Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
File: 323830343a333361383a3a2f33322d3430203d3e20323635343130.roa (raw, json)
Hash identifier: HnURTvhc4y2YxbyiLm8VbUiLIG9ARBMMOsjRD7BD99w=
Subject key identifier: 50:30:90:7E:EF:7E:E3:BA:BD:59:32:1A:46:B8:BD:37:84:63:91:5F
Certificate issuer: /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial: 571B9E4A61C1183A4E2A0E08293BFF7FBFBB3E58
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
Signing time: Thu 04 Apr 2024 16:32:58 +0000
ROA not before: Thu 04 Apr 2024 16:27:58 +0000
ROA not after: Thu 03 Apr 2025 16:32:58 +0000
asID: 265410
IP address blocks: 2804:33a8::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1b:9e:4a:61:c1:18:3a:4e:2a:0e:08:29:3b:ff:7f:bf:bb:3e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Validity
Not Before: Apr 4 16:27:58 2024 GMT
Not After : Apr 3 16:32:58 2025 GMT
Subject: CN=5030907EEF7EE3BABD59321A46B8BD378463915F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:12:f3:28:c2:16:d7:ca:27:55:4a:84:d3:
0c:8a:15:7b:a2:5a:6b:80:5c:e6:56:88:79:db:cd:
d6:5d:b0:84:04:00:86:96:7e:7d:5e:60:2c:8c:f6:
87:c1:3a:d1:e8:ab:ac:08:8a:42:c1:7f:5f:7f:66:
99:3e:f2:01:74:6a:a9:92:25:fc:65:e9:60:df:42:
df:a0:83:ee:48:31:80:4f:1b:81:d1:4f:e7:fe:ad:
4b:b4:12:67:04:6a:01:6c:f8:18:2f:d9:ea:23:84:
b8:7e:9f:37:13:f8:22:0d:08:93:90:26:aa:d0:3c:
84:01:0d:23:7d:07:69:d8:db:04:7b:1d:f4:ef:0d:
52:b7:68:bf:1e:86:f1:60:8e:b4:94:47:86:8e:f0:
d2:3c:24:93:18:f0:36:ed:78:7b:08:49:e8:9c:98:
e7:95:1f:a9:18:4e:a7:fc:09:7d:0c:dc:d1:db:0c:
c6:41:da:09:49:76:f1:2a:a9:06:22:27:ad:65:5e:
33:e1:d6:40:42:fb:e4:b9:73:df:24:9a:14:b3:80:
59:a0:3c:e7:c7:e7:65:38:0c:53:97:fb:96:83:9a:
7d:f7:f3:5e:21:40:b9:15:da:60:c5:d0:78:59:a4:
92:c2:62:69:e3:86:c7:4b:4b:ed:12:b2:35:df:45:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:90:7E:EF:7E:E3:BA:BD:59:32:1A:46:B8:BD:37:84:63:91:5F
X509v3 Authority Key Identifier:
keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33a8::/32
Signature Algorithm: sha256WithRSAEncryption
c6:4f:17:8a:de:5f:92:bb:45:09:f5:60:e6:72:0e:9e:9a:dc:
2a:f7:8a:9f:05:20:a0:03:8f:cb:6d:3b:61:25:55:34:f7:5d:
f0:ab:39:97:52:70:54:13:ca:19:1d:91:d7:92:c1:8b:3a:29:
d1:69:a9:01:d8:7b:f1:6a:44:1f:70:8c:83:f2:40:a8:5d:6a:
5a:d4:48:d0:22:68:ef:02:ae:31:ba:a9:fa:d4:a3:47:10:5b:
2b:16:a0:0f:5a:97:52:2b:72:d8:f4:35:49:4e:2b:d2:7c:98:
e1:02:cc:ba:f6:e5:eb:44:01:cf:41:7f:00:49:0e:c5:70:b9:
8f:2f:9a:a5:bb:50:87:eb:83:4c:b7:ab:16:0c:0f:ab:9f:8b:
64:8c:c8:20:a1:59:7a:ed:56:d6:91:16:b7:7a:29:0e:ba:bb:
7b:aa:02:84:aa:ef:5f:dd:ea:34:bc:f2:95:5c:70:13:4c:d1:
af:ed:43:5d:e7:f4:77:2e:12:1a:69:de:ef:d8:31:b1:b8:dc:
e6:44:ca:a0:c8:f6:5c:a9:5a:65:07:e0:2e:e2:08:30:9c:53:
82:65:2d:83:8c:14:c1:01:ac:4f:5c:dc:48:ad:bc:7a:72:87:
c1:f6:fb:03:fa:1e:f2:dc:6c:60:67:84:b3:bc:2a:cb:17:4e:
9b:a7:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:35:07 2025 by rpki-client