Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: tnQZEQTSp5Og08vWWUflGa+m4UxQ3I4cpkWCGSDKjt0=
Subject key identifier: 48:0D:A3:97:F6:E8:58:0A:F8:66:13:D8:CF:DA:91:FD:F7:08:D5:86
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 57AEC5B06F08C1DE12A85B72B3DC888EB681615D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 138.121.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ae:c5:b0:6f:08:c1:de:12:a8:5b:72:b3:dc:88:8e:b6:81:61:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=480DA397F6E8580AF86613D8CFDA91FDF708D586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:73:d2:e8:15:df:43:8a:d2:e7:9a:89:0d:
73:b6:bb:5a:cb:67:be:86:06:d0:03:ee:e5:06:fb:
45:6e:2f:e0:ab:2a:b7:f3:6f:89:d4:2c:c8:64:88:
33:f9:7a:ed:a8:54:7d:d8:9d:30:d5:ae:40:f5:dd:
2e:09:d9:4f:18:b4:16:86:7b:f4:89:4d:85:ce:02:
e1:24:5b:5f:55:ad:2b:e4:c1:c5:30:83:5e:8e:dd:
77:b7:42:75:7c:71:ce:92:c3:f4:4a:7b:9e:83:ab:
5a:46:de:7c:b9:41:4d:f6:8e:63:f7:9c:b8:22:f2:
b9:0d:4a:27:96:6c:3e:f8:96:2c:1d:54:40:bc:1f:
90:37:e9:c7:82:db:00:e6:e4:cf:c4:69:8f:c6:3a:
56:12:52:61:d3:97:33:6d:af:0f:ae:41:22:3f:c9:
c6:f5:cb:16:65:e3:e0:73:4a:e4:ee:5a:14:f9:c4:
47:8f:25:25:ba:07:65:0c:e8:0e:4f:d1:77:47:da:
e1:f9:d1:61:38:62:8b:a3:fc:95:e5:25:c2:0a:e9:
ac:95:44:70:e1:fa:30:58:ec:f8:ac:4f:6e:90:cf:
f9:39:c8:8d:94:c8:e8:79:f0:9a:f6:43:24:68:29:
49:f4:48:54:62:45:d3:54:43:be:c0:84:a0:f3:6e:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:A3:97:F6:E8:58:0A:F8:66:13:D8:CF:DA:91:FD:F7:08:D5:86
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
69:73:c3:47:92:e6:65:49:f8:4c:61:c5:9b:9d:24:f3:ae:78:
64:20:a3:e3:30:33:37:2d:b3:3a:97:ec:f8:40:bf:9b:0b:30:
a3:91:7f:72:52:c8:39:e8:75:5b:9a:7d:94:6e:7b:e6:2d:35:
42:35:5c:31:0b:1b:a7:d5:e1:55:b0:23:1c:bf:f6:56:5e:39:
85:9f:f2:d3:4c:29:83:81:73:0e:01:eb:c7:a9:ae:aa:cc:9e:
3f:ae:36:56:b3:7f:41:e7:11:5d:63:dd:f9:d7:63:ed:ed:48:
54:af:08:ea:1d:a5:2c:64:8d:43:70:f9:de:e1:db:5f:c3:5a:
05:6a:8b:14:1d:06:a8:74:6a:92:c8:a0:7e:cd:59:25:d9:62:
69:b6:9e:42:a4:81:d2:44:7d:ba:cb:f6:6d:8f:73:b1:7b:83:
33:e8:41:57:7e:21:fb:ba:04:b0:1c:93:75:ba:75:8b:a9:1f:
b9:46:11:2a:3e:48:48:37:6d:a0:e4:a5:d5:37:c3:e0:a3:c5:
c8:30:b1:79:7a:29:86:c2:be:34:fe:cd:39:fa:c1:63:db:9a:
cb:75:50:9b:e3:c6:5d:9a:75:dc:f8:14:86:8a:17:28:b1:1a:
a3:b7:34:75:58:dd:8c:6c:72:34:4e:db:f9:78:b7:d6:0d:7b:
dc:0f:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:00:59 2025 by rpki-client