Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
File: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json)
Hash identifier: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=
Subject key identifier: D5:D5:3A:9A:27:B3:7F:BD:E3:E5:14:82:08:EF:3C:EE:CE:E1:C2:7C
Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial: 093706A0071D60DBA1D50C5A021303E92AB8D442
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
Signing time: Mon 23 Dec 2024 21:11:15 +0000
ROA not before: Mon 23 Dec 2024 21:06:15 +0000
ROA not after: Mon 22 Dec 2025 21:11:15 +0000
asID: 273760
IP address blocks: 2804:8bcc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:37:06:a0:07:1d:60:db:a1:d5:0c:5a:02:13:03:e9:2a:b8:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Validity
Not Before: Dec 23 21:06:15 2024 GMT
Not After : Dec 22 21:11:15 2025 GMT
Subject: CN=D5D53A9A27B37FBDE3E5148208EF3CEECEE1C27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:55:55:ee:2f:68:2f:34:b9:7e:6c:a5:b7:
df:05:72:a6:6c:fb:f3:a6:62:a8:74:fe:aa:a1:17:
0c:81:76:1b:3e:cd:4d:7c:24:e0:8c:be:0c:4e:71:
ec:4a:ba:10:d5:0d:23:fc:b7:6c:d5:ba:2c:d9:6e:
04:55:a8:d9:bd:6d:06:bf:20:de:bc:f6:ac:bd:af:
15:10:93:54:2b:30:d0:b1:1d:e9:1d:77:29:9b:18:
b9:e5:df:cf:f3:1d:54:99:98:03:12:26:fd:0e:74:
ff:e2:42:0d:05:37:14:6f:90:fa:3e:58:e5:a2:d6:
19:0f:0a:5c:95:e8:06:28:57:25:10:1b:5a:a0:4b:
33:a6:d5:2d:34:e7:0f:cd:e2:7d:a5:6f:d5:cc:85:
9a:17:66:04:e5:0c:87:f2:78:56:54:b1:01:86:a6:
84:ed:d7:a8:6a:8b:aa:33:22:6a:89:78:3a:90:d8:
a6:1b:42:0f:c7:01:64:88:d3:cb:34:f7:8c:a8:b2:
5c:5b:f1:3b:b2:e5:b8:81:92:e0:77:29:bb:00:3d:
ab:6c:3f:e9:ee:ab:65:3d:9d:cf:03:56:1d:3e:5f:
5d:6e:cf:0d:43:d0:5e:a2:1c:09:c9:7a:56:00:5e:
99:c9:0c:5c:c5:3a:e9:88:da:ed:d6:58:36:12:cd:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:3A:9A:27:B3:7F:BD:E3:E5:14:82:08:EF:3C:EE:CE:E1:C2:7C
X509v3 Authority Key Identifier:
keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8bcc::/32
Signature Algorithm: sha256WithRSAEncryption
5d:a1:ea:29:32:0d:42:2d:2d:e8:47:1d:40:e4:67:c2:46:ee:
86:68:66:a8:c5:e3:8f:2f:de:72:77:d4:0f:3f:69:13:d9:94:
7c:f9:79:90:86:6c:1f:30:71:d4:74:57:3c:2d:9b:45:00:28:
e7:d8:36:94:ad:80:e8:57:80:70:9b:d2:55:93:0b:b4:cd:3c:
f1:a7:e9:90:89:ff:e9:ee:3f:ad:26:60:23:75:c9:ce:23:aa:
97:68:b8:b8:de:67:73:e1:68:6c:c5:8a:21:7c:fb:09:47:80:
bc:77:3b:1b:55:89:67:e1:43:6f:83:8a:e5:f2:ab:61:9b:90:
14:92:f5:9f:0c:5e:58:c5:20:b2:f4:c6:a0:f2:e8:e7:f7:52:
ac:0c:c7:17:43:3b:c1:d4:b0:61:6b:0e:ec:fe:07:d4:b7:ae:
37:8d:b1:82:2a:87:77:46:1c:71:cc:f8:ab:02:16:6a:b1:c9:
3e:d6:fa:b5:08:e6:81:29:d7:5b:f5:86:60:9b:a3:d1:2b:59:
aa:cc:37:f1:c1:4c:c9:72:8b:61:70:d7:28:8f:2d:b8:0b:1c:
b8:9c:d0:9e:80:62:ac:26:7c:d1:3d:b3:d8:39:da:6f:1f:00:
27:11:85:2b:53:55:bb:8d:5e:4e:a1:b2:53:b5:60:e3:41:80:
e2:7f:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:10 2025 by rpki-client