Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa
File: 3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier: jRRmpkYINt6f7Kh0pdTxWCvw9ovtGEVlyUA0cJo4gA4=
Subject key identifier: 7A:16:65:D4:F5:51:E4:0D:5E:67:AD:03:FF:0D:4C:56:0C:F7:36:76
Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial: 6FED99DE1BCB9CEFE76CBBD164AF65EE56F44CA5
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa
Signing time: Mon 03 Feb 2025 20:58:36 +0000
ROA not before: Mon 03 Feb 2025 20:53:36 +0000
ROA not after: Mon 02 Feb 2026 20:58:36 +0000
asID: 263911
IP address blocks: 138.204.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ed:99:de:1b:cb:9c:ef:e7:6c:bb:d1:64:af:65:ee:56:f4:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Validity
Not Before: Feb 3 20:53:36 2025 GMT
Not After : Feb 2 20:58:36 2026 GMT
Subject: CN=7A1665D4F551E40D5E67AD03FF0D4C560CF73676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:98:70:8b:f9:2b:37:93:32:c4:32:8f:47:
17:3f:33:67:d5:02:cd:ec:60:a9:53:93:e7:fa:15:
97:72:79:13:d6:eb:63:b1:c3:d0:eb:35:f5:b8:ae:
5f:5d:d3:dd:6b:6f:3b:16:23:f6:55:ce:dc:46:26:
b3:0d:cf:95:20:d9:b2:15:3f:5e:92:95:50:c9:2e:
ce:c9:da:33:fa:88:c2:da:a5:ff:24:b4:c4:f1:35:
a7:d8:20:2c:64:2e:11:49:cb:50:a4:99:05:a1:95:
06:db:ea:90:87:76:8a:1d:bb:f6:84:5f:d1:c3:06:
e4:eb:2a:ba:f3:80:2a:16:0a:9c:f6:26:6a:69:dd:
26:f9:01:53:77:c0:00:40:58:49:59:18:c3:08:6c:
cc:08:c2:9f:59:51:9b:7f:55:de:ac:48:ce:c6:13:
e6:4f:bc:83:a6:52:07:29:2a:22:8f:1e:a5:28:0a:
3c:4c:96:6a:0f:4c:19:8f:5c:d2:9b:8c:a6:04:4c:
7c:b9:de:38:ee:96:d4:2d:4f:2d:5d:95:9f:80:7a:
b2:53:e4:79:fb:04:c8:4f:54:93:18:a8:08:41:ca:
22:bc:60:10:90:83:36:4c:eb:0b:58:64:17:5a:f0:
28:2b:0d:65:26:9c:af:d5:7c:b2:f2:95:6e:da:1d:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:16:65:D4:F5:51:E4:0D:5E:67:AD:03:FF:0D:4C:56:0C:F7:36:76
X509v3 Authority Key Identifier:
keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.172.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:be:71:f3:f3:09:12:58:e5:1b:d7:62:e4:9a:06:23:16:1c:
15:c6:57:19:59:c8:ca:8b:fe:57:c5:d0:99:83:c0:08:0f:cd:
4b:d3:06:77:b3:9b:39:45:2e:fd:05:95:d3:78:21:38:39:29:
e9:7d:dc:e6:56:70:61:1c:ab:d5:c5:ce:e8:15:f2:bb:e1:89:
2f:48:ad:b6:47:ed:a3:8a:71:8d:d1:f6:0d:8d:17:7b:cb:94:
75:27:6e:04:c8:12:1d:67:b5:c5:39:3a:f6:b8:ef:bb:d9:36:
2c:30:53:56:82:36:a4:d7:f7:22:00:9b:47:19:f7:0c:63:14:
e9:66:79:27:76:3a:8b:89:9b:45:2a:47:33:00:6d:d0:cb:45:
be:50:b7:29:c7:a9:10:fe:a1:cb:c8:3f:89:7b:c6:f6:6e:3c:
c7:d7:01:a8:49:d8:0f:5b:b4:82:b6:3b:f4:d9:61:9b:62:0d:
28:6b:92:98:9a:d4:d8:9b:1c:e6:1f:32:1a:44:ae:f0:2a:e8:
60:2e:ac:4c:d5:86:a4:47:a9:79:c6:13:7a:8a:8b:1b:ce:a8:
88:bb:66:5d:d9:b6:2f:01:55:c6:62:1c:1c:13:7a:37:bf:db:
f9:da:57:33:e0:0a:16:5c:0f:7b:4d:10:94:5d:2e:6c:34:90:
df:11:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:16 2025 by rpki-client