Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235342e302f32342d3234203d3e20323634353631.roa
File: 3133382e302e3235342e302f32342d3234203d3e20323634353631.roa (raw, json)
Hash identifier: aHfePJRFTynnbAfzAF97mKQVZtoke0N7ijlh5xjzkI0=
Subject key identifier: EC:51:3E:29:54:16:0F:7B:A0:F1:59:94:B9:81:80:0A:82:D5:41:65
Certificate issuer: /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial: 5066D9F67065DD7E4AB91F033AAE62B31EC13BC6
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235342e302f32342d3234203d3e20323634353631.roa
Signing time: Mon 09 Jun 2025 11:40:50 +0000
ROA not before: Mon 09 Jun 2025 11:35:50 +0000
ROA not after: Mon 08 Jun 2026 11:40:50 +0000
asID: 264561
IP address blocks: 138.0.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:66:d9:f6:70:65:dd:7e:4a:b9:1f:03:3a:ae:62:b3:1e:c1:3b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Validity
Not Before: Jun 9 11:35:50 2025 GMT
Not After : Jun 8 11:40:50 2026 GMT
Subject: CN=EC513E2954160F7BA0F15994B981800A82D54165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:b5:c8:db:46:99:c8:9e:95:46:ce:c0:ec:
94:54:eb:e9:db:15:a9:2a:1f:70:26:cc:7e:3d:1c:
34:5f:7a:d5:66:49:22:75:26:e3:c7:1a:a1:ec:58:
53:4d:a5:0d:83:7e:0a:24:b9:18:ee:9a:3f:65:a5:
d7:60:89:ad:71:a8:94:6d:96:34:ee:90:80:ee:ea:
b8:04:dc:90:8f:9d:a5:76:37:26:9e:74:bd:4f:6e:
80:02:a7:71:78:05:e4:be:14:18:75:94:f3:8a:3e:
04:2b:19:4d:2c:a5:09:61:31:9e:09:d6:36:58:bc:
66:32:66:fe:a8:80:ad:d9:dd:77:d2:dc:16:e4:f0:
09:70:8c:0c:99:73:bb:69:ec:5d:9e:1a:87:3f:33:
1e:33:e9:ee:28:8e:4f:b3:23:3a:ec:06:9b:fd:ef:
1e:74:65:40:56:7f:79:f8:10:29:91:f4:b1:d0:6e:
96:df:ea:60:1e:59:7f:d9:cb:70:14:fb:fc:24:44:
34:6c:f5:3f:ac:ef:6b:e7:22:20:9c:54:d8:8e:63:
30:db:fc:73:b0:77:2a:1d:41:14:9e:88:c7:34:4b:
f0:9d:81:b0:d7:0c:17:5b:6d:75:2e:d6:b3:15:3f:
9b:85:fb:82:2a:be:12:41:ee:d4:e0:7f:30:9a:a6:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:3E:29:54:16:0F:7B:A0:F1:59:94:B9:81:80:0A:82:D5:41:65
X509v3 Authority Key Identifier:
keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235342e302f32342d3234203d3e20323634353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.254.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1f:5f:61:0e:2b:cb:86:ef:2a:d8:ab:05:82:ff:d0:05:26:
c2:d1:0b:e6:97:83:ea:7e:52:4c:7b:e4:38:e1:40:20:08:ef:
be:a6:80:6d:21:01:48:bb:b5:27:ea:fd:08:47:87:21:72:88:
4e:a9:78:7c:b2:1b:c0:9c:a6:fa:8b:91:e2:e3:63:06:d8:5f:
de:a3:d1:5b:18:01:47:db:d5:98:1c:db:7e:69:f0:4a:82:9b:
91:e7:b1:a7:89:a6:19:a2:c3:7f:1a:71:1f:06:2f:92:ee:26:
bf:e0:9c:77:63:9f:d9:27:2f:ae:57:b0:69:68:f9:29:12:6e:
7c:0a:14:9f:15:e9:01:20:1b:19:5f:bf:04:3d:10:15:f9:9d:
4d:d5:a7:bf:52:e8:56:0d:f2:be:5a:ae:c0:bf:b4:82:72:cf:
e7:26:d9:fa:90:64:a5:0a:ce:84:2b:7c:89:ed:d2:22:72:9f:
46:dd:37:d7:b4:cc:dc:78:d0:d1:25:1b:e3:e1:30:6e:80:6f:
33:2a:92:d6:aa:0b:06:74:77:88:2c:90:97:9f:4f:c7:9e:f8:
2b:04:f4:4b:ff:9b:38:51:30:3d:b1:9d:be:49:d8:a1:d9:f7:
a5:2e:77:c2:92:f8:ba:7b:9c:c6:a5:fb:57:3d:5d:f5:77:c6:
25:87:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:20:49 2025 by rpki-client