Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
File: 3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier: AMiLOpcWzFelyz47iUNHzKVfZlsBFMyYaChzeHB6tIM=
Subject key identifier: B4:BA:CF:7E:88:53:1E:75:EC:38:AC:CD:15:C9:95:BC:2C:76:49:C8
Certificate issuer: /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial: 0C7E67C21D8CAE6754114BEF761EE174CEFBED72
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
Signing time: Mon 10 Feb 2025 19:20:55 +0000
ROA not before: Mon 10 Feb 2025 19:15:55 +0000
ROA not after: Mon 09 Feb 2026 19:20:55 +0000
asID: 263940
IP address blocks: 138.185.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7e:67:c2:1d:8c:ae:67:54:11:4b:ef:76:1e:e1:74:ce:fb:ed:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Validity
Not Before: Feb 10 19:15:55 2025 GMT
Not After : Feb 9 19:20:55 2026 GMT
Subject: CN=B4BACF7E88531E75EC38ACCD15C995BC2C7649C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:db:ca:eb:ff:bc:81:92:f2:7a:22:98:eb:
91:4a:a9:06:6f:ef:e2:c5:d5:d4:e3:89:ea:88:47:
ac:90:31:a8:0b:3b:e7:69:8c:c7:2f:6e:d5:af:41:
41:b8:10:7a:17:5e:48:5c:01:37:01:8f:87:6c:fd:
f6:04:ce:50:f6:b5:05:76:ae:ab:29:0b:be:74:d7:
ba:63:3c:7f:e1:d1:7c:1f:bc:6d:e2:12:67:c8:cb:
d7:af:b6:66:0d:a9:f3:94:a6:ca:6f:70:10:a0:1f:
15:62:38:14:6a:9e:72:66:f7:a9:6e:2f:94:84:eb:
24:b3:5d:ac:45:97:bf:74:e6:ba:86:cc:29:24:f9:
7e:00:53:8a:c0:da:e2:ed:b4:c9:3d:d8:72:5a:43:
63:31:e2:fc:5a:03:20:95:3d:c3:67:7e:9e:b8:1c:
56:f0:3c:0d:af:bc:cd:d3:a8:f9:b5:9d:e0:60:da:
dd:8b:b8:05:52:5f:74:e9:2a:de:23:0e:44:a7:3d:
18:50:f0:16:d5:a4:12:e3:e6:e0:40:fd:11:1a:ff:
5b:7e:e6:76:e6:df:31:4c:84:4d:cf:8b:06:06:66:
35:d0:92:1d:49:8c:62:46:a4:9c:47:b5:82:0e:25:
5b:4d:6d:f6:72:4e:8d:e2:e7:14:61:96:cc:96:90:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:CF:7E:88:53:1E:75:EC:38:AC:CD:15:C9:95:BC:2C:76:49:C8
X509v3 Authority Key Identifier:
keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:5c:a4:d3:00:89:c6:e8:4a:f5:c8:d8:5a:53:c1:12:1e:
08:e6:66:6e:cc:12:4d:ab:cb:18:b2:25:1c:7a:7c:a4:da:be:
bb:1f:a2:59:e2:d4:5a:bf:96:09:6a:bb:15:fa:de:20:99:f3:
bf:1e:35:e3:5a:a9:47:3d:d1:80:30:36:94:0b:c1:c2:77:ed:
ef:79:a0:4f:d8:ec:b0:d2:2f:a6:40:2f:84:5e:e0:39:2d:4d:
29:57:54:43:7e:59:66:4c:3c:bc:a6:48:73:8b:8c:7c:75:d6:
39:52:f8:40:04:19:ec:40:e2:d3:d0:2e:a3:35:8e:49:4e:5d:
e5:cd:ab:0c:14:44:98:7c:22:ee:1d:ba:93:98:40:98:9a:a8:
98:dd:5d:c7:ae:3a:23:ba:26:e4:62:ac:de:74:ab:2a:ab:56:
e4:89:c1:58:e5:6e:e2:92:e7:eb:2d:c6:2b:1e:17:05:23:3b:
f9:32:c2:43:46:15:57:98:01:ab:cd:e8:a5:0a:68:8b:36:82:
4c:d2:6b:ef:dc:79:cb:06:8b:0d:f7:12:ad:d1:70:05:0a:cf:
1b:21:b2:54:ae:6d:ed:4b:2c:d1:6a:47:a7:7a:4f:20:4d:37:
15:da:ed:ec:93:31:59:53:c5:02:81:3c:c8:dd:e9:9a:7c:ab:
f3:60:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:27:13 2025 by rpki-client