Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
File: 3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier: w8xqUu05Od3h0cz7fL94Kt0osLXR4sk0it3ItJ+mBt0=
Subject key identifier: 3B:90:3D:78:DA:79:D3:76:97:5C:95:E3:9D:FC:B3:40:FE:5D:2F:C8
Certificate issuer: /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial: 1B13BC69EB9668E2D43A9BC13255D3101414A6BE
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
Signing time: Mon 10 Feb 2025 19:20:54 +0000
ROA not before: Mon 10 Feb 2025 19:15:54 +0000
ROA not after: Mon 09 Feb 2026 19:20:54 +0000
asID: 263940
IP address blocks: 138.185.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:13:bc:69:eb:96:68:e2:d4:3a:9b:c1:32:55:d3:10:14:14:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Validity
Not Before: Feb 10 19:15:54 2025 GMT
Not After : Feb 9 19:20:54 2026 GMT
Subject: CN=3B903D78DA79D376975C95E39DFCB340FE5D2FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:36:d1:18:30:e7:67:9c:a0:b2:ec:61:f9:
15:ed:f6:89:60:d2:f5:26:d6:cf:6f:2b:b8:8f:be:
ae:4b:18:eb:37:cb:a5:ec:c2:44:64:d9:0d:05:44:
a3:ee:b5:dc:33:e9:ba:7f:a1:f3:de:0a:d8:45:92:
0f:c4:55:ff:90:cc:1a:d9:73:47:9e:0f:28:98:13:
1f:a9:6c:ca:d2:83:06:3c:82:ca:78:02:61:ac:68:
ce:9b:be:67:41:e3:ae:fe:ca:78:db:57:0b:c1:91:
5c:36:31:9d:5c:9d:8c:33:61:ac:46:16:83:5c:74:
a0:23:f8:20:01:19:73:c7:33:82:83:4c:ee:ee:3b:
ec:e6:f5:59:58:1a:43:bb:2d:79:6b:59:dd:fc:8a:
e1:b2:6e:b9:9b:e7:b2:fb:6c:09:df:39:83:e5:7a:
e7:29:e0:40:16:f3:58:bf:c1:57:40:91:44:1b:f9:
81:cf:77:cf:55:f5:51:7e:ae:6e:72:46:22:c5:40:
07:b9:40:ce:19:e4:2b:b0:87:6f:b2:85:a2:be:dc:
67:58:d5:42:69:b8:f2:9b:16:29:9a:d5:f2:e0:84:
78:6d:05:b7:88:21:eb:f8:c3:75:8c:3a:e6:78:10:
00:0d:49:dd:7f:89:43:b5:8f:e8:eb:8c:df:dc:d5:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:3D:78:DA:79:D3:76:97:5C:95:E3:9D:FC:B3:40:FE:5D:2F:C8
X509v3 Authority Key Identifier:
keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.254.0/23
Signature Algorithm: sha256WithRSAEncryption
55:e4:5c:bf:03:c5:27:06:bd:66:38:68:b0:80:b9:5a:fd:a2:
c4:ad:b2:eb:71:79:35:a2:f8:66:4a:c6:4a:f2:21:86:ed:c9:
e0:b5:03:93:60:a9:e2:b7:ff:2c:5b:c8:2c:0f:b1:64:93:b4:
32:1f:69:b8:0d:dd:6e:e9:30:d6:ac:a8:b3:5a:d4:83:3a:86:
19:09:c1:e3:d3:4f:91:52:2c:2f:c6:28:91:bf:b1:66:c8:6b:
1a:23:b6:d5:c8:55:26:e9:77:47:5d:6e:71:25:96:af:65:9b:
6f:ec:7a:5a:7c:9a:46:13:be:3d:10:67:cd:6c:2c:bd:7c:62:
77:a2:0a:78:68:79:32:1f:61:e4:e9:81:ec:84:b9:84:14:b7:
12:22:c5:aa:22:80:e3:3b:6e:75:7d:3b:ef:42:dd:97:cc:4d:
50:c3:24:d4:59:d7:94:32:44:42:3b:ab:62:69:c2:b0:ce:11:
d7:20:e6:2d:ed:8d:0e:8a:96:30:ed:77:e5:b0:f2:e9:c3:06:
5b:fc:87:19:36:f9:2e:78:9d:02:85:f2:06:f7:89:43:9d:2e:
91:6e:85:a9:47:10:e2:ad:03:93:bf:46:84:21:7b:1a:08:4a:
87:39:11:7b:5b:52:47:bf:e0:22:43:ea:2e:24:bf:8f:b5:da:
f2:34:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:16:35 2025 by rpki-client