Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
File: 3133382e39372e36302e302f32332d3233203d3e20323634313330.roa (raw, json)
Hash identifier: 844M4BWdzU/4w9UH4GsHS2pUb5D3omvB3Rgy+TORdGk=
Subject key identifier: 32:8D:9C:DA:BE:D9:33:32:59:4A:1E:21:4E:6D:A3:8E:03:39:C5:A2
Certificate issuer: /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial: 5233A572CE4CEBE9D7D1D0861735180ED8DC29E4
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
Signing time: Wed 22 Jan 2025 13:00:00 +0000
ROA not before: Wed 22 Jan 2025 12:55:00 +0000
ROA not after: Wed 21 Jan 2026 13:00:00 +0000
asID: 264130
IP address blocks: 138.97.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:33:a5:72:ce:4c:eb:e9:d7:d1:d0:86:17:35:18:0e:d8:dc:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Validity
Not Before: Jan 22 12:55:00 2025 GMT
Not After : Jan 21 13:00:00 2026 GMT
Subject: CN=328D9CDABED93332594A1E214E6DA38E0339C5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:19:d5:bb:95:86:ce:e3:c5:33:bc:72:5d:
41:a4:e7:f1:ed:3a:68:34:90:cc:66:72:cd:d0:0b:
28:b7:24:6d:4b:69:2e:75:54:38:11:4c:31:12:dd:
1e:1c:5e:dc:b4:4c:f2:5a:8b:8d:22:ff:dd:73:07:
c6:99:e4:91:f9:91:33:4f:c4:1d:7f:57:6d:59:95:
df:91:78:b6:ef:2f:ba:f1:43:71:c8:88:96:19:bc:
92:5e:6e:96:63:53:cd:56:b0:e1:39:5b:9a:26:d7:
22:a6:0c:df:c1:fb:73:08:ac:48:7a:ff:ec:08:2d:
14:51:8e:36:c6:9e:06:5f:c6:95:1c:5f:0e:f1:fd:
f3:35:0c:04:91:0e:a6:74:22:43:d6:85:ca:96:b3:
09:88:fc:9b:f3:b7:f1:cc:68:74:3e:56:dd:0a:81:
1f:84:e8:02:8a:97:87:e7:24:68:43:47:95:02:5f:
0c:fe:bc:88:c1:97:9c:ba:4b:64:37:5b:6e:e4:d2:
2b:6b:dc:ab:7c:ea:30:46:6d:98:ba:bd:63:98:d6:
3d:43:9a:38:72:90:e2:09:a8:7f:e0:99:ce:fa:e9:
ed:fc:e5:0a:6a:b1:70:dc:4e:a2:a8:5e:b9:60:08:
ce:25:e6:c9:cd:bb:f0:b7:7c:1b:49:98:d0:7d:f0:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:9C:DA:BE:D9:33:32:59:4A:1E:21:4E:6D:A3:8E:03:39:C5:A2
X509v3 Authority Key Identifier:
keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.60.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:ea:21:b9:54:41:ec:de:20:8c:de:7a:a0:04:23:65:54:3f:
67:cd:75:ac:cd:77:c3:aa:e5:da:b6:e9:2f:0f:a6:bd:8b:5c:
10:01:97:83:33:cf:5d:5b:ff:db:22:86:1d:77:92:f2:5e:c3:
af:09:e3:ed:9a:48:21:f2:a8:31:2f:5c:9b:1d:72:09:52:cb:
fe:e2:6c:af:45:0f:ea:90:ba:20:db:c3:4d:ce:e2:1c:18:df:
73:ce:10:f3:d4:4d:b9:cc:55:b6:48:f4:ea:a3:70:45:43:fa:
54:78:78:a2:4c:a4:3b:e4:b4:92:59:3b:8c:b2:b2:94:cb:eb:
45:b1:24:70:2b:bf:5f:13:90:d6:0d:ac:e9:f7:65:48:7c:1e:
fb:bf:a2:ad:13:de:b1:96:95:04:ee:92:9d:c0:b9:98:0d:bf:
02:ed:1d:f1:13:08:8b:49:67:67:3b:60:a2:29:df:f7:e1:cf:
71:c7:4f:ad:c2:01:c5:5b:01:c1:ea:f2:e5:f1:72:01:f9:d2:
0a:0a:53:cd:76:1c:e0:71:90:56:27:2c:4a:71:ab:d3:1c:b5:
b0:40:c7:8a:3f:be:bc:1c:13:87:69:1f:1e:bc:f7:37:58:2e:
85:af:0c:39:e8:49:3e:9a:2f:90:a7:fa:8f:5a:93:c3:6d:71:
b8:a9:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net