Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
File: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (raw, json)
Hash identifier: HZXxIF4i97WK+NxLmhVdMCjIzFkgSy9zE0XGNMfzrHU=
Subject key identifier: FE:3B:45:D3:04:BB:24:C1:87:66:92:EF:5B:45:84:CE:89:DE:7F:3B
Certificate issuer: /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial: 58102420148A257C8231B807296630B3F29F1FAF
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
Signing time: Thu 04 Apr 2024 17:47:11 +0000
ROA not before: Thu 04 Apr 2024 17:42:11 +0000
ROA not after: Thu 03 Apr 2025 17:47:11 +0000
asID: 265397
IP address blocks: 2804:3374::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:10:24:20:14:8a:25:7c:82:31:b8:07:29:66:30:b3:f2:9f:1f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
Validity
Not Before: Apr 4 17:42:11 2024 GMT
Not After : Apr 3 17:47:11 2025 GMT
Subject: CN=FE3B45D304BB24C1876692EF5B4584CE89DE7F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:dc:11:a7:f7:72:0e:96:1b:e2:6f:e5:3b:
be:97:fd:09:d2:09:31:fa:27:16:b7:c4:c5:7d:23:
97:d9:a3:92:10:6f:58:df:76:78:ea:34:26:d4:80:
27:f4:f6:8a:99:a7:04:0c:bb:eb:7e:b8:d6:7a:66:
c7:9b:88:13:49:03:bf:de:cf:93:07:06:79:26:55:
ae:f2:6d:44:a8:7f:03:4d:4e:8f:6a:92:6d:53:c5:
e5:58:cb:b2:ae:fe:d7:ca:1e:e1:34:6b:2a:68:29:
61:40:8c:ab:16:e0:9d:df:34:94:97:30:1d:c2:e5:
c3:83:ef:e3:1a:7c:88:55:e4:63:f4:ee:64:f1:99:
a5:37:74:3b:1d:5b:d0:66:b3:e3:a5:0f:03:32:10:
57:bd:3f:f9:f5:da:de:ce:78:55:88:bc:55:c8:fc:
bb:f5:08:92:a0:e7:10:c7:f5:93:69:c1:f3:c9:b6:
12:1d:f2:b0:5c:ae:c3:bc:ae:9a:24:54:33:6b:b7:
ae:37:39:4f:45:43:c3:01:96:ea:61:90:a6:fe:2e:
08:64:04:dc:12:8b:2c:ed:8c:72:3d:2a:b6:a8:46:
f8:59:57:5b:e6:70:0b:6b:59:fa:0b:d4:14:91:7c:
34:7c:7f:f2:55:d0:cc:4b:a4:d8:5b:37:8f:85:54:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:45:D3:04:BB:24:C1:87:66:92:EF:5B:45:84:CE:89:DE:7F:3B
X509v3 Authority Key Identifier:
keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3374::/32
Signature Algorithm: sha256WithRSAEncryption
63:96:87:75:43:09:06:e5:91:b1:22:95:56:64:b4:4e:7b:6d:
02:84:5b:1f:d3:97:51:cd:ef:45:ca:14:ab:80:45:83:5f:8b:
db:de:83:90:06:5c:0a:fa:6f:e7:ab:d7:dd:7c:6b:39:4f:cf:
01:57:54:bd:02:08:ae:9b:04:4a:d4:ae:7b:58:71:d2:c9:9f:
ca:8b:07:f1:7e:16:e8:bd:76:1c:11:07:ea:d0:97:bd:86:6a:
e8:9e:16:67:3b:6d:27:7e:8c:8b:24:8d:a9:00:1e:1d:f6:f9:
3f:12:c8:de:62:02:76:b2:77:6d:35:13:d4:61:e1:41:30:e7:
42:a6:cc:e6:51:16:fb:69:8c:55:15:20:7b:d6:a4:a2:b7:69:
46:dd:ee:79:59:2d:ec:79:2c:19:4b:e7:8a:96:77:93:0a:9d:
73:1a:9e:e9:fa:30:eb:e5:3b:00:e8:83:db:44:f6:7f:11:17:
d3:f4:3e:55:88:4c:6c:a5:be:84:1b:13:97:f5:e9:13:ab:d3:
e5:63:86:13:46:3f:b8:26:c4:9e:1d:c2:c6:da:b3:4c:fb:d8:
06:57:cb:32:bc:ea:54:9d:5f:19:43:9a:41:5d:61:85:df:ba:
a7:96:d4:2f:a7:18:e8:08:17:d5:b9:66:67:59:4e:45:1a:ac:
9f:0c:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:29 2025 by rpki-client