Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32332d3233203d3e20323634323432.roa
File: 3133382e3131372e3134362e302f32332d3233203d3e20323634323432.roa (raw, json)
Hash identifier: rbDP1hdO4OMe+iFWv2fWYRRXk+SbQK5QGgRy+jNw8HY=
Subject key identifier: FA:98:3F:7D:6F:7C:5F:CA:0B:72:0A:12:49:F7:16:42:46:AA:0B:D7
Certificate issuer: /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial: 7A099886769B9B7C00BF0DA6CC9523927B6D5349
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32332d3233203d3e20323634323432.roa
Signing time: Sun 23 Jul 2023 00:07:57 +0000
ROA not before: Sun 23 Jul 2023 00:02:57 +0000
ROA not after: Sun 21 Jul 2024 00:07:57 +0000
asID: 264242
IP address blocks: 138.117.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:09:98:86:76:9b:9b:7c:00:bf:0d:a6:cc:95:23:92:7b:6d:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Validity
Not Before: Jul 23 00:02:57 2023 GMT
Not After : Jul 21 00:07:57 2024 GMT
Subject: CN=FA983F7D6F7C5FCA0B720A1249F7164246AA0BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:86:f7:1a:51:a5:30:99:6d:35:fb:74:fb:
4a:60:ff:11:8e:5f:17:d1:b1:b9:7f:6b:af:08:cf:
8d:de:df:11:ae:48:dc:ca:43:5f:b7:c1:4e:e4:58:
27:00:a9:a6:60:0d:59:a8:6c:72:10:a6:2e:b4:22:
c0:c6:38:73:05:7b:b8:66:32:65:99:7f:54:b6:7e:
e6:2e:05:fa:13:58:14:6b:38:95:cd:f8:53:b6:7d:
7d:e6:a5:9d:e8:e6:7e:4e:ed:2f:0d:a7:e8:b6:fd:
32:4c:7e:0d:13:01:02:97:65:03:33:b6:b8:88:b9:
34:56:9f:43:6a:ac:32:a4:43:d2:72:04:82:cc:50:
ca:25:16:d5:9f:a8:da:cc:05:4c:7c:7a:6c:64:3f:
23:e8:db:35:81:c1:7a:16:89:13:d9:51:2a:cb:49:
3b:22:a6:ec:40:89:9a:f9:47:bc:07:89:c0:cc:9a:
e3:bb:19:3c:ff:6b:b9:23:ff:12:4a:7c:4d:3a:28:
18:68:48:5f:58:a3:14:4a:b4:b4:81:ce:c8:4e:ae:
b7:23:2a:75:0c:11:03:90:b6:24:1b:11:86:7d:c3:
67:78:b7:a2:d4:d9:a2:8e:76:6c:31:72:87:92:5e:
20:5a:f5:de:27:ad:9e:91:cb:6b:01:02:ed:26:8a:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:3F:7D:6F:7C:5F:CA:0B:72:0A:12:49:F7:16:42:46:AA:0B:D7
X509v3 Authority Key Identifier:
keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32332d3233203d3e20323634323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.146.0/23
Signature Algorithm: sha256WithRSAEncryption
68:ba:b2:ad:8d:66:9f:d6:38:3c:05:e5:ab:46:fe:10:5f:fb:
c3:f8:e8:8d:55:11:51:73:9b:b0:21:7d:ed:d4:e3:e9:cc:6b:
e6:b4:d8:64:e0:c8:b0:9d:17:ba:ea:68:23:81:fb:be:b0:a8:
fc:10:46:6f:33:01:f6:e6:90:fd:14:93:d9:4a:69:3b:a4:c3:
c1:a2:8b:f8:fd:56:65:ee:67:19:84:ce:81:86:bd:fb:f2:35:
f6:df:00:41:ee:d8:d6:7f:ae:18:a2:47:7b:50:ad:b6:fa:63:
78:50:e6:04:d5:08:d7:1a:48:f4:f7:89:d1:8d:ef:a5:0c:57:
c2:01:4a:61:7b:83:33:4a:5d:c5:70:d6:1d:c4:88:74:79:c0:
5b:db:d6:21:e2:43:fe:ae:5a:0e:a5:6f:4e:8d:75:44:cc:ac:
67:dc:c5:95:68:f7:61:6d:a3:1e:0b:88:f3:0f:e0:5a:b2:25:
55:71:64:b3:a3:fd:82:35:50:e8:05:0b:e8:a3:43:ca:63:64:
18:97:93:96:7b:3d:ae:48:9b:1f:28:15:67:13:7f:c6:e2:29:
fd:0d:0a:ee:3c:62:74:50:ba:8b:7a:e4:02:7b:47:d0:a3:83:
c7:6f:56:b6:d0:3e:6e:c0:59:7d:32:cf:d0:39:25:e1:ea:0b:
6c:37:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:43:47 2025 by rpki-client