Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa
File: 3133382e39372e36322e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier: kYiTCApQSP0LTORa6t8E99bkq6DgkuFdgAkHRnccbRg=
Subject key identifier: 6C:A3:70:BF:D0:4D:A0:E1:B0:86:FD:90:E9:1E:CA:D6:F9:A3:10:38
Certificate issuer: /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial: 088CBC3183F52D362EFF5C5400F512FB04CBB050
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa
Signing time: Wed 22 Jan 2025 13:00:06 +0000
ROA not before: Wed 22 Jan 2025 12:55:06 +0000
ROA not after: Wed 21 Jan 2026 13:00:06 +0000
asID: 264130
IP address blocks: 138.97.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8c:bc:31:83:f5:2d:36:2e:ff:5c:54:00:f5:12:fb:04:cb:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Validity
Not Before: Jan 22 12:55:06 2025 GMT
Not After : Jan 21 13:00:06 2026 GMT
Subject: CN=6CA370BFD04DA0E1B086FD90E91ECAD6F9A31038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:f8:79:82:83:cd:3c:cb:42:ce:96:e4:4a:
9f:8c:d6:cc:54:27:0b:3c:99:80:0a:01:7d:91:6e:
1a:cf:fe:d7:27:b2:1c:9c:fa:95:98:21:ab:a6:60:
e8:76:1d:6a:c5:91:72:e5:43:1d:21:9e:21:1e:5f:
91:36:9b:eb:39:2b:3b:35:ef:61:5b:e2:48:ea:33:
43:b7:dc:68:66:62:48:f9:9c:71:bf:dc:7a:ec:09:
2c:97:e4:40:d9:51:d4:68:26:76:97:c5:9c:7b:d4:
d7:a9:34:68:e1:2e:50:ef:68:88:db:e3:1a:fb:36:
6d:7f:b0:06:fa:0a:3a:bf:ab:df:a1:26:a5:60:59:
9a:44:f0:80:58:69:60:74:9f:04:43:b8:de:b2:ea:
ee:9f:f5:ac:c0:4c:13:0d:79:bc:5c:03:59:19:d0:
5b:eb:a8:cd:20:3b:b2:0a:59:2a:d9:04:f3:ff:36:
b9:40:43:ab:89:b9:b0:1a:1a:c2:da:5a:bf:7e:e3:
38:f1:a7:4b:79:fb:e2:7f:b7:34:e7:10:cd:66:75:
00:eb:c5:a6:b5:27:ff:35:38:4e:79:1b:ea:ca:35:
be:d0:06:fa:ff:ce:20:43:89:b6:99:9a:76:97:a9:
53:cc:f7:cc:8a:ba:5c:2f:2f:f4:4c:55:eb:ab:02:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:70:BF:D0:4D:A0:E1:B0:86:FD:90:E9:1E:CA:D6:F9:A3:10:38
X509v3 Authority Key Identifier:
keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b4:b1:07:7e:13:3a:ec:0c:4a:d2:da:57:6b:6e:e6:88:02:
80:1c:1d:fd:4b:17:03:3e:1b:95:f8:db:07:16:8c:df:f5:7a:
97:4a:ed:c9:6e:b2:e1:3a:26:89:39:60:74:cc:39:13:2c:50:
ea:4e:fa:cc:07:e3:b6:cb:f8:d7:4c:31:9e:4c:d8:bc:88:a0:
10:39:db:56:b8:f5:28:bb:e4:ab:39:1e:0e:d4:ef:d7:f2:bc:
54:66:a0:06:c4:0b:34:ed:e8:33:45:6d:0f:7a:74:8f:97:ea:
93:3c:ad:c0:75:fb:40:00:97:af:3a:2f:fd:2b:2c:45:c0:c5:
f5:4d:b1:a9:b3:fe:7f:ec:1f:d2:a5:72:ce:88:44:86:ab:3a:
49:ed:44:fe:61:9d:dc:7a:16:05:ab:ad:6b:13:c2:47:1c:d0:
5f:16:09:d0:09:8d:55:c0:f0:ab:d3:df:ad:e8:53:b1:56:13:
4f:3b:5c:9d:95:0a:73:ca:89:36:1a:87:82:fe:de:05:f7:d8:
32:10:25:2c:3e:f7:3a:1f:e0:66:44:d4:70:55:66:d2:31:b3:
b8:4a:0a:7c:55:00:59:97:6f:cb:e1:65:05:b4:6e:92:42:78:
be:1b:de:97:79:91:47:16:35:b5:3c:27:05:bd:39:c9:cb:95:
7e:82:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net