 2023 12:56:00 +0000
ROA not after: Mon 21 Oct 2024 13:01:00 +0000
asID: 28598
IP address blocks: 138.122.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:67:64:61:fa:10:d9:3c:4c:78:a8:07:a7:5f:ca:8e:f3:c8:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 23 12:56:00 2023 GMT
Not After : Oct 21 13:01:00 2024 GMT
Subject: CN=9FBF39372D37D8CC3DC0724E385DB703A53DF303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:e5:17:7a:86:7a:92:b7:b6:77:10:29:40:
a2:3d:54:3a:02:5b:e3:6a:29:23:d8:c1:20:0f:43:
d0:9d:1c:2e:27:c1:f9:9b:2d:db:17:1d:f9:ca:27:
97:eb:cb:6d:fd:2c:2e:b8:f6:8a:47:5a:9a:e5:c7:
29:6e:79:85:b7:54:dd:86:85:79:04:1d:fc:2b:bd:
73:bc:51:aa:1a:97:de:15:5b:cf:5c:eb:ec:f5:ef:
3c:3c:a6:62:fc:d4:f5:8e:9b:a3:56:c2:fb:30:cd:
28:aa:65:44:2a:38:98:e1:1d:01:f8:b6:4e:c8:07:
08:74:bb:03:be:68:2e:aa:a8:ec:be:0f:1c:dd:16:
42:0a:46:28:44:94:fe:67:0f:93:49:bc:17:be:f2:
f5:9d:03:a4:21:29:2a:bb:66:71:d6:be:39:93:d1:
de:0d:fe:8f:26:a7:e5:ef:f4:91:bf:78:58:84:d3:
d4:54:89:df:c6:a0:90:eb:44:1d:38:9b:20:09:96:
48:cf:68:ac:54:bf:21:9b:0c:a7:6c:6e:60:a5:dd:
be:e1:c4:7d:ef:ab:9b:dd:14:dd:2a:c4:da:b4:f0:
d3:32:aa:d3:42:8d:06:4c:84:98:e7:3b:5a:bf:f7:
de:9e:62:eb:ef:5c:91:20:d5:85:12:bb:84:9f:8a:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:39:37:2D:37:D8:CC:3D:C0:72:4E:38:5D:B7:03:A5:3D:F3:03
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32332d3233203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.80.0/23
Signature Algorithm: sha256WithRSAEncryption
48:f0:7b:e4:af:21:13:17:a2:83:75:0c:ff:3d:e7:f6:e7:1f:
e1:b1:39:01:f0:a8:7e:9e:ff:13:da:5f:92:0b:96:3c:fb:20:
77:21:6e:a5:f3:98:e2:4a:c5:7c:6d:4f:b1:af:41:4a:bf:3d:
19:7e:bc:22:0f:35:c2:63:26:6d:27:b5:db:f0:e7:81:cc:94:
77:8c:b1:ca:d7:d9:d6:34:7c:07:5f:85:66:66:da:9f:03:5a:
c7:1a:c8:e6:af:49:36:b0:13:1d:09:fe:cd:e9:5b:64:ca:b9:
19:b6:c0:62:e0:c8:17:61:4e:f7:dd:37:65:6d:1f:84:2c:a8:
21:05:73:48:c0:96:03:23:a3:b8:f3:45:c9:50:e7:53:e3:16:
eb:7e:9b:f0:13:7a:24:ec:9c:b3:96:53:05:62:c1:4d:70:9c:
45:85:a3:45:9f:0a:8a:85:59:b7:1f:65:7a:fc:d8:72:b1:e9:
f5:0b:49:73:61:f2:75:08:49:44:4f:3b:22:76:84:53:94:ef:
8d:b1:c2:8b:22:50:2b:d6:f7:ef:0c:fd:4e:4f:e6:b6:7b:4b:
db:37:39:c1:bc:5e:5c:59:bb:c3:25:35:fb:43:03:7e:3f:62:
3a:97:3f:29:7a:3a:8f:7d:0a:e4:86:5f:40:41:15:b9:bd:5f:
f5:e4:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:11 2025 by rpki-client