Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32322d3232203d3e203238353938.roa
File: 3133382e35392e3232382e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier: bNIgHlX6iAVBRkfnhd7mS3LpHZsR65IwxM5ny//Dc5s=
Subject key identifier: 32:2B:62:B2:65:56:82:DC:FB:04:CD:2B:3B:D0:BD:B9:78:07:C2:46
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 5ECD75AAC269ACD0B99F1F107FEAC9CF6FD4EEAF
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32322d3232203d3e203238353938.roa
Signing time: Thu 05 Oct 2023 18:51:51 +0000
ROA not before: Thu 05 Oct 2023 18:46:51 +0000
ROA not after: Thu 03 Oct 2024 18:51:51 +0000
asID: 28598
IP address blocks: 138.59.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cd:75:aa:c2:69:ac:d0:b9:9f:1f:10:7f:ea:c9:cf:6f:d4:ee:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 5 18:46:51 2023 GMT
Not After : Oct 3 18:51:51 2024 GMT
Subject: CN=322B62B2655682DCFB04CD2B3BD0BDB97807C246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:65:50:1e:63:0c:86:85:69:9a:f6:48:25:
f6:ae:29:87:64:82:8f:f7:55:d6:6c:d1:27:d1:de:
61:13:56:01:65:84:87:9b:73:d3:a1:f8:2d:10:b3:
a5:e4:22:6e:1f:3b:4a:6d:9a:79:00:1d:9f:92:da:
dd:9c:4a:4c:7f:dd:14:4a:8b:07:4e:03:2d:ff:0c:
94:d5:49:84:e5:2f:83:37:cd:6e:0f:b2:e7:b7:3c:
7e:9c:8a:70:35:db:61:8c:66:cd:08:28:f8:cb:1b:
ff:76:be:20:02:3b:81:87:06:7a:4d:7b:85:7f:74:
f3:ee:9b:d3:2c:2f:b0:f8:e0:2e:8a:0f:98:88:c5:
37:13:70:a4:c6:89:f5:f9:75:15:f1:60:28:01:cd:
5a:c8:0d:60:e1:2f:4a:04:69:3a:49:41:14:64:98:
50:e8:84:f1:21:9d:12:8b:25:1c:0b:36:5b:26:16:
53:c3:3d:91:e8:4c:25:de:94:d0:8f:17:17:c4:f3:
d8:4e:5e:9f:79:7b:8c:af:36:8d:b8:ef:00:37:02:
97:8e:23:16:d8:0f:49:7c:a8:82:25:8b:1d:75:11:
2a:4b:93:e1:b6:38:a9:42:9d:e3:17:cf:cf:cc:76:
7d:50:fa:38:fc:72:52:78:92:0d:7f:0c:40:ea:4a:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:62:B2:65:56:82:DC:FB:04:CD:2B:3B:D0:BD:B9:78:07:C2:46
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32322d3232203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.228.0/22
Signature Algorithm: sha256WithRSAEncryption
74:3b:25:0d:09:cc:6a:32:28:f2:d7:fd:0d:eb:d9:e4:30:db:
bb:06:83:33:03:ae:39:b3:de:f1:3d:af:02:c3:9e:83:31:c1:
64:dc:8a:5e:9e:07:4e:24:0f:3c:e2:ed:5c:44:75:d2:fe:aa:
d1:37:5a:c4:48:7e:2a:fe:3b:81:2a:ed:eb:a3:83:f8:21:14:
ad:53:a7:0a:1c:79:8b:5c:57:ab:c8:a0:14:0d:95:ab:ce:ec:
da:dd:3e:26:af:4a:fd:20:3c:9d:67:69:c6:62:89:8e:5f:34:
73:0a:32:a5:a1:b8:ab:4b:33:d9:52:2f:ef:59:c9:15:20:02:
1b:c3:ed:72:04:ad:61:95:04:5c:05:66:91:42:eb:bb:22:2c:
fa:b0:81:a9:5b:4e:ca:59:ff:7c:35:a5:5e:69:88:99:84:25:
dd:da:73:2b:08:2b:b5:3d:8b:0b:fa:9c:47:da:ea:4d:68:cd:
bd:8e:c2:83:57:92:71:f7:c6:be:e3:90:ec:72:ea:e8:13:9c:
55:35:58:47:65:7e:ba:5b:2a:53:c8:f5:7f:c1:f4:e6:4a:ea:
29:12:8f:27:be:57:ec:63:1d:3c:f0:1e:6d:c7:54:a4:d1:17:
36:3d:4e:ba:3c:2c:8b:95:bb:b0:10:d6:54:c7:43:e8:7d:c6:
01:9b:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:08 2025 by rpki-client