Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
File: 3133382e39372e36302e302f32322d3232203d3e20323634313330.roa (raw, json)
Hash identifier: bTbLLxsweBvCjD+jFvx2ULsPItDXKT/FkdzqtATTwtc=
Subject key identifier: C8:B7:E0:B6:0E:66:BA:21:F2:BF:D2:4F:34:4A:A0:6A:CE:86:DF:BA
Certificate issuer: /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial: 637E0BC3D885166601F3D88B893246846824FA8D
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
Signing time: Wed 22 Jan 2025 12:59:58 +0000
ROA not before: Wed 22 Jan 2025 12:54:58 +0000
ROA not after: Wed 21 Jan 2026 12:59:58 +0000
asID: 264130
IP address blocks: 138.97.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7e:0b:c3:d8:85:16:66:01:f3:d8:8b:89:32:46:84:68:24:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Validity
Not Before: Jan 22 12:54:58 2025 GMT
Not After : Jan 21 12:59:58 2026 GMT
Subject: CN=C8B7E0B60E66BA21F2BFD24F344AA06ACE86DFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:b8:4d:41:8a:f0:21:43:ec:96:51:de:01:
bd:a6:68:e4:20:f9:49:4a:40:f0:d0:c0:a9:4f:99:
47:4a:d3:c1:d1:84:ac:61:6b:51:a4:f0:6a:aa:7e:
8b:e6:80:6d:d1:88:41:58:10:a1:f8:8a:a2:df:be:
be:e2:75:b1:cb:c9:46:f1:1d:86:d6:0d:5d:90:1c:
c0:e6:cb:c7:78:52:4e:df:99:2c:fe:96:b7:ad:50:
58:f5:c6:a5:b8:32:89:a4:34:80:dd:59:a3:20:30:
22:df:24:00:07:66:cb:88:df:d3:97:9a:b2:42:37:
9b:64:2f:98:fd:8a:ad:51:0d:0d:3e:2e:df:85:2a:
d3:26:e8:6c:12:18:a7:27:b3:52:49:38:81:bc:1c:
21:e4:2d:7f:21:51:08:74:1d:11:75:57:1c:b9:0b:
9e:60:21:29:7d:e3:93:a6:8a:b2:63:b3:79:37:62:
8d:bd:03:d2:eb:53:36:98:f1:f6:d9:3e:ff:39:37:
9e:a3:6c:77:53:b0:ae:de:cb:0f:9c:c0:29:16:4e:
2f:f7:80:36:a6:bd:ea:07:eb:cd:df:f0:32:be:97:
bc:de:d3:8c:e8:71:17:83:82:69:01:db:c4:64:2d:
ea:0c:5a:72:6e:ca:f7:8b:42:3c:29:f8:3a:e2:11:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:E0:B6:0E:66:BA:21:F2:BF:D2:4F:34:4A:A0:6A:CE:86:DF:BA
X509v3 Authority Key Identifier:
keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.60.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ed:c3:55:e0:5b:f0:40:91:74:21:ca:e6:9d:f4:f6:4f:22:
db:20:4f:ea:ad:be:8a:1a:62:ea:c4:17:dc:bf:a5:25:e6:a9:
b2:44:69:39:76:8d:c3:4e:3b:b2:ab:48:eb:c0:61:7e:ec:b3:
1b:16:9b:65:5e:f1:06:c0:11:7f:b2:fa:c7:cc:53:1c:13:e6:
45:91:81:f9:f9:74:0c:36:4b:9e:0b:20:24:f8:04:f3:59:a0:
a5:81:8f:cd:1b:56:85:e6:81:a3:c8:27:32:e1:1c:69:de:0e:
c9:e6:ee:dd:5f:6a:7c:c8:5d:19:ec:b0:90:e2:af:cb:60:9d:
ca:9c:31:15:1c:87:67:03:24:ab:be:7f:bf:50:6e:ca:8f:dc:
6a:6a:4d:b6:69:ac:6c:40:94:be:d9:9d:85:c8:a8:0d:c7:19:
0b:e7:b7:a8:66:fa:49:62:6a:59:4c:36:24:83:cc:20:f7:10:
81:09:ef:47:0d:b4:84:b6:cb:d5:75:85:08:11:d8:49:1e:40:
d6:b9:3c:52:75:bb:eb:de:74:d7:4d:87:dc:c2:0f:ea:34:4c:
56:26:7e:2f:69:b5:40:da:3a:25:56:c4:1a:cf:73:74:85:be:
41:f7:b1:a1:dc:5f:e3:c8:a2:e1:00:8d:6b:02:00:e4:de:17:
3a:25:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net