Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3232203d3e20323634323136.roa
File: 3133382e39392e3139362e302f32322d3232203d3e20323634323136.roa (raw, json)
Hash identifier: v7o1kadSiMlmy++tieJU63DRBXPEOX1vKNPY1SGUS1A=
Subject key identifier: 70:07:19:39:EA:5E:A7:3A:A2:44:4F:3F:D1:F6:66:B4:D1:77:32:C3
Certificate issuer: /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial: 3CD4A1CE97A0C5FC2D57531164ED9A2BDAB0F651
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3232203d3e20323634323136.roa
Signing time: Tue 20 Feb 2024 12:18:07 +0000
ROA not before: Tue 20 Feb 2024 12:13:07 +0000
ROA not after: Tue 18 Feb 2025 12:18:07 +0000
asID: 264216
IP address blocks: 138.99.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d4:a1:ce:97:a0:c5:fc:2d:57:53:11:64:ed:9a:2b:da:b0:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Validity
Not Before: Feb 20 12:13:07 2024 GMT
Not After : Feb 18 12:18:07 2025 GMT
Subject: CN=70071939EA5EA73AA2444F3FD1F666B4D17732C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:41:61:35:d5:88:43:1e:3e:9e:bc:e3:c7:
a4:de:65:3c:36:6b:c9:12:3a:f3:19:ec:d8:d3:57:
03:be:c7:33:fc:0e:e5:6b:0f:95:46:91:6f:53:95:
1d:f6:37:e0:94:18:71:51:e0:1a:08:71:34:17:26:
a2:53:38:5c:dd:5f:53:2f:28:16:80:6c:ea:a7:4b:
ed:06:ef:fd:9e:d4:97:f0:6b:47:6a:ad:38:bb:64:
3a:be:91:19:70:3e:1e:1c:cb:d7:27:2a:d6:06:f7:
43:32:14:79:08:9a:ea:d1:67:af:7a:38:76:6a:54:
67:b9:ec:9a:08:7f:fa:bc:b1:15:46:a2:3d:c9:11:
9e:52:3f:1e:81:26:35:b0:ec:2b:ca:0f:1a:1c:cc:
12:0f:9b:70:a1:f8:b7:5d:f0:4a:0e:f0:70:a0:56:
65:28:22:db:50:af:69:6c:f0:f2:f1:5f:82:03:57:
2c:4a:5a:36:ff:15:40:f8:a8:94:d2:ff:b1:57:d4:
fb:85:24:f3:66:91:b1:cc:ed:c1:23:73:ce:cb:3d:
a6:8f:d0:91:03:a7:dd:dc:2e:09:06:57:78:22:85:
6f:ee:d7:2e:dc:13:ab:ad:72:50:21:b3:d9:35:54:
29:ce:9a:a5:1a:4b:20:8c:93:75:f1:f3:e5:fc:2b:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:07:19:39:EA:5E:A7:3A:A2:44:4F:3F:D1:F6:66:B4:D1:77:32:C3
X509v3 Authority Key Identifier:
keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3232203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6e:a4:e7:76:d5:64:71:a6:63:96:0a:c1:26:65:89:d1:c4:
2f:3a:6d:b7:85:0d:42:67:ae:13:00:f4:d5:02:7d:4a:ee:c7:
eb:06:d4:a2:4b:11:f5:c6:66:3b:4b:2e:2c:83:25:a9:26:d2:
39:94:10:8b:9d:f8:05:fd:e3:cd:45:c3:e8:df:cd:28:00:15:
41:0b:b5:1a:14:49:e4:09:6d:86:50:db:c0:2f:e0:b1:31:9f:
d5:e0:51:94:2a:11:0e:31:16:43:16:b3:fa:93:42:5d:e2:d4:
73:7f:78:25:5b:48:4c:1b:1f:98:9f:b4:af:d3:d0:59:e8:9e:
f3:55:9f:e2:a6:5b:20:3c:06:c9:ad:96:3d:7d:d6:ab:a3:6f:
fe:6b:32:76:29:8a:1c:c8:c7:fc:58:57:c9:cc:52:4e:07:77:
d7:d7:de:93:ea:61:04:cf:a6:df:4a:f9:a2:95:ad:94:65:83:
3c:ec:fd:08:44:d1:b5:c9:ae:15:eb:f9:33:24:05:d2:cb:f9:
a7:04:f2:e9:fd:3b:97:ca:e1:7c:c1:83:78:58:9a:06:d9:99:
8e:20:8c:67:4b:4a:cc:c2:59:56:82:a0:bc:40:f4:4e:52:a5:
8f:1f:b5:26:55:cc:59:72:f6:38:66:74:6f:ae:4b:b2:e2:b1:
8b:81:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:53:49 2025 by rpki-client