Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa
File: 3133382e39342e3132382e302f32322d3332203d3e203631353834.roa (raw, json)
Hash identifier: CJ5oDs0OD4F13uN+YBAYBQKWv4Nhhz7ZMciQsVHbqIQ=
Subject key identifier: 1B:72:D7:60:08:A8:0D:9E:73:05:AB:D5:30:5D:D7:70:3C:5D:99:37
Certificate issuer: /CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
Certificate serial: 22B3112C864966204917FE6C91E7DD8F6D94F7D2
Authority key identifier: BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa
Signing time: Fri 01 Nov 2024 13:19:16 +0000
ROA not before: Fri 01 Nov 2024 13:14:16 +0000
ROA not after: Fri 31 Oct 2025 13:19:16 +0000
asID: 61584
IP address blocks: 138.94.128.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b3:11:2c:86:49:66:20:49:17:fe:6c:91:e7:dd:8f:6d:94:f7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
Validity
Not Before: Nov 1 13:14:16 2024 GMT
Not After : Oct 31 13:19:16 2025 GMT
Subject: CN=1B72D76008A80D9E7305ABD5305DD7703C5D9937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:1f:7a:0e:61:e0:60:fd:35:50:37:0f:9c:
07:52:f8:95:93:cb:aa:df:5f:ba:f9:6a:2d:9b:26:
81:dc:ac:56:aa:7a:81:8e:74:20:76:50:74:73:1f:
b3:f5:ce:3a:10:ec:54:bf:9e:25:2b:9b:6f:35:08:
5a:3b:3d:1e:4c:d0:61:a8:27:7f:1a:8c:3a:d7:48:
f2:07:7c:c0:dc:b4:99:2e:1b:00:e3:63:56:5f:74:
4f:9a:fa:17:ea:b1:e9:e3:96:01:e6:6c:57:ea:01:
63:c7:60:a4:d1:9d:66:e5:05:14:65:20:e8:9d:56:
5f:29:5a:ef:bf:11:d2:96:85:df:79:83:cd:fc:c5:
fb:96:08:39:8a:8f:ec:67:37:b9:fc:75:ac:d8:73:
51:33:01:a5:32:1a:4c:61:ea:9a:af:06:08:01:6a:
8d:79:7d:7c:5b:e6:26:2a:c8:cb:46:cb:6c:5f:c9:
44:3f:ff:3d:f8:f4:1e:1a:4f:e9:bb:2f:47:78:46:
49:09:0e:ef:9e:fd:30:c6:80:17:75:b8:d8:a7:b3:
0f:80:59:89:db:8b:0d:a2:02:c8:12:1e:b8:82:93:
c3:19:8a:12:36:12:2b:41:05:82:c9:a9:1b:db:3b:
85:63:9a:21:53:a6:52:0c:0b:0d:c0:e6:55:07:3b:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:D7:60:08:A8:0D:9E:73:05:AB:D5:30:5D:D7:70:3C:5D:99:37
X509v3 Authority Key Identifier:
keyid:BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:34:e4:86:47:dd:71:4f:07:91:fd:c6:98:53:09:b0:b8:eb:
79:db:34:a5:20:aa:2f:34:c0:8b:4b:9e:b7:42:46:7e:93:59:
03:55:86:44:69:8e:aa:3a:35:22:fc:45:05:b1:68:08:70:9d:
de:d4:f5:38:db:48:47:21:ad:2e:f3:60:72:37:1d:3a:34:bb:
4d:90:4a:a0:a9:b2:72:aa:c5:90:25:25:ec:9d:c8:27:fb:c3:
02:d1:2d:1d:22:0c:44:63:a6:ab:80:41:6d:23:a0:f6:1e:84:
c8:9b:cc:fc:48:3f:1f:23:00:fa:43:b9:3b:1a:7c:48:bf:3a:
a4:a7:6d:ad:5b:4e:a0:4e:a4:f7:ee:e7:67:31:77:61:a3:8c:
2d:2d:9d:ca:d0:5d:32:13:19:82:16:1a:68:c7:a7:6d:bd:3a:
d6:57:5f:c0:e5:ca:af:d5:ae:7d:5e:76:4a:5d:a0:43:e8:e4:
d5:ce:50:91:32:c0:bc:bc:4b:d0:f7:29:67:e6:7e:bf:20:82:
fa:c7:45:e4:bc:a8:a6:8f:32:9c:ea:c2:a7:65:88:12:e9:8e:
d6:40:d6:96:3f:c1:0d:81:88:4d:9a:fa:ba:41:74:78:d3:8c:
15:f7:b0:18:8d:80:67:5d:9c:cd:53:0a:48:87:b7:fe:37:79:
32:b6:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:36:31 2025 by rpki-client