Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232352e302f32342d3234203d3e20323632353639.roa
File: 3133382e39372e3232352e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier: yhLIoCtsv5Ocvu9n+XMuGjMhP6ADcZuSw8uFgIYrbjc=
Subject key identifier: B4:45:16:F6:51:80:A9:F0:10:8C:D9:CA:28:FD:08:59:EE:13:AE:8F
Certificate issuer: /CN=AFABB070256F52FADD82E9169A2968629C59D091
Certificate serial: 03920EAEF619FAA67350ACE827684672B2B443E9
Authority key identifier: AF:AB:B0:70:25:6F:52:FA:DD:82:E9:16:9A:29:68:62:9C:59:D0:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFABB070256F52FADD82E9169A2968629C59D091.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232352e302f32342d3234203d3e20323632353639.roa
Signing time: Wed 25 Oct 2023 14:43:34 +0000
ROA not before: Wed 25 Oct 2023 14:38:34 +0000
ROA not after: Wed 23 Oct 2024 14:43:34 +0000
asID: 262569
IP address blocks: 138.97.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:92:0e:ae:f6:19:fa:a6:73:50:ac:e8:27:68:46:72:b2:b4:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFABB070256F52FADD82E9169A2968629C59D091
Validity
Not Before: Oct 25 14:38:34 2023 GMT
Not After : Oct 23 14:43:34 2024 GMT
Subject: CN=B44516F65180A9F0108CD9CA28FD0859EE13AE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:2e:fd:f0:50:d4:ee:42:e3:c2:43:1b:34:
96:11:84:32:eb:c8:ee:a5:ee:e7:f4:0a:90:3d:c3:
70:db:d9:5a:5a:e6:60:d4:7b:96:bf:2d:18:02:46:
91:45:1b:56:31:52:d1:97:d9:4c:cd:7e:c1:ad:3e:
3f:68:3e:1d:11:1d:6a:84:25:5e:67:d4:bf:26:c6:
02:c3:53:b5:fb:fc:ec:c3:76:ed:a7:02:1b:2f:d6:
1c:3f:65:db:fc:91:b3:83:97:ca:de:f4:58:66:98:
3d:8e:7a:9d:9b:0e:75:cd:f2:59:c6:5c:e1:c0:16:
32:0e:6a:7c:bf:c1:2d:0a:5b:2a:04:13:71:6e:38:
b5:0c:eb:46:39:56:96:b7:fe:c2:a8:17:26:77:e2:
ef:aa:d1:fa:9e:03:cd:b2:0b:f8:66:bb:fb:92:e3:
d1:82:82:bd:79:b5:12:60:b1:b3:3a:68:82:8b:f1:
be:81:30:1f:d7:c1:3f:d5:91:ca:e4:90:38:8e:6c:
00:62:f7:4e:4c:25:c6:c0:12:7f:02:86:f4:27:47:
8e:0a:2c:6c:30:ea:93:a4:6e:a0:e7:b4:64:a3:e8:
dc:36:52:93:3d:5f:8a:44:8f:1a:29:be:c8:cf:83:
61:18:36:5a:f2:b8:e6:f3:4f:1a:e0:1d:c0:f1:f6:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:45:16:F6:51:80:A9:F0:10:8C:D9:CA:28:FD:08:59:EE:13:AE:8F
X509v3 Authority Key Identifier:
keyid:AF:AB:B0:70:25:6F:52:FA:DD:82:E9:16:9A:29:68:62:9C:59:D0:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/AFABB070256F52FADD82E9169A2968629C59D091.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFABB070256F52FADD82E9169A2968629C59D091.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232352e302f32342d3234203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e9:82:9a:26:55:fd:9c:27:79:35:2b:b4:fc:f0:5e:fb:9d:
73:26:c0:82:e7:ec:5f:38:49:3b:68:20:9f:db:a2:2e:01:e1:
86:e2:95:08:98:5c:96:cc:e9:57:2e:3b:0a:60:e8:3f:45:55:
47:4e:cf:91:db:ed:f6:52:ec:52:94:61:eb:78:02:cc:40:aa:
c8:ff:04:df:a6:67:e1:0d:d9:b5:d7:aa:15:75:97:9d:5c:c1:
8f:51:61:b0:be:f1:30:86:aa:d7:37:b4:51:ab:84:97:ca:d9:
ca:51:e4:b1:e4:fd:d4:53:44:bb:14:1e:ca:ab:0f:0c:4a:2e:
00:08:70:bd:c9:48:80:94:07:e6:e7:72:cc:6c:19:3f:9e:4c:
7b:47:38:8e:5b:62:74:9e:49:e2:63:2c:ea:e0:61:86:a9:a1:
9e:5f:6e:ba:70:6f:8d:16:f8:38:4d:8d:3e:96:8e:b9:1f:87:
8e:00:a1:e3:1e:52:4b:24:47:bb:44:75:1e:75:df:9a:fa:c7:
93:af:db:59:f1:25:3c:2a:17:91:8b:a5:b2:cd:a6:35:28:6f:
6c:b0:d3:85:4d:aa:52:29:83:3c:29:2e:c2:f4:6c:31:10:b1:
b8:bc:d8:c7:63:68:e5:2c:a3:de:09:52:66:d6:e9:98:a8:c0:
a9:28:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:58:38 2025 by rpki-client