Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
File: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier: xTzlxTmn8Q2w5H3HpCVVPVMAiTm0RoF3xCkGCfL6ztk=
Subject key identifier: 17:F5:08:77:C2:1B:B2:0B:E0:86:BD:2C:54:3B:B3:F5:48:05:B6:9F
Certificate issuer: /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial: 6DA5087D8445120ABC8CCF4261277969A8632D75
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
Signing time: Thu 04 Apr 2024 17:03:51 +0000
ROA not before: Thu 04 Apr 2024 16:58:51 +0000
ROA not after: Thu 03 Apr 2025 17:03:51 +0000
asID: 270340
IP address blocks: 2804:6a80:3012::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a5:08:7d:84:45:12:0a:bc:8c:cf:42:61:27:79:69:a8:63:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Validity
Not Before: Apr 4 16:58:51 2024 GMT
Not After : Apr 3 17:03:51 2025 GMT
Subject: CN=17F50877C21BB20BE086BD2C543BB3F54805B69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:3d:23:8e:0f:f6:0d:54:8e:56:08:a8:6b:
32:82:07:65:79:e7:a4:2a:a7:de:87:73:73:26:8a:
2a:c3:f8:70:df:ec:4e:4b:bf:2e:76:8f:9a:44:be:
47:fe:8b:3b:88:a5:c4:e0:48:b4:55:ef:d4:dc:3d:
d9:58:ee:a9:0a:7b:74:b9:9a:7e:2e:f4:a0:2a:79:
ba:35:89:e2:2f:5a:a1:4b:50:a8:00:bf:50:8f:ac:
5e:e6:ed:4d:d7:e4:91:8d:b0:bb:5e:02:b8:d3:41:
4f:19:aa:99:d1:a0:75:e2:a8:aa:1f:34:f8:8b:3c:
b9:c3:4b:85:44:92:17:65:e0:b8:ac:96:87:36:aa:
c2:52:0f:51:dd:a3:65:46:3f:52:12:f3:1f:17:89:
d5:f9:7c:e6:e9:5f:02:8f:6d:6c:41:83:1f:60:79:
e8:99:8c:02:10:7b:1d:24:8d:32:97:f3:d2:9a:6a:
96:35:fe:d8:f0:66:e7:24:05:7d:3d:1a:55:7c:f9:
66:88:8f:20:ed:61:37:8f:72:28:a6:7d:22:ea:2f:
6d:9d:df:1c:9a:f9:68:33:47:28:66:4f:ed:bd:01:
b4:08:3b:b3:bb:16:b6:ca:35:fb:cf:d1:dc:9d:ba:
ba:1f:b9:cc:d3:92:7a:7a:31:d1:08:cd:f3:0a:9b:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:08:77:C2:1B:B2:0B:E0:86:BD:2C:54:3B:B3:F5:48:05:B6:9F
X509v3 Authority Key Identifier:
keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a80:3012::/48
Signature Algorithm: sha256WithRSAEncryption
7a:61:f2:f4:e1:3b:8d:8f:a4:9b:6d:bc:30:ac:a0:b3:bc:62:
cc:23:62:73:e8:3b:4c:9a:a6:f6:97:0a:99:e4:eb:26:78:cf:
0b:26:36:2e:f9:d7:71:4f:a7:2c:96:9a:b4:2b:3b:78:bf:76:
ea:4b:d7:ae:12:93:5d:fd:e6:7c:bd:b2:d9:4c:af:3f:ec:b6:
be:11:fd:ac:30:cd:40:b9:1e:99:86:b3:f7:a2:e3:0f:97:4e:
ea:1a:56:d1:65:fc:a9:11:c2:3c:2e:fd:40:51:c0:cb:c0:0a:
57:03:28:42:ab:50:54:0e:7c:2f:64:10:2b:68:95:cc:07:4b:
b3:25:61:64:47:d1:1f:31:48:34:92:6b:da:ad:61:6e:6a:aa:
e1:aa:50:01:79:45:b5:b7:b1:c7:5a:6c:4a:40:8c:b2:62:9c:
10:2c:0f:68:cd:22:cd:03:cb:b5:a4:7f:6a:b9:24:b7:9d:63:
ea:8d:e8:7c:ed:f3:68:a2:f3:fc:fb:c2:c9:26:c1:f0:83:c5:
40:a2:bb:b7:74:0c:1b:2c:26:e4:c0:61:37:9d:71:97:20:e7:
59:9c:48:db:b4:da:4a:4e:b2:01:32:ed:a7:7d:b8:46:da:33:
2e:7b:b5:45:b2:dc:95:19:e4:5f:fb:15:9f:89:f1:c8:e3:1e:
ae:71:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:03 2025 by rpki-client