Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa
File: 323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa (raw, json)
Hash identifier: xrCzYquvUYTg4Ig3svtxdc2EZS5WGmInkngqEpWwV/s=
Subject key identifier: D2:51:1B:8B:80:DC:1C:75:FA:C6:D9:9F:70:E4:70:26:15:DB:A8:C9
Certificate issuer: /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial: 5ADB6D1BC837FD250D101D1EDE6C34153ECCB2E1
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa
Signing time: Thu 04 Apr 2024 16:45:47 +0000
ROA not before: Thu 04 Apr 2024 16:40:47 +0000
ROA not after: Thu 03 Apr 2025 16:45:47 +0000
asID: 266437
IP address blocks: 2804:37d0:6800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:db:6d:1b:c8:37:fd:25:0d:10:1d:1e:de:6c:34:15:3e:cc:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Validity
Not Before: Apr 4 16:40:47 2024 GMT
Not After : Apr 3 16:45:47 2025 GMT
Subject: CN=D2511B8B80DC1C75FAC6D99F70E4702615DBA8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:b0:57:f6:01:64:1e:03:8d:2e:9d:b9:0e:
44:52:d7:c2:68:6f:1d:50:57:51:0a:f9:1d:58:ed:
ec:2f:38:c7:d6:96:9b:4b:1c:aa:67:d0:85:ec:bd:
87:b0:3a:92:b4:48:11:a0:4c:8c:d3:ab:17:51:3d:
53:f3:3b:02:e6:7f:db:f5:d6:80:56:f1:30:f4:73:
58:df:ab:3b:a4:9c:13:83:51:ee:ee:7c:d0:7b:b7:
db:ca:0b:a6:dd:1f:71:5b:81:ef:be:d7:dd:ac:51:
d8:a2:9d:3e:3a:7f:54:a3:c4:c8:0e:9c:56:ca:a7:
c0:09:29:08:7c:36:a0:de:d1:36:e1:94:21:95:b8:
cc:54:63:0a:a3:71:98:d1:41:ab:48:9e:8c:1f:b9:
cc:a9:3f:3b:f2:04:1a:63:78:13:c1:5a:db:79:d6:
58:ed:02:48:98:21:b7:e6:7a:a6:de:04:ca:bf:e8:
02:6d:9e:fd:71:bc:b5:7c:99:d1:d2:c6:49:c9:bb:
a6:6a:38:08:05:42:48:a5:6d:5e:91:f9:6c:e7:dd:
2a:da:a0:21:72:56:fc:f1:5b:e1:30:b3:b1:65:12:
d0:89:a9:e9:bb:cd:7c:1a:ea:17:1f:69:23:bc:94:
62:a6:d1:92:ef:d6:0d:ec:ef:08:e6:cf:60:09:b5:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:1B:8B:80:DC:1C:75:FA:C6:D9:9F:70:E4:70:26:15:DB:A8:C9
X509v3 Authority Key Identifier:
keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:37d0:6800::/37
Signature Algorithm: sha256WithRSAEncryption
50:1d:b0:4b:35:c2:68:03:e7:48:d2:77:81:17:fa:7f:e4:05:
05:33:72:33:30:a8:69:39:d1:1d:d9:93:95:27:71:5e:c9:59:
4d:c2:ea:95:9e:c5:8e:5f:09:62:73:c1:c4:e0:4f:78:a0:b4:
0f:e0:70:28:82:fd:0f:9b:d3:be:0f:57:de:32:c9:38:64:ce:
f3:11:cf:85:6a:5f:5a:1b:4f:49:be:75:e3:85:73:23:0f:1d:
6e:62:c7:c8:eb:74:f9:bb:17:47:40:1d:57:71:70:77:f8:ad:
e8:64:93:88:45:f5:30:c7:5f:32:dd:de:a3:6f:c8:35:e5:1d:
93:83:90:02:5f:24:ba:4e:d9:a1:eb:f4:81:43:e6:4f:1e:8b:
46:39:3f:e4:8c:c1:0b:35:b4:ca:2e:7e:9c:69:c5:6c:fa:9a:
b2:a7:d6:16:d3:e3:31:86:22:1c:cc:6b:07:ff:bb:74:64:27:
c3:ff:bd:78:d5:f7:43:72:d2:88:4f:29:04:c8:c9:f6:5c:a6:
ff:78:ca:4d:9c:fc:50:62:e4:c4:63:0f:d0:80:4a:12:26:ce:
df:75:9e:31:73:5c:39:e2:8c:2d:19:13:da:82:06:d0:73:30:
c3:31:e9:41:2d:ad:35:46:f2:f5:03:7c:3c:62:4e:06:af:0c:
99:36:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:19 2025 by rpki-client