Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
File: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (raw, json)
Hash identifier: CySMCeX1F8pLx/OQma+uJeDB02GrZU2CzHAb3GHm590=
Subject key identifier: CD:0E:FB:D0:8D:A7:A1:ED:38:10:75:D5:C8:AA:B6:71:67:C1:7F:62
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 277BB609F016BA901A5898BF9D71CFB1FD331FFD
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
Signing time: Wed 03 Apr 2024 18:31:36 +0000
ROA not before: Wed 03 Apr 2024 18:26:36 +0000
ROA not after: Wed 02 Apr 2025 18:31:36 +0000
asID: 268312
IP address blocks: 2804:4f38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7b:b6:09:f0:16:ba:90:1a:58:98:bf:9d:71:cf:b1:fd:33:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Apr 3 18:26:36 2024 GMT
Not After : Apr 2 18:31:36 2025 GMT
Subject: CN=CD0EFBD08DA7A1ED381075D5C8AAB67167C17F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:2b:7d:d3:3a:38:db:ed:97:51:33:05:b4:
c1:9b:53:25:64:c4:e0:65:fb:33:1a:43:d7:2f:a5:
d9:c7:8f:bd:c8:b7:ed:04:45:ee:e6:2f:37:66:15:
8d:52:6e:c0:f0:55:da:01:a4:59:b0:8a:c2:28:04:
81:4d:77:a4:ff:e6:cb:ee:02:d4:47:d7:a0:9d:2b:
ac:3a:67:df:37:d4:42:b3:f9:4a:23:a7:a0:8b:42:
ec:dc:50:c9:92:d2:9e:52:5e:29:18:ee:35:69:f1:
fb:52:41:61:62:2a:cb:e7:09:ae:46:36:58:b7:9b:
31:32:7c:ab:51:c3:2a:e1:79:1d:50:fd:92:9b:7a:
74:a1:8c:cf:9d:c7:b9:af:91:6f:b4:f6:af:82:c1:
c2:d4:88:98:45:c6:98:61:21:1c:01:2f:45:5a:d7:
9c:e2:19:26:cc:b0:34:08:31:32:5f:81:fc:08:f1:
a3:10:a4:f4:11:e6:88:56:f7:bb:f3:20:3b:2d:f5:
3f:1b:3f:4e:03:5e:ea:07:d0:48:c8:e1:18:91:e9:
66:f2:87:8d:ea:79:bf:fa:84:98:8f:4c:20:59:42:
64:71:af:8d:06:7d:2f:96:3a:78:68:d0:ee:ea:d3:
33:a0:06:ec:f4:2e:4f:63:d5:0a:2b:ae:06:5a:10:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:FB:D0:8D:A7:A1:ED:38:10:75:D5:C8:AA:B6:71:67:C1:7F:62
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f38::/32
Signature Algorithm: sha256WithRSAEncryption
96:7f:1e:dc:7a:ff:81:c9:4d:29:11:e9:67:a1:ce:4a:5a:89:
b8:f4:b2:9a:d9:30:9b:07:0c:57:1f:cc:27:5d:f4:4a:89:4d:
43:50:43:ca:8f:1e:4d:4d:32:28:35:2c:40:91:2e:9e:e9:03:
16:3c:54:90:ce:d6:69:71:28:68:91:ad:54:f9:48:cb:53:42:
31:a6:a8:53:64:87:fc:43:98:43:e4:4b:04:3e:0c:59:39:3a:
94:e0:71:e2:db:ea:9e:c1:96:ad:2c:91:e1:20:40:87:51:30:
af:fa:7c:c8:50:e6:3f:38:d0:17:1e:03:0a:bb:06:db:12:3b:
49:49:1d:81:71:e9:b4:3f:cb:b5:40:82:7e:1c:21:88:ae:6e:
25:c1:a9:34:cc:b8:00:d9:c3:65:15:85:6f:6b:9f:ce:d0:a6:
2a:e1:17:6c:c5:00:cc:ed:a8:8f:6d:e1:b1:e2:9f:8d:2e:27:
c4:cf:b3:44:03:68:e7:8e:6e:48:a9:d0:c5:e7:09:cd:56:4d:
3a:06:de:41:94:b2:7c:74:a0:fb:56:ea:ab:40:be:ea:4a:ad:
8f:48:f6:5c:a2:5c:93:80:bd:e1:e0:ef:41:ba:87:6b:ed:82:
cc:14:6f:7d:7d:2b:7c:ae:10:ce:26:10:1a:b9:48:74:6b:5b:
6b:fb:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:56 2025 by rpki-client